Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa
File:                     ff4f066a-1678-34b5-9861-cccf7607e203.roa (raw, json)
Hash identifier:          6zqLdsinY23fpgHGUoIAMsER60vqt5khtd19+MUqCl8=
Subject key identifier:   92:2C:E5:3A:82:72:76:7F:A5:C0:38:7D:62:EC:DF:88:70:F3:5B:B8
Certificate issuer:       /CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
Certificate serial:       010D0C9F4328584EA79088B90289BFC63FB72180
Authority key identifier: B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40764
IP address blocks:        2604:edc0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:88:b9:02:89:bf:c6:3f:b7:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c28025c0-9725-48da-978d-ba0d5752f6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:cf:18:58:36:dd:6d:8b:c2:ef:91:b9:b5:
                    d1:82:25:c8:da:99:6c:f4:2a:e9:5d:2b:28:9d:e7:
                    f6:77:0c:15:5b:f3:da:a8:34:80:df:3e:48:cc:da:
                    a3:b6:1e:3a:b4:64:c9:14:b7:66:b1:12:99:bb:4b:
                    d1:62:b6:9d:11:89:4e:ce:e4:1f:e6:c4:c3:bf:93:
                    a3:de:f5:14:63:c7:45:af:b1:ce:f2:24:f1:62:d7:
                    99:f3:2f:83:66:62:c8:44:c6:29:8d:6e:35:60:88:
                    c0:a8:94:c1:b7:f9:6d:53:f0:69:40:15:c6:ac:56:
                    62:8f:d9:b5:25:d5:9c:da:3c:60:1a:7c:7c:34:50:
                    e3:51:3a:0e:5e:0b:46:5f:66:20:2a:c4:34:e4:89:
                    f9:ca:55:65:dc:08:0a:66:fd:29:cb:81:a4:d5:ba:
                    99:93:14:0d:94:85:29:1e:9d:81:83:66:39:d9:1b:
                    76:6f:ff:cf:c2:f2:2d:a2:6e:28:6d:8c:74:a4:d3:
                    eb:14:4a:47:d1:84:5e:58:50:e1:cb:be:02:9b:2b:
                    25:05:d8:98:99:c5:41:5a:bf:66:e8:8f:4f:5f:eb:
                    1b:4c:b8:24:9f:24:4a:06:7e:83:d8:4d:2f:89:e4:
                    e3:b1:9f:cb:66:e2:27:dd:4b:64:97:5b:26:29:7b:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:E5:3A:82:72:76:7F:A5:C0:38:7D:62:EC:DF:88:70:F3:5B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl

            X509v3 Authority Key Identifier:
                keyid:B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:edc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:5c:99:0a:6e:d5:34:e2:76:a5:61:57:fe:f4:e8:ab:ef:
         86:36:46:20:97:7b:88:24:28:e0:e5:62:47:50:53:0e:c0:61:
         7d:f3:81:42:b0:48:a8:1a:19:f9:ae:5d:a0:43:a6:b2:32:b3:
         77:e0:0c:4d:4d:d1:7a:1b:e0:54:fa:e5:2a:27:12:90:80:aa:
         0f:8a:39:a8:83:85:b6:41:d1:73:14:e9:25:e1:f6:c6:4e:ac:
         68:8e:61:3c:1a:48:6b:7b:38:a9:57:e8:16:7b:50:90:97:2d:
         ca:ee:e6:62:a1:cc:86:ae:e7:78:07:76:10:94:84:75:19:2b:
         6f:a2:22:63:e7:bf:39:c4:bc:29:7a:12:3f:a7:fb:d6:e7:1c:
         8f:ee:9c:87:c4:67:d3:7e:dd:b8:f8:85:00:47:86:3b:c5:11:
         87:10:fd:2a:f7:4d:33:8f:26:f2:f2:0b:31:1c:be:34:05:2f:
         3b:b4:d9:4b:a7:fa:da:ce:26:c0:1e:8e:f1:10:89:76:c1:89:
         75:52:63:c0:8b:10:d2:37:fd:ef:46:af:3c:21:46:f8:52:79:
         6a:93:71:38:61:9e:01:bc:45:c6:4b:20:a4:30:4c:95:42:42:
         aa:d7:95:d6:91:3f:54:01:ea:13:bb:26:64:31:30:ae:f8:34:
         00:10:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:01:08 2026 by rpki-client