Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa
File:                     467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa (raw, json)
Hash identifier:          06sgdGWFBtLbRhHL4v6dFiAB6pH+HRJ9ePYhxeNkMsA=
Subject key identifier:   0C:FA:95:BB:09:6E:4F:5E:AD:E7:73:2D:2C:8D:FC:B7:96:77:68:E3
Certificate issuer:       /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Certificate serial:       010D0C9F4328584EA787300CA86D9DE4D829EE80
Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26661
IP address blocks:        2620:12b:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:30:0c:a8:6d:9d:e4:d8:29:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=21fbaa57-77ed-48e5-b351-6f08d2c20dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:62:ef:15:bb:bc:93:c5:45:08:09:ab:c4:
                    8b:02:a8:5a:a3:e0:7f:1a:ae:cd:c3:b0:24:dc:91:
                    50:6b:12:45:16:1a:fa:2b:c3:99:fc:bd:bb:06:e8:
                    c7:2a:2e:65:e3:17:d4:ea:10:10:ed:40:1f:82:14:
                    42:4e:b3:90:8f:25:60:db:b9:32:17:d3:1f:24:6f:
                    34:d2:2b:6a:d1:6b:a1:31:af:f6:81:b5:09:47:41:
                    cd:90:ca:f6:a5:61:58:af:34:42:d5:ec:73:e9:2d:
                    2e:37:92:69:75:91:41:8c:53:0f:9b:eb:4e:88:fa:
                    dc:15:6a:6d:f4:a0:fb:92:97:09:d5:c2:47:c1:c5:
                    be:29:f7:cf:d5:52:db:d2:fe:e7:11:04:03:8e:fd:
                    b9:4b:4e:de:f7:d9:a6:14:22:90:4a:c2:65:ba:ec:
                    c2:9b:46:62:aa:ee:62:64:7d:15:79:34:44:96:ee:
                    1e:81:02:59:3e:24:ce:9b:d9:a9:32:cf:dc:97:bf:
                    a6:d9:13:fa:75:75:e3:31:5e:b1:11:91:a2:80:b1:
                    0b:48:5c:be:36:ab:4e:0a:4e:ee:64:bd:de:54:08:
                    b2:9c:f6:1a:f0:11:d3:b9:72:34:ca:13:96:84:ba:
                    e4:f3:08:a6:b2:14:d9:b6:d6:5a:ba:a8:ef:b9:6f:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FA:95:BB:09:6E:4F:5E:AD:E7:73:2D:2C:8D:FC:B7:96:77:68:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12b:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:ec:4b:c6:ca:b7:0a:00:b6:b6:20:c8:66:a0:92:22:8f:
         4e:d9:15:58:8a:79:74:e8:4c:ba:df:3e:08:96:3b:27:11:b4:
         2a:50:fc:01:46:f1:6d:7b:59:82:a3:2a:81:70:1a:eb:ad:44:
         bd:58:94:bb:30:e1:6b:f2:d8:00:cd:87:fd:6c:dc:6f:a6:71:
         c6:e6:74:ba:5f:8d:c0:d5:c7:c2:29:c2:cd:30:e4:56:6f:fe:
         cd:47:03:29:b8:d2:d3:80:3f:f5:c1:8a:31:f4:07:35:db:b0:
         b3:bf:13:b7:f1:4a:b6:78:e0:f2:ba:2a:34:4a:81:1b:20:a7:
         0d:07:e3:4a:89:83:39:a1:26:fc:92:3f:42:35:dd:f4:35:bb:
         90:2e:5f:20:9f:e0:27:36:98:62:46:29:a3:b9:92:3e:fc:15:
         f7:67:36:2b:71:07:b3:ac:47:ae:2c:b2:3d:e3:c2:d1:e1:b7:
         84:a3:e5:80:28:02:2a:35:23:ed:45:4c:91:70:3a:aa:ef:bd:
         6e:59:c2:44:34:fe:69:2c:44:67:a9:22:dc:37:85:41:41:9e:
         6d:29:c6:af:9a:f0:4f:49:08:3e:51:6c:de:19:98:2a:89:41:
         06:23:67:aa:b1:69:5f:e3:b6:93:b2:cb:25:17:5c:06:36:ee:
         b3:99:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:49:59 2026 by rpki-client