Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/8ddc0fc4-7555-37b7-b364-ee8a8408e8c6.roa
File:                     8ddc0fc4-7555-37b7-b364-ee8a8408e8c6.roa (raw, json)
Hash identifier:          Jnnqh/ZVBOXcgcEOYG7Ad6rZCVBc/QnCsBh51p9CwS8=
Subject key identifier:   22:23:3B:3B:87:6F:37:32:CD:02:30:F7:76:02:CB:43:9D:60:D6:53
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F4328584E9BA752C2DA954AFC2AD09E80
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/8ddc0fc4-7555-37b7-b364-ee8a8408e8c6.roa
Signing time:             Fri 24 Jul 2026 18:55:57 +0000
ROA not before:           Fri 24 Jul 2026 18:55:57 +0000
ROA not after:            Thu 22 Oct 2026 18:55:57 +0000
asID:                     13371
IP address blocks:        2600:2704:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:a7:52:c2:da:95:4a:fc:2a:d0:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: Jul 24 18:55:57 2026 GMT
            Not After : Oct 22 18:55:57 2026 GMT
        Subject: CN=685eb305-cc2e-4a57-9d12-aec044429881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:cb:da:78:8b:a7:e5:bd:ad:6e:5b:ac:18:
                    d4:0f:10:c4:8c:92:fb:ab:ff:b9:42:00:57:bb:2b:
                    3a:6e:1e:8b:93:56:c1:d5:1c:b5:91:5b:b7:9f:07:
                    e1:3d:29:5f:d9:c0:fe:a0:30:73:54:79:10:45:14:
                    ce:fd:11:f9:64:05:ad:96:4e:4b:ff:eb:4d:7a:d4:
                    22:d4:6e:f2:33:98:b1:c3:69:35:fa:e5:92:8b:a4:
                    bf:85:d7:bb:95:b6:fb:3f:63:21:de:c1:f6:73:d0:
                    a3:ed:94:77:fd:4a:f1:8e:46:54:40:17:d0:13:35:
                    8f:65:54:32:09:1c:0f:8d:d3:16:38:86:7e:d8:f2:
                    8d:b8:0b:fe:3c:3e:94:90:96:4a:31:38:bb:64:02:
                    fe:37:cf:ef:75:b3:49:01:0c:e6:06:6c:db:fe:15:
                    a6:8d:fe:3a:1a:1e:46:e2:55:c3:8f:01:36:7f:3b:
                    72:3d:06:2c:10:66:f9:dc:3f:a8:15:ac:9b:99:0d:
                    a0:47:bc:db:79:b8:0c:13:b4:01:a3:e9:16:d0:a0:
                    e1:cc:32:ae:48:7e:0f:c9:9b:ab:36:c3:f6:7f:b5:
                    b9:ef:b2:d2:43:37:c5:ec:5e:4d:86:37:7c:7b:79:
                    c1:9b:7f:25:fa:e0:58:7e:0a:22:af:9b:9b:aa:ca:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:23:3B:3B:87:6F:37:32:CD:02:30:F7:76:02:CB:43:9D:60:D6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/8ddc0fc4-7555-37b7-b364-ee8a8408e8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2704:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:04:8d:ce:6b:8e:b9:df:10:30:c7:07:e9:8d:9a:c3:b7:
         b6:a1:72:f3:ec:7f:d5:e4:a0:ed:a0:e1:5d:2a:f7:4c:dc:0c:
         24:1a:98:84:1d:3f:05:36:40:15:a9:c1:55:d5:99:d7:b6:fa:
         c0:ef:c8:17:86:86:7d:e3:c5:86:05:f6:47:fe:af:0a:82:dc:
         51:92:bc:f6:d8:9e:79:7d:e6:0b:ed:e2:aa:e4:fc:1b:88:23:
         d2:de:f3:d9:ef:2d:92:5f:72:da:7c:1e:2e:ec:d4:ca:85:9c:
         1a:39:48:14:8f:cc:56:c6:f2:d7:25:8c:b0:75:0c:6f:de:73:
         e1:0a:ed:18:a2:ae:56:f2:06:67:85:42:9e:3a:de:c1:44:3a:
         d8:76:06:67:f1:d3:2f:14:27:df:ab:9e:15:b4:c9:a9:29:07:
         f3:63:e0:c4:cf:ba:25:f9:51:90:4e:d7:a3:76:47:c8:35:2e:
         0c:b1:8b:27:fc:6e:51:d1:41:9d:e6:ba:82:d8:c5:fa:16:dc:
         b5:ea:0b:16:1e:a4:b7:a5:80:29:14:61:fc:5a:71:64:09:ae:
         30:f5:56:fc:e0:0e:ae:c2:37:fc:45:dd:48:cc:4a:13:64:ad:
         40:59:d0:90:7b:05:fa:ab:cd:04:dd:fc:d3:90:ba:7f:b2:10:
         cb:79:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:02 2026 by rpki-client