Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb/6b5bd6d1-cdf8-354e-9a5a-eed27149bc0c.roa
File:                     6b5bd6d1-cdf8-354e-9a5a-eed27149bc0c.roa (raw, json)
Hash identifier:          cUQzSV3+VWzGk4xdmLR7/WiMlgqQohtpVHxhUdv8mQc=
Subject key identifier:   42:B1:9E:A3:94:BB:8C:AB:14:DC:14:04:62:2E:79:E2:7C:02:DA:BB
Certificate issuer:       /CN=77b3361f-2809-4a97-90f9-0d45af9aacfb
Certificate serial:       010D0C9F4328584ECD3725B52A4410CEF2D1AA00
Authority key identifier: F2:0C:87:61:59:89:CA:54:91:95:8C:7A:46:93:18:54:23:3E:13:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb/6b5bd6d1-cdf8-354e-9a5a-eed27149bc0c.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     23420
IP address blocks:        2605:9c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb/77b3361f-2809-4a97-90f9-0d45af9aacfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb/77b3361f-2809-4a97-90f9-0d45af9aacfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:25:b5:2a:44:10:ce:f2:d1:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b3361f-2809-4a97-90f9-0d45af9aacfb
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=95cbd450-6158-4cc7-b367-3c6407bec7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:8e:4a:04:0a:ff:ae:92:dd:d6:20:01:53:
                    8e:e7:07:b6:be:58:1e:98:cb:ea:3c:2d:12:9b:03:
                    74:05:c5:1f:ae:c2:b5:3d:fc:f7:3a:d7:ec:c3:ab:
                    84:c7:5e:fe:25:cd:55:8e:e4:f6:63:d5:62:a4:cb:
                    d2:a1:04:d6:c1:8c:5d:cf:75:3f:d4:f0:00:00:e1:
                    1e:55:2a:89:54:88:eb:59:88:dc:c9:6e:5d:96:c8:
                    af:dc:62:71:5e:44:74:f6:0d:a5:05:ed:7e:2c:e1:
                    75:a6:33:72:a2:e7:98:12:ff:0d:20:e7:0a:d7:e1:
                    10:df:94:7d:c4:a7:88:92:fd:e1:8a:e9:9c:49:c1:
                    6e:83:ff:7d:23:63:9d:73:ad:4e:85:bb:ce:b4:a0:
                    a8:56:f6:39:c5:24:cb:6b:90:c3:a3:90:2c:05:39:
                    e7:09:4f:31:2d:f9:80:b5:8c:cc:d5:7f:ec:a4:83:
                    54:a9:62:b8:39:8c:bc:a0:f3:e8:f7:de:01:2e:07:
                    02:d1:e2:ee:df:df:ed:a2:7d:32:c5:6a:47:7f:84:
                    fe:9f:02:38:65:01:9a:06:c4:e1:42:b6:8e:25:8d:
                    d0:24:e5:75:55:7e:fa:9c:1e:da:3a:7e:30:c8:a7:
                    c6:0d:df:c3:50:2e:8e:d6:eb:f9:91:cd:20:08:7b:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B1:9E:A3:94:BB:8C:AB:14:DC:14:04:62:2E:79:E2:7C:02:DA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb/6b5bd6d1-cdf8-354e-9a5a-eed27149bc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb/77b3361f-2809-4a97-90f9-0d45af9aacfb.crl

            X509v3 Authority Key Identifier:
                keyid:F2:0C:87:61:59:89:CA:54:91:95:8C:7A:46:93:18:54:23:3E:13:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/77b3361f-2809-4a97-90f9-0d45af9aacfb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:36:f4:b6:09:c7:f4:b4:58:d1:1d:6e:a7:f9:b6:0f:c9:
         88:07:14:aa:4e:b5:a8:4f:ed:72:09:ad:69:e3:b8:86:d1:52:
         70:83:be:f2:53:42:f7:b0:29:24:61:30:3d:b3:d1:09:0b:94:
         ec:36:15:6f:59:69:ee:a6:f0:6d:b6:53:18:78:a4:d9:0f:55:
         3e:00:c6:90:e0:25:58:2e:3f:2d:e4:bc:82:37:06:ce:d1:05:
         6a:bb:de:dd:91:b9:2a:f5:27:b7:dd:4d:c4:d8:c0:33:41:9e:
         f8:85:97:c6:eb:f2:50:c6:94:0b:08:ad:12:ea:8c:4b:c3:09:
         d9:72:3d:3e:ed:a9:d2:75:01:d5:e5:bd:2f:f3:41:6e:43:ef:
         d3:80:ab:db:29:65:a8:cb:2c:b5:c5:cb:df:2a:ee:c0:dd:f2:
         82:62:38:d1:cb:57:bb:85:5d:26:69:23:9f:b5:a4:7a:b2:ab:
         48:23:45:7a:b8:3b:56:89:19:9f:d0:da:58:ea:ca:79:1f:79:
         f0:dd:f1:9a:19:4f:6b:5e:b0:ee:ce:e4:e0:96:66:e2:82:21:
         c0:fe:65:9b:7d:a2:cf:e1:e9:51:60:c4:12:d3:ec:be:d2:43:
         3f:da:7e:95:aa:58:a4:a2:93:89:b4:9b:24:41:86:4e:1d:4d:
         5e:ae:d7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:01:12 2026 by rpki-client