Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa
File:                     f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa (raw, json)
Hash identifier:          ZHZBdiINMYCTKlslfTN7TxEfdEtX63BjzS1eEVveATs=
Subject key identifier:   C4:EF:7B:D3:A1:FE:5C:16:A5:74:17:A3:02:9D:15:03:3B:29:B5:2B
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EA79C5230408D19F4AE2D2B40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8070
IP address blocks:        2603:1063:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:52:30:40:8d:19:f4:ae:2d:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fa8f3c70-0c30-4a12-bcc1-5e71bfb6ce42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:45:38:e3:51:ca:14:c8:79:5a:1f:ed:36:
                    d0:c9:f3:2c:91:11:e9:d2:03:53:e1:a8:29:aa:af:
                    d7:87:43:b3:6f:ab:3e:f6:61:1a:fe:27:54:06:fb:
                    cf:78:ea:e3:a1:ce:b3:90:16:b0:3a:47:df:41:e5:
                    1f:f5:95:e9:51:13:c7:38:f8:84:7c:a3:34:a4:dc:
                    aa:10:16:c6:76:2c:39:35:89:c8:6d:4e:56:2a:16:
                    53:a6:89:2b:d0:d2:ca:38:56:01:a3:1d:2a:4a:b2:
                    77:3d:ff:47:69:40:29:5c:a5:20:63:27:bb:8a:e8:
                    b5:f3:e1:a2:af:3f:25:22:dc:d1:15:b2:4b:5c:db:
                    7c:4a:2d:bf:95:f9:26:b2:6f:c0:46:33:19:b1:21:
                    fc:14:ff:ee:aa:8d:c9:31:8a:ff:ad:2d:a2:58:7f:
                    ce:a8:ac:b1:50:b3:fa:e4:aa:a7:07:df:b0:93:91:
                    1a:63:80:5b:82:71:6f:4f:2c:20:87:e2:14:96:dc:
                    e9:eb:67:ed:00:03:74:3f:e7:24:cd:9e:19:22:1c:
                    c2:c1:1b:e1:c7:12:e7:5f:ea:bf:a1:ac:fb:57:f7:
                    38:51:8d:0e:05:13:e1:5a:a9:ac:d0:c0:c9:d9:0c:
                    70:42:6c:43:b6:28:69:d9:26:cb:5b:99:45:a0:bb:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EF:7B:D3:A1:FE:5C:16:A5:74:17:A3:02:9D:15:03:3B:29:B5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1063:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:27:49:bb:5f:6c:5d:e5:36:27:8d:b7:08:7b:82:c0:bd:
         74:ad:38:bb:1c:31:72:27:de:93:ee:df:9e:56:58:91:a0:0d:
         49:91:c1:0a:1f:7b:46:04:0a:b0:ab:58:fa:64:57:87:d7:9b:
         e4:ee:98:ce:44:e0:ca:23:e6:35:bf:27:cf:94:04:c2:35:2d:
         d5:75:7c:8d:0b:eb:52:86:be:d7:1d:59:8b:23:57:97:38:ab:
         b8:fe:26:7e:10:f8:b7:a2:e6:24:48:d9:11:9d:e9:d2:bb:52:
         93:96:42:75:65:93:a0:8b:16:c7:81:85:d4:ce:e6:4b:90:db:
         a9:2d:51:43:78:ee:a3:62:7c:a5:7c:4f:6d:18:4b:d9:ad:82:
         b4:11:3d:9b:49:f8:a6:38:aa:7f:2f:6b:c0:3f:07:b3:5b:25:
         e3:3f:82:f6:d2:ae:0c:38:ca:01:bd:d2:3b:f6:3d:f6:68:a0:
         3d:4c:f6:d7:ce:ca:17:c6:cf:d7:48:17:93:a5:43:57:72:b8:
         d6:cc:88:dd:9a:58:b0:10:9e:da:25:25:24:90:e9:ba:7a:70:
         e4:be:ab:63:31:0d:17:0c:22:9c:bf:28:6f:79:1e:07:79:27:
         a6:7a:d4:55:73:ff:93:bb:8a:7a:70:51:59:5d:04:3d:a4:02:
         dc:b5:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:21 2026 by rpki-client