Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa
File:                     519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json)
Hash identifier:          dWqoC3jHtIGxffjQ6VObGG8NEBzF8WccRmQnTjawcsY=
Subject key identifier:   9E:BE:0B:CF:4E:EB:A9:72:C1:19:0E:AE:38:4D:2B:0F:77:63:BA:52
Certificate issuer:       /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
Certificate serial:       010D0C9F4328584EA79428B2277A6F27053CA880
Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399844
IP address blocks:        2620:68:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:28:b2:27:7a:6f:27:05:3c:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=67ca0de6-4c9c-430b-bf76-431afab09b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:5f:3b:51:23:2f:40:9e:34:01:b0:5b:69:
                    9a:ec:eb:6c:20:dd:49:ae:53:8f:99:55:6c:e5:5b:
                    2e:0d:e5:1a:72:97:8c:f0:27:3e:1c:ca:a1:d1:59:
                    bf:f8:b8:79:83:25:ac:51:78:0b:bc:86:8f:0a:1b:
                    cd:de:37:06:fc:c7:7b:e1:ee:51:9d:f2:94:50:23:
                    2c:66:2f:97:86:45:1c:27:70:30:7a:83:4b:f9:8a:
                    9e:4d:aa:f2:75:95:bb:f1:0c:19:c8:fd:9d:d9:64:
                    92:7f:0c:3e:48:bc:42:00:a4:86:fe:8d:9c:47:63:
                    cf:22:0e:25:40:3a:13:f9:67:78:68:aa:f6:02:ea:
                    c3:53:22:72:01:2e:17:51:dc:b3:ff:42:cf:a7:96:
                    e1:58:63:9b:92:a7:a9:d4:e7:41:f5:b1:12:e8:81:
                    0d:3f:d2:7f:36:72:75:85:ec:e3:23:a9:8f:9f:50:
                    38:10:97:19:00:ac:9e:25:7d:cf:24:3e:74:f3:fe:
                    3b:6e:c8:f0:77:11:a2:84:3d:b4:c3:71:8f:d1:22:
                    80:e6:d8:91:ea:b0:c1:e5:0b:ad:23:8c:f7:58:3d:
                    40:cf:e1:60:e0:c4:7e:ae:b6:cd:55:92:97:db:ff:
                    14:c2:e4:bb:6f:90:b9:6c:72:93:2a:f1:8c:3f:af:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BE:0B:CF:4E:EB:A9:72:C1:19:0E:AE:38:4D:2B:0F:77:63:BA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl

            X509v3 Authority Key Identifier:
                keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:68:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:88:cb:4c:4f:e0:10:8b:30:04:de:91:fa:d2:14:91:b6:
         58:6b:2c:e6:9d:33:a8:de:a9:a6:e3:0f:bc:72:4d:50:95:7c:
         35:39:a1:5c:f8:86:39:42:93:e8:cc:ea:61:63:cb:10:fa:25:
         7a:41:e5:6c:74:d7:66:97:12:74:2b:a2:68:bf:c6:c5:31:0b:
         8f:f5:88:b3:00:7e:9d:67:fd:fc:41:c7:4a:1d:dd:07:15:8e:
         ca:8f:56:9a:e8:70:e3:2a:85:19:b6:74:1f:8e:1e:ef:31:ea:
         35:96:c1:01:21:a2:c8:76:bd:05:11:b1:3d:9d:5a:95:23:03:
         ec:83:11:36:ac:76:08:ce:03:3b:72:7c:a8:3d:c8:88:ae:ec:
         59:b4:13:c6:50:5e:bb:e2:eb:a0:3f:87:45:29:40:d9:33:2e:
         f8:5a:09:c6:9b:d8:56:d3:21:d7:1c:2d:3b:1c:77:66:5a:a2:
         bd:c8:a9:5a:df:58:41:6e:af:13:58:03:db:4d:7c:63:16:07:
         df:98:7d:d7:41:eb:59:45:e1:ef:a6:d1:61:b8:06:4e:73:12:
         09:59:b7:3f:b6:d0:4a:8d:28:33:8a:97:6d:d6:56:0c:fa:58:
         a4:b1:8d:91:3d:9f:d7:80:ec:01:7f:42:9a:49:39:44:f1:da:
         18:fa:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:31 2026 by rpki-client