Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
File:                     a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json)
Hash identifier:          FsFYxxEhP+7akZCyGJsXu1p25Nut9aKYWTQlriJF4XY=
Subject key identifier:   21:D5:0D:29:42:89:7E:FC:D7:A8:F9:49:5D:4A:86:BF:74:42:70:76
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584EA787777FB0053D7CD41CFE00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6391
IP address blocks:        2605:8c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:77:7f:b0:05:3d:7c:d4:1c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a7c6423-7af9-4f1e-a0a2-8e1eb5b2a338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:1c:b7:c2:32:92:ef:e6:f1:fe:cf:57:c0:
                    84:38:c4:aa:d9:e4:cc:92:83:5c:c4:c4:74:bc:1e:
                    b2:09:d1:44:cb:fb:84:7f:e7:33:48:52:a3:90:77:
                    fe:bf:e2:66:f4:4f:0e:b3:0f:3b:a1:b0:22:30:58:
                    11:e9:e3:21:87:06:80:87:e0:8b:4d:d4:0e:43:c2:
                    f3:5b:82:06:a6:6c:6c:74:60:62:d5:15:df:a6:ee:
                    2f:1c:8f:e9:41:eb:41:23:0f:72:e5:70:3a:8b:b0:
                    23:82:e7:22:a5:a3:0f:3b:f2:f1:b7:9b:67:56:84:
                    af:26:34:28:cf:89:b6:98:b0:fa:35:8c:bc:7b:45:
                    f8:ef:16:3a:0e:60:38:16:e8:1a:3e:4c:ae:34:3e:
                    f5:f6:bd:d9:1e:5d:4e:7b:20:a2:d1:42:3c:a8:27:
                    d2:5d:8d:50:77:90:d4:ab:73:bd:db:83:77:58:39:
                    a7:2b:87:8a:68:81:a6:c8:9f:6d:b1:59:89:cc:0f:
                    83:24:86:9f:ea:24:c0:0b:9c:eb:7e:0b:f8:23:9f:
                    73:75:83:70:6c:30:3a:92:6f:ef:25:d6:eb:26:34:
                    e2:1d:10:6f:92:c0:1c:85:58:f8:01:72:e8:cb:ca:
                    0d:94:8f:ee:13:c3:02:30:ef:ac:f5:b9:23:d0:ef:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:0D:29:42:89:7E:FC:D7:A8:F9:49:5D:4A:86:BF:74:42:70:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b8:b0:1b:b3:f3:42:84:37:1a:41:32:7b:cb:3c:c5:c9:df:
         68:6e:cd:29:58:0a:83:0d:76:e8:36:35:c3:62:8e:e2:67:ef:
         d6:b6:58:c2:f0:04:fd:fc:78:e6:85:24:66:97:3d:b9:00:44:
         c0:61:a6:34:e6:60:1b:e9:a9:8d:34:9a:5e:ed:d5:30:c2:cb:
         04:24:4a:45:bf:c0:e4:59:a9:38:2a:c1:6b:b9:6a:cb:df:ae:
         86:67:cd:07:93:69:bf:d5:ce:33:4c:ba:e2:b7:53:41:2e:40:
         f2:c8:2e:dc:14:e6:8a:42:de:0d:dc:2e:f3:01:62:df:6c:25:
         51:95:ff:2b:11:d6:87:83:08:7d:80:6e:9a:61:94:61:87:64:
         d7:28:9c:db:64:2f:2f:2a:45:c4:43:74:60:82:42:da:94:3c:
         44:1b:c6:f3:48:22:e9:50:d0:fc:f6:92:98:21:b2:0d:c7:ee:
         ca:0d:9d:03:50:c6:08:10:da:6a:4b:a7:6f:31:1a:f3:f5:5c:
         f9:f6:0c:ba:19:51:d3:44:2f:ff:dc:b6:2b:51:1d:2d:e9:85:
         7b:ed:18:9b:d3:32:ca:f5:da:94:d4:56:c7:51:4f:eb:82:35:
         d3:67:43:93:8e:d9:b7:57:1e:e7:58:f2:39:82:ed:ec:14:78:
         4d:4b:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:54 2026 by rpki-client