Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
File:                     6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa (raw, json)
Hash identifier:          4Ok6dup4PKlEL0LxBsSmsyq1iEnp5iIXZU6Vy45DyPk=
Subject key identifier:   DA:BE:AA:96:63:92:5D:95:0F:DD:EC:D1:CF:A1:20:CA:8F:62:76:D0
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F4328584EA5AA768A64C870A898857D00
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:76:8a:64:c8:70:a8:98:85:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=0f898b30-d8de-4f35-ae5e-e873e4d23b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:b7:85:f0:93:c5:88:7e:6d:4a:c4:1a:9f:
                    70:a2:a7:5a:a0:f0:e5:ea:8b:02:b9:df:d8:d3:fe:
                    2c:41:a3:b6:79:e9:5b:68:e2:8d:e6:cd:b8:ef:ca:
                    5d:42:8c:66:0f:39:70:eb:7c:36:9f:68:b0:47:ab:
                    58:9a:8c:f6:da:d3:4c:0a:86:06:ef:69:66:a3:c0:
                    3f:43:11:33:7a:21:c4:e0:4b:7e:d2:f0:8d:6a:9a:
                    12:cc:25:b7:34:5c:da:ae:40:e8:eb:36:25:6a:93:
                    38:e9:df:44:cd:52:36:e8:00:80:12:91:25:7f:8d:
                    ab:e6:99:27:5d:2b:5b:e5:0d:77:77:53:49:eb:55:
                    73:d2:a1:c7:54:1b:c5:95:60:b8:de:c1:11:25:24:
                    ba:da:5d:91:d1:fa:84:a5:89:93:b8:66:11:25:ce:
                    2e:8f:29:c4:a6:7a:cc:27:aa:01:67:30:c9:fb:6f:
                    67:d3:61:c5:03:a7:a8:a1:9d:5f:86:5a:fe:d3:6c:
                    c1:d1:8e:f3:fc:19:a1:0d:e6:6e:6e:94:50:a7:9c:
                    5b:91:94:62:2f:d3:d2:0f:f1:e4:de:29:c9:be:d8:
                    2b:23:de:8f:1e:79:78:5c:be:fc:c8:27:16:95:ae:
                    32:d0:39:94:c6:28:e5:7a:03:08:21:8f:73:81:10:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BE:AA:96:63:92:5D:95:0F:DD:EC:D1:CF:A1:20:CA:8F:62:76:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:0b:b0:ec:37:34:e3:04:4f:37:26:ed:a3:3d:7e:80:36:
         35:48:3e:d0:83:3a:6d:3b:88:66:a7:9b:a6:99:a1:96:7f:4c:
         6f:2a:d2:e5:28:9e:0c:d7:3d:84:4d:f7:c9:c5:c2:23:ed:82:
         2e:37:78:0d:d5:9e:ea:b7:9c:2d:de:c2:db:36:a9:cd:9a:51:
         a9:d3:2e:0b:88:75:a5:23:6b:bd:7c:58:0d:20:83:ca:fd:cf:
         33:3b:03:ce:db:0d:06:ba:9b:62:b2:6f:7f:c9:ae:7b:bf:f1:
         28:22:f0:b2:42:6e:61:90:2e:88:24:ee:d5:12:a6:8f:48:18:
         e6:e4:cc:7d:2f:ab:fc:70:99:ba:a8:fb:16:86:eb:f5:dd:eb:
         e6:05:ad:49:a3:24:fe:8b:1e:7d:76:59:9b:02:ad:6a:eb:ad:
         0e:c1:50:46:6f:f3:15:82:02:64:ee:bb:44:0a:74:c2:a3:7f:
         6e:d2:c9:14:69:49:19:3d:58:37:7d:c7:63:95:86:4d:55:61:
         4d:fb:ba:ec:ec:a0:46:62:79:15:51:d5:06:f1:50:53:9e:dc:
         06:93:92:04:7d:22:a4:79:48:99:d6:fc:44:9d:bf:be:46:65:
         b4:42:8b:cd:58:a0:0c:15:37:5b:52:35:17:59:7c:cf:3d:33:
         f9:a2:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:43 2026 by rpki-client