Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa
File:                     1f31816f-660e-37d8-a95b-1c37676acb78.roa (raw, json)
Hash identifier:          hepzoHcNV5fFdP1OzS3xOlsBUAZcb5u45320I58TBfI=
Subject key identifier:   CF:02:5B:F3:E6:F7:FE:AB:9C:69:36:56:2B:44:BC:E8:89:58:07:A5
Certificate issuer:       /CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
Certificate serial:       010D0C9F4328584C6E2171A9BE7FBCFF13C796C0
Authority key identifier: EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     395262
IP address blocks:        2620:0:7f00::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:71:a9:be:7f:bc:ff:13:c7:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=cca8ec96-f157-41c8-be25-7a32fc5fb687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:57:27:c6:2a:80:44:ae:58:6a:f9:15:f8:
                    5d:b8:8e:86:6b:a7:ed:70:ba:af:f9:7d:39:9c:03:
                    3b:07:21:d1:cf:60:a5:52:30:3f:b7:40:bb:5a:0e:
                    11:01:e1:59:ff:a8:00:0c:76:87:a7:86:e5:c7:dc:
                    f7:fa:90:a8:f6:52:9c:e7:e2:04:c9:c2:5b:6d:da:
                    81:36:b0:94:50:a9:5d:f9:b2:98:57:9e:67:fd:05:
                    c6:24:a1:a2:d5:b7:c5:b6:da:ce:35:28:8d:c2:3c:
                    1d:8f:25:54:43:72:0f:44:3d:4e:d3:9b:91:54:dd:
                    83:87:e6:d8:d2:bc:0a:83:b1:fa:69:5a:37:41:58:
                    0f:55:14:6c:e0:b4:6a:1b:89:80:41:66:a0:d1:9a:
                    b8:39:91:6b:40:55:a6:da:eb:f1:5c:51:92:3f:64:
                    de:76:04:7d:1e:6c:82:9a:d0:80:08:63:4b:e2:4a:
                    72:0b:42:4f:c0:c1:24:83:37:5d:ab:61:83:b8:ea:
                    88:33:e5:01:89:55:d2:71:f1:4b:cb:4b:53:72:61:
                    65:c6:bb:81:98:31:da:c9:3f:d6:8d:12:d1:32:c6:
                    7c:54:3a:d2:d4:92:25:52:58:0e:3c:74:cf:bc:5e:
                    99:b6:0d:9d:03:4f:09:87:23:5a:7c:25:b7:88:5d:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:5B:F3:E6:F7:FE:AB:9C:69:36:56:2B:44:BC:E8:89:58:07:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.crl

            X509v3 Authority Key Identifier:
                keyid:EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:7f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:3c:e8:46:f7:37:c7:61:aa:aa:a1:cb:81:e9:54:58:17:
         00:f8:5b:3c:a6:bb:fa:a6:43:ab:64:e4:35:32:9c:46:62:a9:
         59:12:f3:87:79:d0:4e:37:ba:47:02:46:12:f0:86:e0:24:b6:
         c1:c4:65:d0:fa:7c:e4:89:35:6f:0a:fb:44:fc:ec:cc:0e:61:
         30:99:3b:eb:cd:97:00:12:53:c0:3a:b2:39:fe:9d:df:d2:5b:
         d0:ad:5f:c8:47:52:4a:15:5c:cb:d0:db:c8:e4:e2:dd:fa:57:
         d9:10:c9:b2:6f:21:c2:6e:45:d9:b3:1c:3b:75:a0:1d:c4:75:
         62:2e:90:2e:46:31:d6:10:8f:52:05:3d:d5:56:10:f3:8c:a7:
         e9:eb:3a:7d:7c:fc:70:e9:b1:4f:5d:48:b2:5d:00:bd:ee:a6:
         f3:ef:3e:10:dc:06:f6:6f:84:8d:19:0d:28:90:e5:1e:81:a9:
         c1:86:3b:a4:ba:6e:5a:bd:2f:33:d3:3c:b4:e3:8b:f5:fe:c8:
         bb:42:f0:f3:7d:fe:80:c4:55:8d:66:c9:f9:8d:0d:b8:fb:02:
         d3:f9:3b:35:ac:8c:d3:b2:23:ef:06:b7:d2:d4:bc:44:f6:3c:
         f9:07:9c:26:7a:1f:a8:56:05:ae:4f:71:a4:dd:ab:24:6b:5d:
         15:57:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:16 2026 by rpki-client