Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
File:                     61fa3b7e-9320-3d30-aea2-938b200f9f76.roa (raw, json)
Hash identifier:          qRsFsEbDdWK2usj2L7S3MFdZOKT0MBfaa1gHrL8YTlQ=
Subject key identifier:   B6:80:C5:3A:62:B1:15:74:D4:21:88:D5:AB:C1:CB:EF:AF:A9:4C:03
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584EA7926D05AA8974BE8D587200
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26914
IP address blocks:        2001:1898::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:6d:05:aa:89:74:be:8d:58:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6273cbd9-bc1c-4279-8e40-c38657951776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e6:19:2d:b1:f7:5d:21:2a:ac:54:9e:ea:ee:
                    95:9f:0a:b5:11:31:fc:b2:cf:aa:99:ac:45:4f:62:
                    35:9b:52:f1:16:84:c8:9b:44:7a:8c:00:e4:6a:95:
                    13:bb:ac:c7:ba:1e:09:42:60:93:a5:37:3d:53:be:
                    40:f5:49:c4:4c:ac:59:2c:d3:f3:23:9f:f9:90:58:
                    9c:ea:1e:ba:67:44:fb:51:41:16:a6:31:69:6f:91:
                    a8:b0:ed:d1:46:fd:63:e3:fb:6e:48:e7:0d:30:e5:
                    f9:be:0a:c4:09:db:33:2a:11:db:2a:c8:2f:20:c4:
                    d7:61:6a:de:16:17:d4:bd:1b:bc:8b:ba:19:74:db:
                    dd:46:96:47:17:cf:9a:5f:fe:c0:7e:ba:8a:0f:92:
                    43:75:19:43:f5:aa:81:a1:6b:80:cc:dd:55:b1:a0:
                    6a:ce:68:e7:ef:b6:48:85:ab:d4:02:d7:76:75:7f:
                    5b:96:2e:90:a4:95:b2:36:9d:10:ab:e3:6d:95:aa:
                    22:82:db:ed:a3:d4:0a:12:e7:b9:b8:40:38:af:f6:
                    71:63:2a:a0:42:37:10:ab:08:cc:bf:c3:82:3e:46:
                    aa:1c:aa:96:5b:db:9b:b9:19:52:a9:9d:e2:93:d8:
                    86:55:25:46:85:4c:a5:d0:22:51:f5:55:b3:02:ad:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:80:C5:3A:62:B1:15:74:D4:21:88:D5:AB:C1:CB:EF:AF:A9:4C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/61fa3b7e-9320-3d30-aea2-938b200f9f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1898::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:60:76:5e:9b:be:1a:7c:16:c6:d0:09:65:84:51:4f:46:ad:
         ce:a0:52:96:4f:c2:95:d3:a3:2a:cb:2b:90:64:1d:fe:f0:0d:
         75:eb:94:e9:b7:e0:ec:c7:50:ad:61:b7:38:95:20:5d:30:6e:
         17:f4:a4:12:e6:57:9c:e6:a6:ea:90:58:da:54:32:34:9d:fa:
         84:b3:dc:90:61:3e:a7:c6:6e:a5:fe:4a:e5:2a:ee:9f:b2:39:
         32:f6:41:98:82:03:8d:61:49:41:7f:a3:b9:00:f6:b5:2c:6b:
         e0:77:0f:2c:4e:48:f7:bc:90:c7:af:96:30:e1:47:58:e2:f1:
         d9:48:a3:7a:62:07:90:6f:42:2a:1a:e0:2b:e2:80:4d:63:32:
         58:1b:de:0a:f4:74:23:ca:bc:69:8f:52:7e:1e:5f:9d:de:ba:
         14:18:f3:61:1e:03:b4:b7:04:ef:60:97:ed:fa:f0:b2:1c:4c:
         e1:3a:b7:c6:f6:77:48:fe:70:14:49:a3:24:3f:a9:2e:29:c7:
         ee:d3:30:cb:f1:90:5c:14:c5:ae:8c:36:51:08:86:34:bc:ce:
         cf:b7:dc:66:e7:f5:f9:df:a3:82:98:40:2b:55:66:88:18:8a:
         aa:7c:a5:1c:27:37:b7:82:c2:7c:fc:60:05:8d:91:14:cc:8f:
         b3:ec:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:45 2026 by rpki-client