Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa
File:                     6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa (raw, json)
Hash identifier:          ihxsYyVXZn5PDquuQhZzurlT2CR3VFZyuATK/eoZNmM=
Subject key identifier:   B9:28:C1:97:7F:13:95:A6:4E:A6:C3:AD:D4:6F:83:4A:37:6B:46:47
Certificate issuer:       /CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
Certificate serial:       010D0C9F4328584D7B6A919D24778E2D66914F40
Authority key identifier: 72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     22237
IP address blocks:        2607:c140::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:91:9d:24:77:8e:2d:66:91:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=bddf6920-a2ea-4bcb-98b4-cd60eb3e8b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:16:43:a4:81:48:80:f8:59:ae:84:9e:21:
                    f8:fe:05:53:99:a4:22:f4:04:1d:0b:69:87:34:5e:
                    64:40:5b:ac:75:6b:13:43:a9:52:95:74:9e:fb:c4:
                    d2:70:a7:49:69:b4:b7:21:92:1b:60:09:b2:43:dd:
                    21:df:d5:25:3e:26:4b:f8:52:82:97:d4:5c:85:31:
                    7c:38:5c:48:1c:7e:b7:28:ee:93:35:2e:50:34:c1:
                    2d:16:a3:26:a5:75:93:cd:bb:3b:ad:29:c0:4d:6e:
                    ed:35:7f:15:32:1a:fa:ae:80:e6:75:e2:3e:35:ea:
                    32:e1:7a:25:13:f3:f3:11:5a:44:6d:94:31:21:90:
                    85:aa:68:12:1c:64:c0:1f:dc:8a:d1:e1:72:7b:07:
                    6c:ec:1d:69:eb:c0:2d:ed:51:2f:f8:07:c7:b3:03:
                    3c:de:05:61:cc:17:7c:4c:f7:50:98:c3:c5:32:25:
                    2d:67:1c:8f:2e:84:70:98:dd:c7:f6:0c:16:4f:8a:
                    14:47:2d:9a:97:d5:47:fb:c7:c1:74:f9:53:db:92:
                    1b:be:9c:55:e7:0e:ce:aa:ec:ea:e9:08:2d:ae:e4:
                    61:3c:41:3f:8f:d3:79:b3:92:c1:b8:4d:8e:06:7c:
                    21:9d:dd:8a:51:99:6b:a0:6b:43:26:7a:40:1c:e9:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:28:C1:97:7F:13:95:A6:4E:A6:C3:AD:D4:6F:83:4A:37:6B:46:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl

            X509v3 Authority Key Identifier:
                keyid:72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:d4:bb:25:62:cd:77:63:32:84:2b:fc:df:ce:01:41:72:
         2a:77:bf:e7:6f:6c:3f:e0:b7:cf:ea:53:00:09:32:97:88:53:
         10:a7:ea:f4:f5:db:ec:c5:76:a6:2e:89:cf:77:bc:fb:be:fd:
         e0:b6:69:05:5d:6b:e7:e2:10:a4:df:61:5a:35:93:aa:95:fc:
         69:bf:db:0f:42:b3:37:be:94:57:bb:02:53:00:f3:e5:6d:ae:
         f2:bb:f8:3d:48:be:56:37:b3:85:05:e9:d2:0e:b8:0a:61:c0:
         00:3d:8b:f8:3c:2b:d2:9c:22:8e:30:41:58:c5:54:40:37:68:
         d7:34:64:35:45:7a:b6:fb:09:70:e0:90:26:46:0b:7f:b6:b3:
         7e:b5:03:54:e8:5a:37:1d:9e:35:2b:aa:3e:76:cc:13:5e:56:
         f0:1f:2f:a9:52:66:9a:e3:9a:d5:95:f4:91:ff:77:ed:d8:d9:
         da:ac:7a:cb:06:fb:c5:da:e4:ed:2d:fd:37:a4:9f:75:d5:e0:
         c8:82:c9:92:54:2d:63:80:9f:f6:0d:3b:f8:2b:90:55:53:12:
         8e:8b:e8:14:e2:c6:1c:0d:c1:d0:36:2f:53:ae:c5:1b:b1:18:
         37:54:e9:8d:9e:fa:5d:a7:4f:f4:8c:3f:70:fa:d5:3f:f2:ac:
         a7:47:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:26 2026 by rpki-client