Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f79d9fec-cf46-3ff5-925a-996e640f63a3.roa
File:                     f79d9fec-cf46-3ff5-925a-996e640f63a3.roa (raw, json)
Hash identifier:          5uxP/Xn3eAcwoDTExDLFzGVBTwrAMUG7/8SFTlIkBm0=
Subject key identifier:   BF:F9:76:77:F9:5D:92:07:FA:0A:8A:36:CA:F3:39:62:52:3A:7F:D5
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584DFBD5DB11888388FBAB67FAE0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f79d9fec-cf46-3ff5-925a-996e640f63a3.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     394905
IP address blocks:        2607:f790:fff8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:db:11:88:83:88:fb:ab:67:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=1219ff66-b441-4c20-a725-dd88297fa5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:88:85:b3:ae:99:ed:20:25:2a:98:30:9d:
                    98:7d:8d:c2:96:c8:a7:41:d5:a0:72:60:56:e6:53:
                    b6:1f:0a:99:93:c8:d1:86:39:1e:84:3f:87:da:9c:
                    45:e5:31:a3:f4:79:25:ee:c0:30:79:b0:b8:8c:42:
                    55:ce:c8:41:14:89:71:4c:5e:16:88:40:9e:71:72:
                    a9:28:ea:6c:8c:4e:04:b1:96:00:ab:69:9c:b5:26:
                    c2:71:07:73:97:4d:5c:cb:1a:7d:5a:01:f3:b3:66:
                    95:31:07:70:7b:84:c6:19:26:7d:a2:71:e2:e3:17:
                    4a:a9:07:3b:e3:d4:a3:55:1a:4f:a2:86:24:d9:6d:
                    f9:fe:90:8a:2b:4c:bd:8c:4f:4f:d0:b8:bc:33:79:
                    f3:72:6c:03:be:8b:dd:dd:92:0a:46:6b:e4:9d:37:
                    69:23:1a:e9:79:33:67:5f:9c:77:22:dd:24:78:21:
                    ad:8d:f4:fb:3b:25:87:69:bf:6f:27:7a:26:ae:b5:
                    43:dc:90:17:d1:51:79:0c:50:f8:c7:26:ed:99:f7:
                    ff:ab:86:8c:72:43:7b:a3:29:37:93:10:3c:20:4b:
                    fa:b6:a0:14:08:00:80:1c:4f:6a:70:22:19:82:65:
                    86:3b:d6:77:a0:df:fd:df:96:b5:e7:92:6c:14:a2:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F9:76:77:F9:5D:92:07:FA:0A:8A:36:CA:F3:39:62:52:3A:7F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f79d9fec-cf46-3ff5-925a-996e640f63a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:02:a1:93:d3:f4:c4:34:53:39:11:dd:57:b2:bc:a5:cf:6f:
         80:55:7d:b7:dc:9e:80:ca:fd:cf:2d:bf:5f:62:d4:06:18:85:
         db:37:e2:3c:25:83:28:79:8a:4e:1f:2e:a6:63:b3:4e:86:dc:
         62:9b:a4:f0:f6:c2:fa:58:44:fa:8c:48:21:68:3c:c3:0e:57:
         ce:7c:aa:0d:ac:8c:67:c0:29:0f:c2:9f:b6:aa:bd:d5:0a:68:
         f0:81:17:28:fe:33:63:73:c4:a5:44:77:c2:c8:65:60:a4:52:
         16:73:ee:39:5c:6b:d9:11:2c:7b:a5:dd:de:5f:83:f3:0e:55:
         89:bb:65:af:97:7f:e6:4f:48:4e:59:52:53:41:c3:f2:00:23:
         ab:04:0a:3f:fd:94:41:01:a4:2d:d1:98:99:48:8b:ab:50:7b:
         8d:b6:c7:0e:96:36:ee:b9:26:59:ae:9c:7b:d8:cd:a2:ac:89:
         77:c7:81:95:0f:84:30:10:2d:f3:22:e4:58:78:4e:40:e4:de:
         75:92:e1:82:b3:33:d4:cc:e8:59:a4:22:34:bf:2d:7e:89:35:
         8f:80:bf:c7:3d:73:93:41:3e:97:9b:97:f9:62:18:29:5f:64:
         fd:c9:3d:d1:0e:8b:57:42:98:48:5c:81:bd:73:c9:45:89:46:
         fd:43:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:30 2026 by rpki-client