Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a9f60b16-156b-3fba-8442-d4946a845a99.roa
File:                     a9f60b16-156b-3fba-8442-d4946a845a99.roa (raw, json)
Hash identifier:          7yLuA2Ki+XqcMWrop328CLGbrz5+1ZZbV5Xqs8mk4wA=
Subject key identifier:   62:32:7B:7F:FD:63:24:EA:A7:40:72:66:64:0E:86:53:E7:CD:56:32
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584EA79074481A7C70B1EC8CDC80
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a9f60b16-156b-3fba-8442-d4946a845a99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19165
IP address blocks:        2604:5500:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:74:48:1a:7c:70:b1:ec:8c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=228d2733-28b6-4577-b890-489eeeade1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:c6:db:ff:00:3d:21:22:c1:cb:61:bb:ba:
                    02:22:cb:b2:50:39:ee:0e:04:92:cd:9f:b4:f0:d0:
                    af:19:c7:f6:3a:5d:2c:b5:69:59:40:27:41:93:d2:
                    40:b7:9d:e3:24:cb:25:1b:09:4a:76:6c:00:c2:ad:
                    d3:57:6e:5f:09:17:2e:e6:35:89:7a:47:66:85:10:
                    36:76:f9:3f:62:b9:e5:a2:fc:88:61:d3:4f:50:8c:
                    c7:f0:fd:10:77:87:20:e5:0b:f7:a4:f8:a1:82:2e:
                    68:b8:5f:18:d1:e0:b5:6e:c4:98:99:a3:7f:7c:56:
                    cf:80:7e:a0:e1:04:95:b3:92:4a:e9:bc:e8:b8:d4:
                    5d:b5:35:92:8a:55:79:95:9b:87:88:7f:ea:c3:a4:
                    a9:9e:c4:31:56:f3:a1:49:c2:95:30:0d:8e:ba:a1:
                    ea:45:bd:35:35:d7:b5:ca:35:72:cd:18:16:80:22:
                    aa:4a:ff:9a:b0:34:78:4e:81:33:e5:14:de:c8:10:
                    78:24:cc:57:f2:c9:21:22:cb:14:22:18:2d:f6:6d:
                    af:68:48:0f:07:a7:02:fe:71:25:3c:fa:e2:f7:b5:
                    e4:d7:12:f7:19:96:a5:59:58:05:35:24:69:0a:52:
                    f3:47:16:71:90:ae:8c:80:11:6e:ad:77:55:20:6e:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:7B:7F:FD:63:24:EA:A7:40:72:66:64:0E:86:53:E7:CD:56:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a9f60b16-156b-3fba-8442-d4946a845a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:d9:c5:c5:ae:22:dd:b6:e4:ff:9c:a4:5b:51:a6:6f:04:
         6d:97:4e:3e:26:e0:79:c3:3e:ec:b7:ad:77:6d:ec:36:0a:18:
         85:ec:21:61:b7:a6:75:df:fa:58:63:91:97:f5:89:46:5b:18:
         3d:7c:3f:93:e2:4b:22:b6:60:87:06:fc:89:95:73:f3:24:ca:
         69:fd:cf:d1:3c:75:b1:c1:e6:5c:da:55:4e:7c:2c:3b:a7:7c:
         d0:c6:9e:6d:79:0a:6c:29:14:a3:2b:bc:a9:74:80:17:79:99:
         27:e5:ed:ed:5d:10:d6:b5:69:3c:60:01:1b:8f:40:b6:c9:85:
         58:cd:bf:21:9b:a6:60:e2:d9:64:4c:f7:e2:9c:87:6f:b6:df:
         00:27:48:d8:28:47:ff:52:7f:f8:6c:ea:d9:7c:97:47:97:7d:
         42:10:52:5c:fa:6f:41:3a:fc:b5:54:5f:20:24:32:72:47:dc:
         87:0e:a9:e8:05:00:82:16:6f:20:cd:47:fc:e9:46:27:04:fb:
         65:e9:8a:8b:3a:8e:05:53:39:9d:c7:7c:2b:59:76:2b:8c:d6:
         89:32:b5:5a:0b:9b:5d:ec:35:63:f3:55:62:d8:7c:5d:86:a1:
         50:11:b9:81:61:aa:cb:2b:44:4d:e5:62:15:74:5b:ee:2b:ae:
         d4:ad:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:44 2026 by rpki-client