Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa
File:                     5654a4a4-a12d-3b62-a5dd-539d4594a091.roa (raw, json)
Hash identifier:          Bebu+BaQJgIC4vpLztT8sxRkxQK37z/Sgy8YQUOFTnM=
Subject key identifier:   7E:74:16:47:16:2F:E1:6C:BA:80:85:F5:79:EE:D4:80:9A:2F:1F:83
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584E86F4F19563E83F10F03397F0
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14478
IP address blocks:        2602:fb65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f1:95:63:e8:3f:10:f0:33:97:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c709bdc6-2607-4c17-963d-f90542a836b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:41:c0:e3:3a:39:39:0e:00:0b:f1:0d:88:
                    e6:90:46:33:27:53:96:09:54:3b:0b:54:de:55:a7:
                    2b:43:5c:5b:45:de:c4:a3:1b:65:8b:15:1d:8d:8d:
                    33:fb:60:c7:1f:6b:ee:d2:70:2a:b7:4f:ff:5f:49:
                    81:04:11:33:ac:fa:ee:0e:9d:00:f8:60:fb:2e:e6:
                    43:13:29:ef:4c:07:f6:65:4c:f5:ad:a8:f8:f3:86:
                    2c:82:e4:21:01:a9:b7:c9:8a:ff:56:ef:cf:97:5d:
                    65:c9:23:51:a5:ef:40:69:d2:74:a4:ba:9a:70:2b:
                    95:db:ac:4b:02:b1:51:3e:5a:96:4c:ee:f5:64:08:
                    6a:99:09:ab:4f:a4:7c:c9:bf:65:81:e1:6b:dd:7c:
                    2a:03:7b:19:74:67:99:c8:5b:36:98:3b:75:e0:58:
                    b8:8a:ff:8e:df:e5:1d:4e:20:f8:30:d5:86:db:ec:
                    c1:e2:26:c8:ed:56:46:21:b1:47:7f:c2:08:b3:24:
                    25:5e:73:3d:dc:81:44:5d:b8:d6:16:af:68:9a:1e:
                    ee:ff:56:ca:98:47:d0:9f:99:86:fd:42:f3:07:e8:
                    c6:8b:09:0b:82:77:30:8a:c1:e3:11:01:1b:b4:83:
                    d5:c8:80:7c:c7:3d:03:a0:98:f0:1a:e6:2a:d7:c8:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:74:16:47:16:2F:E1:6C:BA:80:85:F5:79:EE:D4:80:9A:2F:1F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:78:bf:61:0c:e7:18:4f:0f:e3:3c:e4:b5:07:ea:f1:8d:
         d4:c7:d2:c9:17:25:d9:d3:22:b6:47:2f:ac:e0:97:f9:10:7b:
         4a:30:a6:49:f3:9b:2e:69:77:1e:00:e8:1d:0b:e7:5c:8f:83:
         a2:26:06:98:c1:dc:98:eb:43:c2:79:e7:89:08:4d:9e:f7:6e:
         c7:94:39:6e:59:2b:22:3c:aa:86:4e:32:97:a3:e6:94:5e:02:
         c1:18:c0:bc:5b:59:17:7e:41:7a:e0:33:f1:2e:42:8c:5b:b5:
         60:a8:1e:a5:86:95:49:e3:b5:da:bb:43:eb:bd:12:05:1c:3e:
         f0:3f:e0:7d:5c:9a:76:ea:95:4b:b0:74:ce:2e:92:6b:38:d7:
         82:85:38:9b:53:69:95:91:9e:04:3d:1c:10:3b:2c:4a:91:0c:
         f5:9e:42:be:30:bf:c0:0e:bb:42:24:d0:01:04:0e:ee:a8:6d:
         64:be:c3:12:82:79:ef:9d:6a:bd:2f:59:43:4a:11:e4:ce:fa:
         6b:8f:af:e8:ff:c8:53:c4:d4:68:68:5d:0a:1c:e8:53:e7:1a:
         b1:27:64:4e:e6:2c:92:a3:42:22:f7:4f:7c:eb:00:b9:07:9f:
         c9:5b:7b:aa:88:0b:ff:31:b4:d7:21:1c:c0:5c:88:11:91:fc:
         4e:ea:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:13 2026 by rpki-client