Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa
File:                     9051a569-4f38-3329-945f-e2fca1424e5e.roa (raw, json)
Hash identifier:          yRnZkchok1u+PT5ka61RuNQMTTZenkym0KjEAu8S8Mc=
Subject key identifier:   6B:6D:3F:EA:B3:29:3E:74:0A:94:F5:10:26:7E:C7:01:5B:C6:84:D8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA7961A66E17D59F4D49CC8C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        2607:fe88:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:1a:66:e1:7d:59:f4:d4:9c:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=567f08f9-728e-442e-8cfb-ec095203823e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:e3:a4:17:1c:ca:1e:7e:2c:67:67:93:7a:
                    ea:bd:51:b0:56:c5:47:24:ee:19:22:32:47:61:22:
                    ac:75:84:f7:29:96:12:b5:cf:3e:8e:fb:17:fe:98:
                    10:6d:e5:bc:e5:d0:43:f5:91:28:c2:20:11:94:19:
                    f6:57:ca:0f:0b:e2:23:2a:d9:0d:eb:f4:b8:b1:22:
                    83:b0:7f:59:80:43:a0:9f:dc:a3:60:80:d6:24:f9:
                    3c:74:5a:e1:28:16:9e:fb:14:de:d8:9d:c0:e8:c6:
                    d2:96:83:f9:77:c9:8c:48:5a:bd:4e:ef:75:8f:d3:
                    91:cc:f0:8b:30:26:c2:57:e9:83:53:b7:64:96:20:
                    ef:b9:0e:5e:84:6c:ad:b2:55:32:85:a7:4c:a4:cb:
                    78:4b:fc:68:d4:68:53:3c:1b:74:07:6b:dd:1e:47:
                    c0:af:b9:0c:b3:d1:28:af:e1:aa:df:39:9a:bb:09:
                    aa:be:6a:7d:a1:b6:0c:23:41:e6:ad:7a:d6:02:2f:
                    b4:f9:47:7f:d2:58:4f:24:9d:c1:82:7e:c2:18:0c:
                    ff:c4:7e:7c:bb:2a:73:2c:c1:63:46:d7:02:80:d7:
                    ee:da:92:cb:c2:72:87:ea:68:33:f0:95:3d:c5:1d:
                    06:59:6d:76:0d:62:69:9a:f3:0e:32:15:53:20:ae:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6D:3F:EA:B3:29:3E:74:0A:94:F5:10:26:7E:C7:01:5B:C6:84:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c0:6d:df:be:1e:61:be:23:d7:de:d8:4d:e2:0b:bd:e2:d9:
         5c:0c:cc:95:94:95:d7:6f:c3:b9:bd:25:85:1b:77:13:6d:65:
         ac:8a:18:f8:1a:4f:5e:46:6f:fa:eb:bd:23:25:9d:88:96:86:
         23:37:71:f8:62:02:c5:68:aa:1f:55:5c:3a:c2:4d:e8:1f:f0:
         75:d2:fb:84:e6:5a:9d:3e:c7:ac:7c:1b:20:33:44:a3:94:a4:
         e6:9d:9b:84:6a:8f:da:10:57:24:00:b7:f8:15:b2:c7:1c:44:
         b6:ef:9b:c2:04:f7:c1:11:18:de:22:2e:d2:36:ba:39:00:a9:
         a7:3d:09:b1:1b:0b:d1:af:af:6b:7f:c1:45:89:4e:99:56:db:
         7f:31:34:41:58:8e:1b:51:3f:f2:09:d2:3a:41:4a:a0:7e:6d:
         07:fb:e3:5b:b8:ee:d7:a3:3e:8c:56:52:c1:a2:97:df:01:c5:
         02:18:06:35:73:47:b9:2e:54:6b:01:35:ff:a1:c7:2e:2e:84:
         76:ec:90:a1:fe:d4:ea:65:c9:b4:38:97:61:23:77:71:1c:3f:
         82:25:8c:c6:27:8a:af:3a:c2:0e:1b:f9:9c:cb:65:ce:af:56:
         ad:fe:4f:86:b8:e7:a1:b7:75:ec:a6:78:12:ca:a0:02:5c:2a:
         ee:f3:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:32 2026 by rpki-client