Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b940dd52-00ab-36cc-94bf-8c964681d67e.roa
File:                     b940dd52-00ab-36cc-94bf-8c964681d67e.roa (raw, json)
Hash identifier:          LNELPUB5Vx/VNSzxetXQ8Dt7sHh2V+lHLt+l8yX3D3c=
Subject key identifier:   8F:AE:F7:9D:DA:DD:EF:42:C7:1B:8C:5F:73:0E:B6:13:08:32:2D:2F
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584EA7888EA482447358EA22F4C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b940dd52-00ab-36cc-94bf-8c964681d67e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16941
IP address blocks:        2607:f288::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:8e:a4:82:44:73:58:ea:22:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2dd40a13-c7e5-42b6-983c-c34e9fce0d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:b3:fa:c5:3c:e6:8f:29:bc:b5:24:5f:a2:
                    a5:af:78:6c:89:d1:c5:88:0e:93:4d:a7:29:be:27:
                    71:e4:92:f9:14:b7:ec:0c:03:00:04:b4:54:08:ae:
                    7f:c6:58:55:a4:a0:55:91:8b:e6:97:0b:27:e7:b4:
                    a2:55:db:b3:2f:23:c3:d6:4c:52:01:ab:7b:b7:d4:
                    cc:e0:a9:93:87:d4:16:72:b9:f3:33:7c:30:39:c0:
                    e3:2c:5e:14:d2:32:c9:f9:2e:8d:b7:03:12:ad:14:
                    97:b2:83:05:cb:95:bb:15:6d:46:79:be:2f:96:a6:
                    3d:17:73:cc:b2:f5:dd:de:65:b5:b8:12:1b:5e:50:
                    8e:09:ee:e3:e5:b9:ef:4c:99:0f:86:3d:19:d5:28:
                    fe:c7:33:92:e4:76:17:ca:fa:90:b6:b9:a4:22:ca:
                    84:88:72:bb:13:dd:00:90:2b:cc:54:b0:0f:ef:41:
                    1e:ca:6d:2f:78:2b:d9:21:01:31:ea:3b:82:38:d2:
                    26:88:01:9e:96:c3:33:9c:e9:3a:10:df:c3:39:cb:
                    f6:a6:c0:67:43:59:4b:e0:eb:37:0a:d2:a7:ec:b3:
                    bf:fa:7c:77:f8:48:61:1a:3c:16:88:f5:f7:36:29:
                    40:91:b4:5e:f8:94:65:52:ca:87:ad:0f:43:a9:ab:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AE:F7:9D:DA:DD:EF:42:C7:1B:8C:5F:73:0E:B6:13:08:32:2D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b940dd52-00ab-36cc-94bf-8c964681d67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f288::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:50:82:1d:48:cc:39:f3:64:6b:44:3e:3f:9e:65:69:ab:
         7d:53:9f:c8:4f:5c:dc:06:ee:58:18:3d:ca:c2:46:03:45:1e:
         79:bd:0d:b2:c8:21:9c:e6:10:f3:66:14:bf:4f:10:a4:6d:33:
         e7:67:06:a7:87:32:d2:d2:15:a2:22:29:54:18:05:90:ac:c7:
         ad:e0:57:ba:4c:c9:70:82:20:a9:19:23:c3:dd:a0:b3:74:f7:
         9f:7e:4d:1c:a0:67:8b:c2:e0:01:5a:d4:a9:2e:be:4f:f2:d9:
         ff:c3:86:6f:39:ec:50:88:f3:ab:9f:25:19:07:8c:a7:64:50:
         b8:81:10:8f:6b:0f:47:d5:02:63:7b:3c:c5:fd:f7:3e:42:43:
         f6:11:57:88:40:f7:37:43:2b:ad:5c:e2:21:54:79:53:99:1e:
         60:8d:a0:53:02:f3:48:af:62:26:78:80:4a:5d:e9:c6:b5:97:
         ce:b1:fc:ef:ed:ad:07:35:4b:d1:c3:ef:f9:12:b5:6c:19:2b:
         cc:fb:ca:4d:81:75:f9:5c:83:cb:f3:af:1e:09:21:a3:ee:3c:
         50:2f:37:77:36:cb:e3:ce:df:28:1b:f0:38:5d:40:fd:48:61:
         15:6c:12:3d:2a:27:85:3b:01:1d:54:40:92:7a:95:09:f0:ec:
         27:85:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:52 2026 by rpki-client