Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/4977b3c6-7666-3a4f-8e86-552eb0c33506.roa
File:                     4977b3c6-7666-3a4f-8e86-552eb0c33506.roa (raw, json)
Hash identifier:          qt4Ri3cq7vjzmjbbhie/rGaqpj9AKGwc6nD0lx/APK4=
Subject key identifier:   CD:4A:D1:2B:75:9A:48:4D:AB:9E:6F:AE:85:2F:AA:F3:75:EF:DF:47
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F4328584E9BA7522853733C9A3B2D6FC0
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/4977b3c6-7666-3a4f-8e86-552eb0c33506.roa
Signing time:             Fri 24 Jul 2026 18:55:56 +0000
ROA not before:           Fri 24 Jul 2026 18:55:56 +0000
ROA not after:            Thu 22 Oct 2026 18:55:56 +0000
asID:                     81
IP address blocks:        2600:2700::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:a7:52:28:53:73:3c:9a:3b:2d:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: Jul 24 18:55:56 2026 GMT
            Not After : Oct 22 18:55:56 2026 GMT
        Subject: CN=b2b4c3fd-a4bf-42c6-b14e-2e89b9b861e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:4d:54:06:2b:e0:ce:1b:3e:a9:a8:ce:f0:
                    fd:33:b3:5b:93:d6:f2:b5:91:a7:e3:79:ea:c6:c1:
                    d0:cc:21:ea:12:25:97:b4:53:c9:3d:c3:69:f3:ea:
                    73:ce:44:49:11:32:63:5f:ac:fb:81:f9:34:e4:e5:
                    74:aa:2b:43:31:0a:c6:7a:e1:06:e5:8e:cc:77:02:
                    52:e6:c4:aa:01:2e:ff:8d:27:fa:7e:8b:d0:27:87:
                    db:f0:87:0b:30:dc:33:19:f3:5d:4b:be:cc:f9:dc:
                    6d:9f:7e:22:05:e6:8a:35:99:2e:e3:3c:e0:ab:fb:
                    89:50:93:ce:2c:c8:33:46:fe:ed:a6:b6:ac:c1:59:
                    42:d4:7a:44:06:09:30:ba:60:11:45:71:ba:b3:ae:
                    ca:b9:6a:13:92:31:ff:ca:71:0c:24:07:87:47:54:
                    f0:70:bb:ba:0f:bd:0d:9c:00:21:aa:84:37:7a:ea:
                    de:09:26:db:8a:00:11:95:b0:8e:7f:af:88:94:fa:
                    9d:23:33:3f:e1:4f:aa:43:25:0e:d6:ee:75:2d:d3:
                    0b:d8:d9:6d:11:e7:03:2b:6a:24:33:24:85:01:be:
                    4a:c8:63:81:c3:6a:fa:3e:26:4f:5f:ce:d2:66:61:
                    7c:f4:35:f4:48:da:21:4e:9a:88:85:b8:eb:66:cc:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4A:D1:2B:75:9A:48:4D:AB:9E:6F:AE:85:2F:AA:F3:75:EF:DF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/4977b3c6-7666-3a4f-8e86-552eb0c33506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2700::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:c2:32:54:93:25:fc:b6:27:6d:7c:21:a6:24:06:92:a4:
         81:fe:1d:39:41:0b:de:1e:30:59:5e:d0:5e:84:83:85:67:84:
         d2:1f:ab:d6:c1:46:b6:62:c4:1d:a1:8d:ea:15:15:ab:5f:76:
         af:25:1a:12:6c:74:6c:9b:4d:56:16:16:e4:c1:ff:f4:c8:35:
         6b:c0:81:99:14:1d:72:b0:b1:fb:ab:c4:5c:b1:69:21:26:bb:
         7b:f7:34:1f:ef:29:24:c2:57:1e:83:c0:a0:83:d1:06:4f:bb:
         90:b1:bf:21:90:0d:ad:df:1b:36:1c:44:9b:80:60:53:db:ae:
         7f:b6:f3:54:65:fa:a1:1d:b9:79:71:d9:72:e2:82:3d:91:86:
         5e:8c:40:12:91:95:f2:e3:5d:ef:fb:c0:fa:43:9b:ce:47:04:
         de:fd:17:ba:2a:51:ec:62:58:7f:85:1e:12:d1:e3:76:9f:c6:
         ae:72:63:21:3d:c3:3a:93:ef:25:ee:9e:58:a2:94:cf:3a:fa:
         af:17:67:70:0d:2e:10:98:2b:26:a6:38:65:54:f9:3e:ce:bb:
         2f:86:1f:67:8b:2b:bd:01:e9:14:fc:3f:ed:0b:4a:6b:c2:84:
         b5:80:e6:39:e9:7a:68:81:65:68:c7:68:93:cb:a8:87:94:33:
         31:f4:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:39 2026 by rpki-client