Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa
File:                     17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa (raw, json)
Hash identifier:          VbDo3hZT0AahNeve2yAM3pybNQvzx6cfte2hh/w1q/M=
Subject key identifier:   03:09:13:B9:1B:40:16:38:8A:F6:09:78:DD:AC:DE:32:A6:F8:BF:15
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584EA78805D24822DAFF13043800
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5769
IP address blocks:        2607:fa4f::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:05:d2:48:22:da:ff:13:04:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c808e9c-d399-48c3-ae22-8fca4f6b4e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:09:6e:dd:d2:88:78:a0:8c:9f:2b:ef:b2:
                    91:ef:fb:53:5d:cd:41:35:0b:96:91:f9:6d:c3:50:
                    6e:aa:dd:97:c9:a4:39:3d:65:82:ce:7d:95:80:c3:
                    63:de:25:0c:01:46:da:15:f0:cc:69:dc:14:66:4a:
                    78:fe:90:f8:c1:7f:a0:a1:74:a7:c2:91:25:0e:a1:
                    23:cb:e8:52:4d:21:71:41:96:a4:b4:8b:7e:63:c8:
                    6f:b9:7c:b2:65:62:91:92:7c:4c:46:84:93:91:2c:
                    8e:1c:4d:6f:12:22:b4:6f:4a:9b:99:8e:13:68:57:
                    53:cb:23:34:39:43:f7:48:54:c3:8c:bd:4a:80:e5:
                    d6:4b:98:ee:2c:14:3d:ea:56:9a:a8:cb:8e:ac:a8:
                    36:bf:90:64:11:e1:18:80:7d:a2:94:94:98:d4:b7:
                    0c:e4:bf:f8:ce:fa:8d:fd:97:ce:a1:b0:fc:0e:2d:
                    92:b9:6f:89:26:1f:c2:34:df:aa:68:cf:4d:38:09:
                    a2:59:73:46:b3:00:f6:e2:17:2b:2b:96:16:f7:32:
                    e2:20:1c:ed:02:9f:22:72:12:74:71:c3:d9:c9:a9:
                    f2:d1:85:57:ce:fd:04:67:29:29:e9:d3:5a:29:8b:
                    80:8e:d2:c0:78:5e:94:ab:55:55:19:3b:8f:6c:ca:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:13:B9:1B:40:16:38:8A:F6:09:78:DD:AC:DE:32:A6:F8:BF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:92:8d:8b:28:2a:4c:f0:e9:9f:79:03:da:51:7e:6a:13:
         0a:e9:9b:91:3c:85:7c:63:5b:29:3e:03:51:3a:86:47:ff:5b:
         5c:51:fa:02:41:d7:bf:bf:94:d0:95:3b:44:71:bd:e2:ce:e4:
         00:f2:67:21:b1:d6:b7:16:2c:2b:17:2f:f5:43:0b:1a:7d:3a:
         e6:c4:4a:05:d0:90:4d:64:22:0e:eb:3d:b6:54:32:58:35:bc:
         f4:ba:b1:1a:0a:22:bf:d4:3a:0b:05:aa:1f:0e:f0:a9:fb:c0:
         bc:9f:f5:f6:32:ad:0c:eb:56:32:e7:58:67:a5:a4:16:14:e5:
         00:a1:72:c4:47:0d:c1:43:d5:1e:15:2b:a4:73:09:08:9e:cb:
         ee:27:a9:fe:af:ea:11:b6:56:3c:2b:31:78:92:1c:72:ec:8b:
         ef:b6:6f:83:30:e5:ae:84:ea:66:ec:8d:e4:99:d8:90:58:51:
         41:1c:27:71:96:ec:43:1e:78:ac:10:77:8a:3b:0e:88:bc:32:
         1e:3f:81:b2:d5:9f:3d:5e:67:7d:18:b6:3c:db:8d:16:75:05:
         ca:2a:12:9e:38:fd:23:98:60:6d:a2:bd:52:5f:98:74:f6:0e:
         0f:75:12:1d:e6:50:bb:50:08:35:0d:56:e0:50:12:a5:47:6d:
         ec:75:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:55 2026 by rpki-client