Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2557f414-741b-30b3-ba65-5ff6e7738368.roa
File:                     2557f414-741b-30b3-ba65-5ff6e7738368.roa (raw, json)
Hash identifier:          AYrRVLHPtBaXjiMZN44lGzFNOCwweT8VvAcOK5cpGMo=
Subject key identifier:   06:38:97:12:19:7C:B3:C6:9F:DB:5F:0B:73:8A:1B:88:AC:AD:EC:4A
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584D55BA45EA85F3D1417073A980
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2557f414-741b-30b3-ba65-5ff6e7738368.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     8560
IP address blocks:        2607:f1c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:45:ea:85:f3:d1:41:70:73:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=0e7ac33d-76e2-4c0f-87e5-61bf44b34b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:4f:3a:f3:de:fd:9c:1b:04:b3:f4:40:c5:
                    37:b7:d1:80:31:64:9d:6a:a0:9d:07:0e:ba:8e:6a:
                    ad:fd:bb:ce:eb:03:dc:95:7a:e5:ad:99:89:62:36:
                    9b:62:ec:27:46:08:af:eb:91:92:fa:71:43:0a:a7:
                    62:78:10:b2:f7:3b:33:b2:80:9d:aa:a6:c1:7e:ec:
                    c3:c6:8b:8f:d7:10:39:91:8a:03:e4:ff:e0:75:c6:
                    91:7b:e1:56:b5:ca:48:9b:a5:3a:5a:1d:96:12:93:
                    82:89:83:a5:d0:4e:99:26:64:9f:5b:ca:ef:99:cb:
                    3d:9a:b9:be:8f:1a:9d:b0:9c:c0:c9:c9:38:32:da:
                    fe:50:55:01:33:59:0d:0d:2e:19:16:66:2f:c3:7b:
                    99:66:01:a8:b7:e3:f9:8f:c0:39:2a:a8:e8:b0:ef:
                    8e:31:16:2d:34:db:0e:2b:5b:19:e1:c9:b9:fc:7a:
                    17:72:d3:ab:c1:41:b4:78:64:c6:c9:04:03:77:d5:
                    68:45:45:e9:c9:18:e8:e7:8b:6e:25:20:21:a5:32:
                    bb:04:b2:da:f4:c8:ae:d7:d9:83:38:93:22:59:b0:
                    0b:93:62:5d:d6:27:5c:bc:ae:2b:67:e5:2a:37:e5:
                    55:08:57:cd:98:37:3b:0a:a0:ea:9d:9b:7c:6c:23:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:97:12:19:7C:B3:C6:9F:DB:5F:0B:73:8A:1B:88:AC:AD:EC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2557f414-741b-30b3-ba65-5ff6e7738368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e0:92:7e:fa:f2:71:ae:ef:a8:af:25:80:ae:50:bc:3f:54:
         89:4c:85:28:69:30:3f:54:b5:e1:2c:a3:f0:6c:2b:b9:3b:0a:
         53:68:65:a3:5b:5f:c7:c3:88:54:78:71:56:1b:b3:46:ad:b3:
         2b:23:5a:c3:74:71:3d:db:7b:cc:5b:12:99:f1:ad:86:67:24:
         17:f5:15:e5:48:02:e0:a5:23:b0:37:9c:19:4e:b7:b3:8a:bf:
         cd:67:9f:74:73:fe:29:9b:c6:2d:31:b0:d2:3f:65:a6:4b:1b:
         8b:3d:c6:6c:27:8c:4e:4c:2d:99:e2:26:5f:38:53:8c:75:e2:
         4c:be:34:fe:eb:22:34:15:68:22:ce:db:78:ec:d6:42:81:95:
         1c:59:c9:ed:35:b5:6e:5d:25:20:5f:be:98:ff:a8:9e:0a:3a:
         49:34:e6:ca:d9:d4:1b:11:0f:c6:17:0b:3e:0c:6e:af:cf:fc:
         fd:cf:8b:13:41:30:66:42:d4:c3:a1:b7:76:82:c9:8d:36:f4:
         07:63:4b:a4:cd:ac:cd:5b:7f:f5:35:12:61:b1:d8:28:15:20:
         2c:99:0f:01:0a:11:e3:d8:2c:8d:53:0b:dd:05:c8:fe:ad:02:
         ca:f5:7b:e9:6a:14:78:5c:7b:72:da:97:a6:b9:3a:4e:c4:f5:
         78:9b:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:04 2026 by rpki-client