Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa
File:                     b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa (raw, json)
Hash identifier:          gsJrB1DXkvaY+A8OrfgZ1O5DcGE4w19ftzuBi1zw+Og=
Subject key identifier:   84:29:8E:E0:25:0A:31:5B:0F:53:EF:E7:55:77:A4:39:D0:0D:7B:F8
Certificate issuer:       /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial:       010D0C9F4328584E8DEF9DADC6FEFB0E77476C80
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2602:810:6009::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9d:ad:c6:fe:fb:0e:77:47:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=39671665-cbdd-4098-84e5-61f73ce15543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:a6:68:5c:4c:d6:85:7b:22:b6:86:62:af:
                    27:06:2b:1c:8c:8b:32:cb:8f:f9:c7:d2:ce:fb:1e:
                    28:b5:a5:8e:19:c2:db:7f:18:f9:16:1b:18:3b:af:
                    40:de:5b:84:3f:71:dc:bf:cc:60:fc:51:bf:e4:8a:
                    0e:39:2d:41:8e:85:b5:9f:f0:5a:0e:8a:8f:91:d7:
                    6a:ab:39:7b:d2:ca:dd:0f:c7:5f:7f:1d:55:b0:b4:
                    94:36:73:28:f4:dd:df:e6:bf:eb:73:e9:c1:40:6c:
                    be:51:0c:ec:77:3b:0d:d4:0a:26:fc:60:c2:8c:5a:
                    9f:38:3f:d6:b6:b1:5e:f2:db:0d:28:bc:fe:e4:80:
                    55:34:ae:9e:27:95:78:92:88:f2:03:c4:8c:d6:fd:
                    18:99:c8:4d:68:05:a6:9a:82:0b:f7:3f:f9:c5:94:
                    27:d6:26:42:08:bd:e7:fc:d6:42:ba:b6:29:3e:18:
                    bc:64:ab:a7:8e:28:c9:5a:86:52:53:da:24:2d:2a:
                    8b:8e:58:4a:f8:86:f5:ef:8c:b8:ae:80:6e:5a:ba:
                    b2:30:b7:93:68:28:4b:b0:14:ee:64:fe:5a:32:70:
                    e2:92:a4:b3:58:cd:82:f4:f0:94:2a:4c:86:b1:d0:
                    af:41:7e:78:c9:ed:c1:0f:99:31:5e:c3:8f:c9:e1:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:8E:E0:25:0A:31:5B:0F:53:EF:E7:55:77:A4:39:D0:0D:7B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b80870c6-3cf5-36e7-bf12-152f6bcc1494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl

            X509v3 Authority Key Identifier:
                keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:6009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:f9:07:df:72:d2:87:4a:d7:ff:8a:40:84:3e:bc:80:8b:
         b7:52:ea:f5:67:de:75:2e:19:ec:25:d5:af:4c:16:25:6e:56:
         76:50:fa:c6:71:47:fc:69:d6:00:36:10:7c:be:8d:d1:08:51:
         c1:3b:14:85:33:cb:d8:05:cc:96:f7:f9:b1:48:5c:94:d4:43:
         f6:56:83:7c:28:9e:08:69:9a:d9:f2:99:63:d6:26:96:e9:28:
         8c:02:de:77:60:c8:55:89:f4:ac:cb:e2:b2:b4:ce:32:89:5d:
         d0:b9:5b:d6:88:51:4d:f6:0c:c2:d4:12:ee:ab:af:4e:be:42:
         ce:f8:08:65:69:c7:c2:9d:2b:8f:93:51:62:f5:b2:b3:7c:77:
         fc:3e:64:e7:d9:27:1b:9c:28:24:2a:07:36:85:27:d7:51:11:
         82:0a:06:1b:a0:16:95:9f:e1:d9:87:11:81:6c:d1:ee:6b:a3:
         65:f0:d1:af:04:58:e7:ba:1d:03:39:60:1f:ae:e6:98:37:05:
         f9:6d:20:c6:50:e9:a9:c6:f1:01:3c:ce:5e:51:ed:01:48:b8:
         74:f8:d1:85:77:11:56:77:e9:d0:f9:6e:c2:78:8b:56:51:7a:
         75:71:92:ac:fe:e8:b8:fc:84:d8:3f:9a:8c:22:6d:6b:6c:83:
         9d:71:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:15 2026 by rpki-client