Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa
File:                     d4b35916-c5f4-39c1-b8ca-6daadd961177.roa (raw, json)
Hash identifier:          QM66nmGDlJZliic/jshntjiIelUVjlm+yCHLRCzL+60=
Subject key identifier:   9E:55:11:53:A9:35:3F:0E:F1:C3:09:F5:40:F3:35:43:42:95:2E:F2
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584EA7916176A4686616FE745560
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27628
IP address blocks:        2607:ee00::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:61:76:a4:68:66:16:fe:74:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e1869442-335e-4737-8ecb-222c559c6505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:58:dd:59:a6:42:72:58:fc:c4:e5:cd:4d:
                    0f:7f:34:d4:b8:86:bd:65:c4:b4:87:7e:e9:9b:55:
                    ce:5e:50:19:56:67:41:9d:f1:e7:11:a9:66:4a:19:
                    5d:44:30:7b:a0:4e:92:59:bb:89:a2:b4:c4:ff:8c:
                    97:ac:66:36:ff:9f:30:90:86:ca:a4:52:7c:70:f3:
                    bf:df:b1:4c:71:1e:fa:3e:87:42:7a:16:90:2e:30:
                    f2:fb:5e:02:f6:33:7a:0a:b5:e0:b2:d1:9b:ff:20:
                    2e:ec:7d:21:9b:ed:39:18:40:8f:21:b8:65:a2:ab:
                    ba:fc:db:a5:52:2d:e2:2d:e8:5d:63:21:8c:c4:dc:
                    11:bd:d7:4c:65:d2:6d:e6:38:d4:21:c0:e0:84:a5:
                    0b:23:bd:4a:6c:c0:0d:c2:57:6a:23:8c:97:b1:81:
                    2e:46:c0:02:0c:a3:63:90:cc:13:de:e0:92:22:e6:
                    fb:75:69:63:6a:5b:f2:32:cd:8a:5e:24:05:16:8d:
                    2a:11:44:c1:75:f3:40:d1:1f:8f:76:6f:ea:77:96:
                    eb:a9:16:ad:73:53:83:a7:9a:0c:c7:95:e4:18:1f:
                    08:d8:18:92:25:44:ba:62:09:ee:50:b2:66:c5:11:
                    95:85:1f:9e:5e:7b:31:6f:1a:f3:78:f4:af:d0:ed:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:55:11:53:A9:35:3F:0E:F1:C3:09:F5:40:F3:35:43:42:95:2E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d4b35916-c5f4-39c1-b8ca-6daadd961177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ee00::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:64:80:b2:f1:6b:4c:2d:bd:58:3a:46:92:85:04:04:c5:76:
         34:f1:f0:59:ca:27:55:2a:2b:29:89:0e:99:56:90:14:d2:67:
         b3:68:40:6d:fb:77:88:d5:84:9b:4d:ee:bf:c8:bf:8f:9b:2c:
         87:29:1f:ed:2a:50:66:75:f3:55:64:bb:71:f6:4d:9f:e8:ff:
         09:05:d6:b5:ee:37:65:3f:ac:f5:69:ae:93:99:9e:33:2f:58:
         a4:b3:19:3f:13:c3:82:cc:6b:4f:95:72:cf:9c:e1:11:59:fa:
         56:1d:92:19:22:cf:04:e3:61:c7:27:c4:d7:0e:f0:fe:5b:34:
         99:f8:ff:eb:1b:7d:b9:72:15:d3:45:3b:dc:86:58:01:bb:9c:
         04:0c:5b:44:9d:ad:3e:f1:a3:16:ce:4c:0b:53:95:b7:c5:d1:
         d9:a4:4f:43:78:97:aa:6a:4c:c4:56:2b:d5:6e:38:df:9a:8c:
         78:c5:73:8a:fb:f6:9c:cc:1c:1f:3d:c4:dc:68:01:a8:d6:4f:
         2a:93:81:6e:85:f3:78:2b:b2:b7:90:f6:be:65:51:9a:44:5c:
         0c:dd:35:b8:10:7e:1c:f4:29:90:76:cb:ae:46:0b:f5:88:d9:
         01:bc:99:61:8e:3f:19:98:af:c4:08:e0:3c:18:64:97:c1:f9:
         63:21:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:17 2026 by rpki-client