Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa
File:                     e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa (raw, json)
Hash identifier:          UA/bB1guIei3kbUVSfkqAW8nzATQ7kmbwAIGVktXaXQ=
Subject key identifier:   AA:A4:99:0E:C2:04:F4:52:C6:E7:57:70:D2:4E:26:79:FA:33:27:F1
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F4328584EA7947B678B6F4ECD6AB2D680
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     210527
IP address blocks:        2606:7540:f010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:7b:67:8b:6f:4e:cd:6a:b2:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8c2f855c-1951-4385-ad87-2ef2e97df092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:c1:07:f8:86:9a:2a:97:2a:fb:72:b7:dd:
                    2e:be:f2:5d:a5:0c:df:0b:0f:a6:2a:37:4c:b6:2d:
                    99:89:97:c4:4b:89:ad:f2:73:6b:b3:88:b4:47:f5:
                    ab:7c:20:15:81:32:29:07:b8:77:9f:a1:0d:f9:f3:
                    8b:65:17:8f:66:a1:22:74:8a:1f:d7:26:35:d0:cc:
                    f0:0f:c8:07:ad:30:4f:c6:2d:cd:00:aa:04:cc:10:
                    4b:38:7b:b2:40:78:27:34:f0:91:ce:07:c4:e3:1e:
                    1d:e2:8f:c4:de:68:e2:0c:a9:af:85:94:73:d6:76:
                    45:5e:47:7d:a4:62:04:97:a0:81:d4:65:8f:5d:33:
                    62:e2:36:d0:58:7b:d3:c6:5f:b5:cd:70:e8:e5:ea:
                    77:4f:88:5f:43:6b:c9:23:02:b5:07:46:24:74:06:
                    f5:b2:5e:b8:19:8b:ff:b6:b2:2f:0b:32:ef:19:a9:
                    eb:0e:51:8a:e8:79:b8:79:9c:a3:2c:b7:4f:30:76:
                    1d:a3:fa:e9:b7:a1:63:d9:4d:3d:31:12:49:85:56:
                    68:cb:d5:a8:3f:23:79:fd:35:e1:bd:36:ca:66:d4:
                    50:54:86:35:32:d4:3c:c6:e3:14:ed:35:a9:54:1e:
                    f5:d7:96:73:a2:63:f6:14:56:10:29:bc:6b:c7:68:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:99:0E:C2:04:F4:52:C6:E7:57:70:D2:4E:26:79:FA:33:27:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7540:f010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:3b:f7:a1:f6:3f:7d:54:15:ab:9f:e1:9d:46:15:25:16:
         0f:e2:34:b7:d3:89:22:21:49:4b:16:ea:07:db:6a:b0:d9:75:
         34:f5:d6:bf:df:b7:5c:fc:11:70:eb:56:0c:a8:9a:9f:89:48:
         65:e8:ff:fd:f3:cc:a1:82:2f:1b:fc:71:25:f4:21:03:d4:f2:
         a7:28:5f:f8:0a:2b:ad:95:bd:f1:6d:41:59:d9:31:39:86:07:
         19:fb:45:44:aa:bd:5a:5d:9a:7b:92:2b:f7:e7:77:1c:fc:f4:
         65:31:46:27:be:c0:41:29:3c:1c:f1:38:f2:ab:07:cf:e6:10:
         14:3a:6b:cc:06:e3:2a:0b:86:d0:50:15:da:b9:26:39:60:36:
         22:1f:6b:ba:a6:b0:ba:37:bf:3a:8c:7d:a4:fa:f6:d0:dd:f3:
         63:eb:3a:20:ed:93:08:d3:70:83:8c:4b:fc:3b:5c:cd:25:6c:
         4f:c6:55:6b:0c:cf:f8:3e:74:ae:3a:56:73:9a:5b:a1:d0:a3:
         40:09:f4:d4:ac:86:2b:2b:de:4b:f3:1a:26:1d:18:5e:05:ec:
         98:fc:08:74:f0:24:0f:6e:13:07:a2:11:b8:e1:16:4d:3d:36:
         45:99:5f:b3:46:93:67:8a:83:b1:19:64:99:09:b4:85:8b:ff:
         bd:a1:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:25 2026 by rpki-client