Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/c69473d5-2a92-379d-8c66-d1a3b6b1aa8e.roa
File:                     c69473d5-2a92-379d-8c66-d1a3b6b1aa8e.roa (raw, json)
Hash identifier:          72IyhRuo6miYjmg9uimMl/zDEH1ZpsHtgC7OrnExplM=
Subject key identifier:   51:79:0A:EC:CF:9B:CE:61:61:20:DF:4E:BD:B7:CA:18:1A:4E:DD:B0
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584EA793927DD654098E3A44F540
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/c69473d5-2a92-379d-8c66-d1a3b6b1aa8e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8075
IP address blocks:        2607:6bc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:92:7d:d6:54:09:8e:3a:44:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=970ae50e-97a3-457c-9f9f-9e58c360ab37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1d:55:cb:04:60:cf:8d:e7:b4:5a:19:84:38:
                    7f:22:5a:83:29:43:5f:ce:02:5b:c6:a0:b2:9a:8d:
                    27:af:9c:26:a3:d5:aa:58:27:07:15:0b:5c:8d:ec:
                    de:81:8e:49:7f:e6:27:37:cb:7e:7f:ec:87:ff:5c:
                    c6:90:2d:4f:02:16:3e:8f:a7:1d:ca:90:94:a0:b1:
                    05:26:74:d9:b5:38:af:b6:8e:e0:c4:bc:7f:6a:d2:
                    ef:2f:0c:92:53:a3:2a:7f:8c:f3:b5:06:67:2b:dd:
                    ae:64:54:52:c5:ca:c8:67:95:a2:8c:f8:26:09:35:
                    e3:f2:47:f2:92:8e:87:8e:0f:b6:0a:84:1f:ab:48:
                    0b:9d:50:60:83:7e:7d:05:f1:6a:8f:d7:8d:f3:84:
                    37:b3:09:d3:90:ae:80:48:7c:ef:01:3b:5e:00:1d:
                    56:9c:bf:fd:2f:2c:85:da:3d:e2:35:14:7f:10:98:
                    ce:52:c9:57:ad:f0:d5:30:30:24:ef:d9:4f:8d:b3:
                    b7:20:58:89:ff:70:86:b1:8e:8a:15:32:eb:dc:d8:
                    f9:a5:32:3b:50:b6:76:8a:e9:52:26:ff:2b:94:40:
                    14:dc:dd:96:a2:0a:61:ca:d3:fc:b3:56:f0:7b:92:
                    07:61:fe:d5:3c:7d:32:32:a8:c1:47:90:c3:b5:91:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:79:0A:EC:CF:9B:CE:61:61:20:DF:4E:BD:B7:CA:18:1A:4E:DD:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/c69473d5-2a92-379d-8c66-d1a3b6b1aa8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:ee:ca:6f:d2:1c:f6:60:18:1e:87:aa:8a:0a:fe:e0:71:
         70:09:de:9b:ce:90:ab:b9:92:62:a4:d8:9b:11:8e:2e:3b:23:
         d0:ac:21:0d:a8:8f:35:8e:70:8c:ea:79:7a:e5:1b:be:df:3d:
         f8:08:cd:30:e9:d0:94:bf:e9:e1:57:1a:b5:0e:86:40:c0:2e:
         d8:60:6d:66:09:8f:cb:17:9e:ff:f2:79:b8:75:22:85:85:0b:
         d9:42:d9:9b:8a:9b:58:ef:e3:45:db:fc:a2:79:e5:ac:a1:7d:
         b6:ef:72:13:32:ff:d5:15:0c:8c:80:e4:f3:90:60:bf:c0:fb:
         78:5b:6f:33:75:83:33:46:e8:66:1e:7a:5d:00:ad:87:f9:00:
         4b:25:b3:1f:bb:b2:fe:4c:2a:f5:34:ac:9b:7f:bf:56:29:da:
         65:24:ba:02:ae:bd:3b:5b:56:35:87:32:d9:4b:e5:a6:c7:81:
         cb:89:f2:4a:0b:93:25:37:9d:8f:cf:1a:5b:a6:9c:b3:a8:c0:
         0c:1e:c4:64:13:07:a0:71:19:9c:76:73:4f:1c:34:80:d4:4b:
         f8:11:7e:7c:ca:fd:4a:88:5d:a3:78:5a:24:67:e2:83:0a:52:
         af:17:0e:f5:c3:19:87:f4:92:0c:c6:1e:53:ab:85:d2:4c:2e:
         58:3f:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:38 2026 by rpki-client