Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa
File:                     c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa (raw, json)
Hash identifier:          KIygG9/wDq4rR0ZqJJ+lAFTHBm8dEp1WaSmb1AVqZRo=
Subject key identifier:   64:16:43:E7:17:52:6C:59:9D:3F:DC:7E:E7:35:C7:2D:A0:23:52:9F
Certificate issuer:       /CN=ecc7bb42-b9f8-4638-86ba-c2a809d45c1e
Certificate serial:       010D0C9F4328584FC03678FF9492E490D9545E80
Authority key identifier: 44:96:EE:C3:8A:2E:9F:8D:30:BB:84:5B:4C:9F:37:01:BE:D0:0E:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa
Signing time:             Fri 06 Nov 2026 14:00:13 +0000
ROA not before:           Fri 06 Nov 2026 14:00:13 +0000
ROA not after:            Thu 04 Feb 2027 14:00:13 +0000
asID:                     174
IP address blocks:        2604:7000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c0:36:78:ff:94:92:e4:90:d9:54:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc7bb42-b9f8-4638-86ba-c2a809d45c1e
        Validity
            Not Before: Nov  6 14:00:13 2026 GMT
            Not After : Feb  4 14:00:13 2027 GMT
        Subject: CN=72e25eeb-765f-4e40-956a-7d676083f92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:56:07:3d:f5:77:80:7a:00:d6:84:3b:a3:
                    d4:16:26:6c:1f:05:62:f9:ed:f1:b8:bc:f6:2e:42:
                    90:f2:f4:9c:2e:a5:a0:ab:c1:43:d7:87:43:d4:9e:
                    a5:84:81:ae:b5:6b:63:99:ee:f6:07:bf:82:08:6c:
                    87:56:f9:6e:41:9b:5d:03:ca:34:92:96:5a:1c:49:
                    6a:a1:00:85:80:0f:ed:4c:2b:26:ab:df:12:6a:d3:
                    d0:21:f9:05:64:eb:78:39:a7:32:9e:ed:18:97:18:
                    17:82:bb:d1:a4:8f:c4:24:e5:a1:82:c2:c2:2b:ff:
                    70:1e:3a:cd:82:e6:86:df:04:69:1c:f5:30:83:f5:
                    96:5b:6b:1f:0c:16:4d:55:bc:ca:dc:35:ad:7e:2d:
                    80:3d:3f:82:fd:56:49:53:5c:a5:ba:af:85:08:dd:
                    f9:65:05:2b:ad:3b:a9:6e:f4:b6:38:d4:1a:f5:0a:
                    a7:e0:e3:3b:72:5d:f2:45:0b:af:47:0f:04:63:6d:
                    4b:d6:f8:a5:6f:49:ec:10:59:ff:76:48:6c:91:76:
                    50:46:3e:4c:e6:be:da:92:36:46:26:13:7d:24:47:
                    fc:2c:17:e1:b5:68:44:23:e6:e2:c8:5e:cb:d0:58:
                    0c:0a:5a:d9:a5:b5:bb:a7:bf:10:3f:95:62:00:22:
                    45:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:43:E7:17:52:6C:59:9D:3F:DC:7E:E7:35:C7:2D:A0:23:52:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/c74bb307-13ea-3c21-9f9b-c9965b45b85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.crl

            X509v3 Authority Key Identifier:
                keyid:44:96:EE:C3:8A:2E:9F:8D:30:BB:84:5B:4C:9F:37:01:BE:D0:0E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:32:9f:4c:83:cb:ae:5f:0d:30:6e:c3:31:9a:01:c7:5c:ba:
         91:43:9f:a5:af:4e:2c:5c:1d:67:a5:4f:cb:7c:c8:2c:b9:24:
         14:00:c5:89:ee:90:3f:fa:2e:93:d2:fc:4e:83:c4:b1:93:48:
         00:2c:69:ae:99:d4:76:1d:e2:97:91:65:6e:03:16:76:90:01:
         8e:aa:8c:6b:fb:a2:ea:92:41:e1:f5:c0:37:2d:b5:29:85:07:
         4b:6b:af:f3:2d:28:61:06:e7:7c:8f:94:ac:f3:d9:28:7f:bb:
         0d:17:22:73:89:73:b8:f8:a2:57:42:92:ad:21:e1:fa:10:94:
         8c:99:71:ec:f6:20:b0:3d:a3:c0:2a:43:26:a0:dd:c7:26:05:
         32:2b:11:72:9c:58:70:63:b9:7b:9c:96:30:ab:74:9c:f4:51:
         bd:7e:62:72:9f:59:dd:99:2d:e2:30:bc:07:4d:70:46:8a:67:
         65:59:87:ae:29:d7:26:07:59:96:62:25:8e:60:84:83:d2:b3:
         66:df:a5:0d:89:fc:c4:25:2d:53:c0:c4:df:fc:6b:f5:c9:c5:
         57:53:84:5d:ed:81:0e:ae:5a:f0:10:ae:c9:19:af:66:9a:07:
         16:90:82:2e:70:91:b4:fe:7a:f3:9d:d2:87:d8:2e:89:fc:e1:
         fb:be:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:14:38 2026 by rpki-client