Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa
File:                     87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa (raw, json)
Hash identifier:          6nm3UEExlK4aT2lXVymondi0u66WCram1K6rdCMbm1o=
Subject key identifier:   D9:3F:79:EE:00:C2:D9:E1:0E:EF:AD:75:4E:0C:43:CE:AD:04:F1:2C
Certificate issuer:       /CN=a4781e6b-d849-4429-a725-c3a994ed0946
Certificate serial:       010D0C9F4328584E210EFB7909E58296C765DF80
Authority key identifier: 73:F8:D7:38:7C:9E:57:F8:94:34:BE:4C:63:86:73:1E:30:AD:B1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     40335
IP address blocks:        2607:2400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fb:79:09:e5:82:96:c7:65:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4781e6b-d849-4429-a725-c3a994ed0946
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ae8c909f-4418-43eb-b850-4dddd2d526bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:99:9b:c6:c6:6c:24:63:53:f8:6a:35:39:
                    b1:bc:c8:ac:3d:41:c9:d4:f4:81:8b:df:0f:71:42:
                    91:e0:2d:d3:55:a1:11:dd:b9:a8:97:bd:32:6d:9b:
                    2f:c2:ac:1a:26:b7:cc:cb:ef:5f:a0:72:38:08:09:
                    c8:55:85:e5:31:c0:34:ef:bd:67:0d:cf:76:d4:a9:
                    8b:2c:3e:2c:8c:33:4d:24:e1:dd:ed:cc:5a:78:f0:
                    47:7c:f8:45:53:63:a9:b0:0d:f6:ad:b9:a2:77:5d:
                    3e:00:9a:07:a4:00:45:ee:da:4e:81:f1:cd:e1:04:
                    7c:32:b7:e4:06:0a:e5:2d:06:14:58:1b:ba:0b:16:
                    33:cf:1b:94:a2:a2:1b:f7:f1:34:c6:69:ed:62:38:
                    64:6c:7e:83:60:97:fd:6c:c6:a1:f8:c2:dd:a9:96:
                    30:a4:82:81:1f:3e:e5:3e:e5:e9:87:38:36:11:71:
                    c8:79:21:4c:3f:64:1a:35:94:15:3b:a8:2a:1b:9b:
                    d7:34:f0:12:81:41:4f:ad:fd:05:d2:e5:2e:02:c6:
                    03:cc:e8:1b:ce:10:93:0d:c2:be:7c:02:b2:6d:e7:
                    b0:c0:79:15:ce:cc:c6:0f:71:f1:69:f3:d2:05:07:
                    a9:2b:eb:7c:c9:56:45:d3:6c:0e:6e:71:a7:ff:e2:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3F:79:EE:00:C2:D9:E1:0E:EF:AD:75:4E:0C:43:CE:AD:04:F1:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.crl

            X509v3 Authority Key Identifier:
                keyid:73:F8:D7:38:7C:9E:57:F8:94:34:BE:4C:63:86:73:1E:30:AD:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:cb:7e:a3:91:db:31:a7:6c:1a:c0:91:e9:ba:16:b1:e5:
         8a:f8:6d:b7:f2:6d:03:ad:c3:11:ab:1c:07:a0:d8:33:7e:22:
         c6:7b:92:95:fe:60:14:26:5c:59:52:e1:1d:7a:07:02:98:dc:
         29:ab:35:a6:88:6e:38:81:7d:91:84:8f:0d:57:dc:02:37:d3:
         f5:15:90:d6:81:57:7e:39:b7:e7:f4:af:20:0a:7e:0d:dc:c7:
         25:85:8f:f3:8a:25:1b:23:86:6e:7d:9c:e0:0e:f3:25:67:60:
         70:4a:da:7c:a3:24:fa:2a:d1:c2:2c:01:a9:83:73:09:f8:ed:
         23:f6:8d:7c:18:b5:69:30:5f:df:f2:7b:d3:69:9e:e7:20:28:
         1a:7e:ba:40:94:4a:52:ef:b1:69:f0:e8:8a:77:f0:43:58:c0:
         73:87:37:23:b5:eb:35:21:9b:47:d4:eb:b1:3c:21:fd:d7:03:
         8a:e7:68:a5:66:16:b5:e9:66:3c:74:66:88:4b:9f:f0:0b:2c:
         a3:d6:1d:c7:0f:b5:39:f1:05:18:be:08:2c:84:3f:84:d4:e2:
         c2:17:f9:1e:02:ff:1a:75:89:bb:75:e4:63:19:51:fc:4c:1a:
         28:7f:7f:7a:1f:98:19:fa:0c:f7:f5:ce:67:40:5e:6f:b4:e9:
         70:68:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:02 2026 by rpki-client