Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa
File:                     71d79ed5-be79-3077-ad29-924a1444f206.roa (raw, json)
Hash identifier:          dlC7HBbMXbk6nO8hSVf8cPiuoOgxv123nAILdK+L4r8=
Subject key identifier:   3B:1B:C3:D7:B7:67:D2:3F:37:DE:26:C6:B9:72:54:49:8E:DA:EA:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4559E235C1F3325F7E881D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:c347::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e2:35:c1:f3:32:5f:7e:88:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=55f0e053-f17a-4d3a-9734-b61074145e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:28:f4:39:80:3f:f2:04:ba:1f:f3:e7:72:36:
                    54:7a:dd:5b:51:48:ab:d9:41:cf:d3:9c:46:10:09:
                    fb:58:43:eb:a7:99:53:30:ac:c1:32:2d:00:90:f4:
                    55:e6:e4:dc:85:8e:47:f4:f7:8d:c6:f3:42:61:97:
                    fa:d9:57:dd:86:f5:4c:3f:55:46:ec:5e:be:ce:4f:
                    09:e9:46:ae:ca:45:5c:ac:95:90:c5:9b:6e:08:48:
                    21:a9:3d:72:a6:03:d7:33:47:41:bc:60:5c:41:6c:
                    66:28:38:9b:28:64:53:d6:ff:f0:38:45:ce:40:a2:
                    20:15:d7:22:d3:97:14:dc:b0:a8:f9:c6:f6:21:e9:
                    f4:64:d3:b2:1b:55:e1:9a:b0:ad:9e:38:01:88:11:
                    c6:41:5a:bf:0f:4a:e0:70:55:22:03:f2:ec:3b:16:
                    b7:c9:af:df:d2:ff:15:24:d2:b7:68:53:83:38:e9:
                    f3:36:c6:77:69:e3:0e:95:c9:fd:5a:92:5d:cf:90:
                    dd:48:10:ce:6c:d1:1f:c5:35:5e:65:cb:d6:27:dd:
                    e2:28:54:71:88:0f:6f:21:72:24:23:91:ad:64:40:
                    de:86:80:67:ef:cc:f8:8f:73:fd:d4:cb:37:cc:a0:
                    d1:35:35:bd:0c:1e:ec:12:3a:4c:75:0e:9f:8c:73:
                    4b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1B:C3:D7:B7:67:D2:3F:37:DE:26:C6:B9:72:54:49:8E:DA:EA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d79ed5-be79-3077-ad29-924a1444f206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c347::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:38:a1:ef:76:75:1e:69:18:2e:0d:8a:48:05:2c:83:03:61:
         4d:97:d3:c1:cf:20:c1:bf:7d:45:cc:6b:a4:65:34:a9:db:75:
         c7:43:f1:b3:7e:8c:54:c4:a7:f8:d6:21:a8:f5:2f:77:fb:d0:
         c6:b2:79:01:83:2d:e7:9b:1e:32:c7:5a:7e:c8:a4:8b:b8:19:
         cb:0b:cb:ad:27:6e:66:3b:bc:b9:b2:0c:af:a3:0c:6a:0f:07:
         a2:73:1a:e1:70:78:7b:48:b8:77:b5:c2:2c:a9:ce:b7:8a:19:
         50:98:eb:e5:f2:0f:bf:b3:25:44:de:4e:dc:64:0e:71:94:1b:
         ad:b9:cd:62:a0:37:d4:b8:aa:a1:c8:27:0a:c3:77:3c:0d:95:
         54:b9:f4:e0:33:6f:4f:61:69:c3:fe:b3:05:80:69:76:71:81:
         c5:1f:9b:99:2b:f9:74:28:d5:76:ae:3d:92:eb:ba:4d:b3:e6:
         d7:01:8f:0a:81:62:17:0d:77:aa:a2:7f:0a:06:da:39:85:65:
         6b:5a:69:c9:0a:e6:83:68:08:5d:a3:c8:80:40:fb:9c:83:c3:
         b8:7b:d5:9c:6c:b6:2a:7f:44:48:6d:87:87:b6:1f:3e:6e:48:
         81:44:77:53:25:21:fd:3d:5e:9c:68:31:3d:d3:2d:24:58:c5:
         15:f5:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:45:09 2026 by rpki-client