Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/59478457-1ea3-3c39-b1cd-d25864568311.roa
File:                     59478457-1ea3-3c39-b1cd-d25864568311.roa (raw, json)
Hash identifier:          M3A9jVdDJ/lk3Uae3M8P/7i66yEj0iuTdrJgnpPpSJY=
Subject key identifier:   92:D6:FF:9C:71:37:26:C1:1F:53:C3:D9:FE:32:8D:7F:61:AB:15:15
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584EC20C5F6C925D67E4CF5CB900
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/59478457-1ea3-3c39-b1cd-d25864568311.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     62943
IP address blocks:        2607:f4f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5f:6c:92:5d:67:e4:cf:5c:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=c6e359b6-bddc-4315-93f4-a5934c2b8d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:b1:a3:af:5b:f6:fe:67:92:1b:5f:e4:e7:
                    f1:c5:73:f6:a7:f2:bc:ff:2b:4d:33:25:35:5d:0a:
                    af:13:51:77:22:31:00:94:26:05:9e:c4:dd:2f:a1:
                    07:2b:46:e7:f3:a9:69:af:61:8b:00:21:89:7d:00:
                    a7:e7:da:65:08:64:02:59:b6:43:67:bd:ad:40:8e:
                    f1:fa:2e:9e:64:e6:51:d4:7e:9b:23:90:c4:59:4f:
                    60:f3:73:3a:da:f4:09:fd:65:ce:1d:fc:99:b4:4b:
                    b7:af:63:6a:11:66:44:13:95:81:59:49:18:34:ec:
                    64:b7:4d:25:83:69:d6:8c:3b:49:5f:06:54:71:2d:
                    1f:78:48:1d:8c:d0:7a:9c:64:8c:78:d5:de:30:a8:
                    2d:fb:f3:74:5c:c1:fe:0c:76:55:75:c7:29:f4:40:
                    cf:a3:b6:ae:32:42:32:06:c1:82:ce:ed:45:5c:25:
                    04:db:f2:c1:4d:2b:aa:b6:47:64:d9:83:dc:f2:95:
                    84:d3:bf:fd:e8:e3:fe:87:95:a7:97:54:0c:46:10:
                    f0:58:49:85:bb:88:72:6d:42:6e:97:80:9e:ec:08:
                    c8:13:6a:a9:2b:ab:1d:12:0a:31:b6:22:a4:fb:12:
                    3f:f5:57:46:8f:26:ff:65:10:41:28:0a:11:b9:02:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:FF:9C:71:37:26:C1:1F:53:C3:D9:FE:32:8D:7F:61:AB:15:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/59478457-1ea3-3c39-b1cd-d25864568311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:4a:95:cc:8b:4e:2f:5c:1e:fb:ae:81:7d:0b:b7:65:09:
         78:90:32:2e:cc:ba:31:bf:02:f9:32:5e:e8:81:92:68:3a:2a:
         ac:25:48:7a:ee:0b:c8:61:95:39:b5:c3:15:c5:4d:06:91:fe:
         00:d0:13:c1:f6:35:38:40:be:5b:5e:71:13:a9:92:03:af:ce:
         c8:8a:38:1d:ca:d5:bf:ab:ed:a8:7e:b0:e8:a3:44:d5:c4:79:
         fa:da:0b:24:9b:8a:95:6a:99:53:fe:8f:92:a4:31:6c:0d:c4:
         fc:0c:fe:99:51:7d:0b:35:2d:30:1e:31:27:0c:15:98:e0:4a:
         97:63:d1:c3:99:18:b8:72:4a:8c:41:bc:c7:fe:99:d6:97:ae:
         5f:85:79:93:0b:3c:92:10:cf:fd:da:35:6d:21:c1:bc:de:65:
         4e:29:54:62:0f:bd:a2:5f:af:a2:5d:98:ca:ac:87:ed:c6:8c:
         ad:a4:cb:a3:a3:b4:5e:a0:b3:d8:89:47:9b:4d:e8:1c:0f:ec:
         10:f3:f9:26:1a:3a:2a:52:74:a8:0b:93:24:5b:aa:37:a1:51:
         ec:36:da:77:aa:ff:b8:ba:cd:1b:89:86:cf:79:62:41:48:69:
         fc:28:b2:54:bf:d4:7b:0c:67:5f:5d:79:74:95:da:6c:53:b3:
         99:54:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 19:24:25 2026 by rpki-client