Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File:                     b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier:          XZzRZg33U6EmGgL9x8SUH/sqhXlv9fdhKIX940ofDcQ=
Subject key identifier:   DC:5C:77:9C:7D:21:9A:22:BC:B6:5D:57:E5:A3:C0:0A:1F:46:FC:9C
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328584EA5AA6B19F82E162E2FB82F60
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6b:19:f8:2e:16:2e:2f:b8:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=5ae012f4-ca02-45e8-abb7-30c491b99c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:4b:70:eb:80:f4:68:b2:1f:1f:47:d7:27:
                    27:26:b1:9e:8b:f9:39:55:71:a8:79:99:a6:fd:51:
                    0c:d3:1f:31:7e:06:b3:ff:49:c9:91:9f:13:af:0f:
                    5d:ac:d8:8b:23:b3:9a:86:1f:14:be:cc:bb:1b:56:
                    e4:33:26:cd:31:3f:67:42:7d:b7:d5:55:22:ee:f7:
                    e4:03:37:8b:63:05:53:a3:5a:7b:a1:ae:67:6b:61:
                    f1:63:ad:ff:fa:6f:2a:b1:09:56:7e:28:0f:ef:f6:
                    1a:13:b7:94:31:4b:97:6f:98:4a:c5:05:9e:8f:2a:
                    6d:da:b9:15:e9:ae:b1:0e:3c:dd:dc:67:0d:06:cc:
                    8d:0f:c9:9f:05:58:a6:b4:8d:26:2a:66:18:05:e7:
                    f1:75:e0:e0:fe:d2:3f:fa:c5:93:03:31:11:fb:e9:
                    52:47:6f:90:db:f5:ef:a6:a1:f3:75:37:f2:b8:29:
                    d0:1c:f4:0e:13:60:ee:de:c9:00:27:0c:27:03:08:
                    3a:81:45:e3:1e:93:a8:92:28:fc:07:1e:67:10:78:
                    cb:c0:e3:88:2c:f2:41:bc:04:b9:20:51:88:da:b3:
                    3c:d6:b6:19:3f:be:4e:cc:2a:d5:c7:dc:77:9d:d7:
                    5b:3f:c4:d4:4d:97:c7:db:f7:aa:4f:d5:08:52:fd:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:77:9C:7D:21:9A:22:BC:B6:5D:57:E5:A3:C0:0A:1F:46:FC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:12:86:35:7f:f4:2b:d4:5c:ed:fd:58:f2:04:4f:fa:10:b1:
         d2:bf:fa:ed:03:ff:bb:0f:68:d4:f8:c8:74:e6:00:3b:27:b1:
         e8:6f:34:29:69:70:c8:c2:97:3c:08:86:bb:2a:ec:64:7f:6f:
         4f:77:52:73:42:a3:92:f0:4c:10:87:de:c0:41:21:ca:11:0e:
         9c:55:7c:fc:05:32:0a:35:52:be:9e:b2:a2:94:ff:61:cc:39:
         64:d6:94:27:d0:6b:e8:ee:d4:4c:eb:66:fb:87:5c:a4:43:81:
         56:bf:b5:42:86:bb:b7:0d:4c:a1:10:91:8c:57:2e:c4:d9:6f:
         80:84:7d:26:59:38:e0:f1:02:9d:b0:b1:d9:b1:fc:fa:2d:18:
         2e:f0:e5:2f:c3:83:af:3e:da:f5:c4:05:5f:79:17:be:72:ff:
         c5:5d:05:34:b0:9f:7c:31:33:15:df:90:a0:03:7e:f0:70:7d:
         31:86:f5:89:9b:0a:3a:57:8d:dd:c0:06:7b:ed:4b:04:11:5d:
         a9:bb:40:f9:5b:bb:45:d8:ee:38:66:c8:0e:ff:84:91:b5:fb:
         51:dd:cc:13:cb:56:ec:c1:a1:26:d0:00:ee:9e:38:52:4d:3b:
         a9:13:01:ce:d0:f6:41:2b:9b:b2:ef:00:a2:3b:a1:15:2f:94:
         c2:28:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:17 2026 by rpki-client