Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/77683a95-f857-3fbb-a965-ab85f26974f3.roa
File:                     77683a95-f857-3fbb-a965-ab85f26974f3.roa (raw, json)
Hash identifier:          sv1WTFzSYPfzZTj0f8IQWbVvGnVHKjmjwMFC3x/6ZUk=
Subject key identifier:   C7:8F:5C:B6:E7:CC:8F:EF:78:F2:4C:87:1E:50:EE:69:7F:50:0C:F2
Certificate issuer:       /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial:       010D0C9F4328584CB121D4AF9311142AE0F57D80
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/77683a95-f857-3fbb-a965-ab85f26974f3.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     61414
IP address blocks:        2600:b400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d4:af:93:11:14:2a:e0:f5:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=86ccf35a-82b5-430e-b71c-9d5a2fe4b6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:1f:79:77:dd:cb:f6:86:ae:ce:b5:a3:ec:
                    c7:b4:02:c9:02:a0:a8:07:58:29:3f:ba:03:e1:9e:
                    e2:f0:79:36:a4:66:92:ba:ad:26:5b:19:4f:19:71:
                    1b:40:70:f3:8c:00:fe:66:08:dd:ad:fc:a6:ee:4e:
                    1d:cd:ee:20:70:9d:03:db:c5:66:09:24:9a:4f:2e:
                    0d:35:07:9a:95:74:f8:70:95:1c:62:96:08:c6:aa:
                    ed:23:ab:51:a8:1e:7c:48:a8:bc:8e:49:4e:3a:e3:
                    c7:f3:35:c2:13:d0:8b:b6:e2:34:5c:03:9d:3a:89:
                    57:14:ae:f4:8c:d8:d1:6a:79:c4:c4:fa:55:19:16:
                    d6:7d:49:ab:14:49:2b:60:d9:0d:ee:c5:d7:7a:ad:
                    b2:32:e4:6b:1e:1f:08:f9:51:34:f7:90:04:cb:dd:
                    95:ba:ed:8c:37:15:6a:0a:af:87:54:f7:6a:5a:d8:
                    50:1b:8a:3c:19:39:7a:62:b9:75:c8:dd:51:0f:0c:
                    6e:6a:d0:b3:93:c4:ed:9f:5a:70:4a:4b:54:f9:0c:
                    d4:a2:07:b6:ae:d7:91:f3:fe:16:e9:90:7c:5a:aa:
                    6b:28:ff:d5:d6:01:b6:5a:62:ed:1d:32:fe:dc:eb:
                    ea:b8:12:2f:68:39:0b:2d:ff:22:a7:8a:66:9a:f0:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:5C:B6:E7:CC:8F:EF:78:F2:4C:87:1E:50:EE:69:7F:50:0C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/77683a95-f857-3fbb-a965-ab85f26974f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl

            X509v3 Authority Key Identifier:
                keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:b400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:c9:7a:2f:b8:05:52:39:dc:8f:58:33:d8:75:ff:1d:71:
         5c:77:f0:05:72:75:02:7d:9c:e8:f0:c7:70:15:b5:9d:9a:7d:
         0e:ca:99:4d:8a:40:b9:fb:90:ff:c5:b3:66:0a:a2:b3:2e:1c:
         0f:40:46:4a:fc:11:d1:ef:b5:8c:f2:30:ca:0a:6b:9b:2f:09:
         36:8b:aa:97:4c:7e:15:73:98:3e:bd:93:a5:8b:56:10:6e:13:
         5d:d5:30:0d:4d:f7:41:1f:d2:b0:dd:3d:7f:94:ee:ca:5d:54:
         38:98:32:7a:b5:19:3d:33:70:de:90:48:d4:b5:14:f8:3c:ec:
         23:6a:62:21:4c:d2:8d:73:9f:54:1b:52:cb:7d:e0:6b:71:5b:
         c4:08:05:ee:02:93:a6:ef:30:67:b5:79:7d:67:2f:9b:e1:96:
         26:bc:2c:62:93:c7:3a:ff:5d:01:06:ed:f8:5f:89:42:c6:33:
         5e:80:f1:0a:09:5b:0f:de:0b:17:3b:a4:39:08:8b:c2:8a:57:
         0f:84:f8:89:87:4f:d0:73:2a:33:20:7f:fb:db:8d:94:f6:1e:
         34:63:a3:2d:2b:66:bd:9d:ca:e4:6a:d5:f6:ba:c9:e8:8b:06:
         d2:2a:91:67:45:78:95:9e:18:b5:65:09:cc:d7:7f:5e:56:c3:
         55:09:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:59 2026 by rpki-client