Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/61523b07-190f-34e5-b8bf-99d74a5b6f54.roa
File:                     61523b07-190f-34e5-b8bf-99d74a5b6f54.roa (raw, json)
Hash identifier:          /62MYO/aJ0oJj0x0fAlhlZTy6RPoGt1nFepTuXEpU4o=
Subject key identifier:   4C:4F:13:61:F1:16:4C:CD:CA:F3:4E:97:FC:3D:D1:E5:94:F1:65:3C
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584EA7945E2F11F493D702201DC0
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/61523b07-190f-34e5-b8bf-99d74a5b6f54.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2620:1d8::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5e:2f:11:f4:93:d7:02:20:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ee0ab154-8eef-4e6a-8dd3-29c50d230a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:04:b2:41:ea:53:38:26:97:42:ec:3a:84:
                    8b:f7:84:16:ea:4b:91:cb:7c:d3:ed:5d:e6:a2:6d:
                    3b:55:66:33:26:55:37:4f:2f:58:a2:5c:69:4e:09:
                    35:dd:55:87:42:b0:8f:2b:06:7a:b1:ef:d9:c9:17:
                    dc:ed:78:f9:a3:92:ea:4c:71:ff:83:44:85:76:9e:
                    0a:28:bb:65:f3:5a:cf:ad:c8:e0:fd:94:24:c2:df:
                    c3:ae:db:93:43:45:80:d0:44:03:7b:4e:4f:d5:a0:
                    5f:6d:67:be:69:7f:6b:a8:65:89:6b:55:52:8d:ba:
                    8c:e0:a0:a6:96:fd:73:a5:69:20:f5:eb:c6:d5:74:
                    8e:0c:3f:26:e6:20:89:7d:ed:aa:72:50:12:7b:0b:
                    10:c6:45:46:1c:94:2e:88:78:f6:4f:7b:4d:8c:54:
                    cd:82:5b:70:2a:f0:a1:a7:e6:11:e6:a5:78:ab:44:
                    21:4c:a4:2c:e8:8e:ba:08:a2:d4:21:e9:cd:4c:ed:
                    0d:22:79:39:af:77:ee:08:b7:01:3a:11:b9:47:95:
                    2d:8a:1c:a5:00:b7:dc:7d:54:fb:76:a5:be:75:22:
                    f2:34:bb:26:4a:39:d4:59:ff:11:3a:df:c9:21:51:
                    45:49:7a:b1:12:b5:cf:8f:d5:91:54:24:fb:16:d3:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4F:13:61:F1:16:4C:CD:CA:F3:4E:97:FC:3D:D1:E5:94:F1:65:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/61523b07-190f-34e5-b8bf-99d74a5b6f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d8::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:e2:80:3b:9a:1d:3d:49:a7:09:28:8a:94:b6:d0:c3:b5:
         35:03:18:b0:82:5e:01:cd:fd:58:ac:82:20:14:03:5a:32:1b:
         dc:ea:95:e4:72:0b:11:97:2c:54:df:65:67:20:fe:34:95:8d:
         09:4a:1f:5c:a2:15:70:38:42:69:d5:90:95:44:8d:ac:1f:cd:
         f7:ad:00:6c:f5:24:f6:4f:b5:2b:c3:fc:18:6e:16:c7:4d:0f:
         a9:ec:ec:23:45:25:eb:ae:8e:5e:57:00:c2:9a:70:74:90:36:
         fe:8c:f2:87:58:0c:fa:02:87:f6:ab:76:bc:c8:7c:2a:40:3e:
         a6:e9:59:4d:b6:41:0b:a1:f2:ac:48:a8:a4:fe:b4:c4:b7:2b:
         c7:92:25:2c:ba:b0:a3:10:4c:86:54:6d:56:b1:21:f0:86:76:
         42:47:fc:5e:aa:e5:d8:44:59:9f:8b:8d:84:76:c0:d2:6b:d8:
         7d:8b:1b:dd:93:3b:be:ec:9f:5d:ca:91:e7:d5:63:5d:4d:42:
         7b:76:8b:f7:b8:ab:5e:9a:7d:55:7f:7f:86:4f:65:00:57:00:
         f0:fc:0f:41:d8:04:4d:61:00:52:8a:68:25:b2:d9:a5:cc:32:
         d8:f4:ec:9c:5d:07:d8:68:3d:18:de:c8:17:7c:e7:70:26:14:
         0e:e1:90:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:51 2026 by rpki-client