Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa
File:                     e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa (raw, json)
Hash identifier:          jtUQ0BazhTuRbjYfix+vYI4vhuIw3LpHfA8drIAoWUI=
Subject key identifier:   8F:14:69:63:91:94:2E:30:42:E6:6C:E0:B1:C9:5B:3B:02:DA:54:7D
Certificate issuer:       /CN=8f4a083f-2810-4d6e-a7c3-81c8b1d61896
Certificate serial:       010D0C9F4328584EA78F67ADD7C4E1A3231C1E80
Authority key identifier: 0A:30:E6:5B:B6:A2:07:C8:21:6A:34:39:61:00:AC:D3:9F:82:0D:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5786
IP address blocks:        2607:2000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:67:ad:d7:c4:e1:a3:23:1c:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4a083f-2810-4d6e-a7c3-81c8b1d61896
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a2bbbe68-a143-4c7b-a6e3-2ce742758303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:00:4e:45:47:05:3b:31:43:f6:f2:3b:c4:
                    6e:ff:17:73:22:a4:70:10:80:ce:15:e2:50:2f:53:
                    c4:1b:29:7f:9d:28:88:8b:73:8d:48:b8:aa:26:60:
                    5b:22:c0:06:a1:ec:36:99:aa:8a:d6:7c:36:55:3b:
                    72:63:f9:d4:2b:af:03:cd:38:c0:09:4b:9d:6a:25:
                    35:af:41:6e:68:52:a2:42:e9:f0:ad:44:37:b1:d1:
                    35:03:4a:b5:1f:a6:18:17:02:2d:c4:c0:f6:61:2a:
                    8e:5c:2c:0e:b3:1b:6f:da:58:0f:ae:a7:08:e6:d3:
                    2d:d1:d8:78:6a:72:f3:4a:84:13:29:33:5b:06:e6:
                    10:60:06:dc:16:4a:61:11:ba:5a:49:3e:a8:f8:0c:
                    95:c8:d0:7d:65:b6:4b:2a:32:0b:6e:25:6f:ba:68:
                    66:2a:bc:16:63:df:52:42:6d:b0:f3:97:87:ad:c4:
                    f6:b3:9e:dc:1b:4c:b4:d3:b9:b2:fd:71:73:d3:8f:
                    27:99:78:7c:cc:da:69:cd:c7:a0:a4:54:bf:ac:ae:
                    74:1b:3f:43:92:e3:26:9a:26:30:7b:5a:b2:d2:41:
                    b1:09:11:3a:23:54:05:a9:8c:6d:45:7c:23:8b:0f:
                    85:c1:02:d0:25:1b:2e:0b:ff:91:42:9f:27:d1:60:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:69:63:91:94:2E:30:42:E6:6C:E0:B1:C9:5B:3B:02:DA:54:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/e11c0950-327e-3bdc-b80c-db4aacfb49bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.crl

            X509v3 Authority Key Identifier:
                keyid:0A:30:E6:5B:B6:A2:07:C8:21:6A:34:39:61:00:AC:D3:9F:82:0D:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f4a083f-2810-4d6e-a7c3-81c8b1d61896.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:47:f3:a4:9a:7c:05:8b:3d:0a:96:f0:98:7f:4d:ac:0d:
         d2:27:f2:c0:74:2f:cd:02:a7:02:b3:29:25:e1:43:cf:0c:84:
         ba:52:a0:06:c9:d0:53:78:8c:f1:36:75:e6:61:9b:f0:99:6b:
         17:e0:91:60:57:a2:a5:b3:48:65:a2:fd:a6:44:f3:ec:55:e5:
         4e:56:be:78:3a:d9:0e:00:1f:20:7c:ca:59:68:a2:41:78:da:
         12:44:fd:2a:dd:98:48:86:31:44:c6:a3:d1:f0:d1:c0:a3:2b:
         27:7d:07:06:ed:05:97:d0:18:5b:61:59:e1:3f:a7:ee:0b:c5:
         c4:84:8a:27:e4:98:04:8a:16:4e:a7:07:18:2f:49:a4:21:38:
         27:cc:04:bc:d2:5f:90:48:3d:8b:05:51:3a:b1:ba:fb:85:4c:
         9f:32:3d:7c:37:0b:a9:c5:5a:2c:49:fd:59:d2:70:3e:50:96:
         61:4b:f5:ce:60:ef:db:cb:09:e9:1e:9b:59:c5:a4:0c:52:49:
         d8:d4:40:3e:7e:d7:26:c3:e7:05:82:7b:db:48:5d:c5:52:f4:
         90:89:75:8b:9b:7f:c9:57:9b:e8:99:27:b6:93:3e:4a:0e:42:
         83:c9:8f:c0:f1:00:92:63:76:b5:91:9f:a8:3d:52:fa:74:ff:
         bf:ae:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:43 2026 by rpki-client