Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa
File:                     476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa (raw, json)
Hash identifier:          jFOMPXPvBf99Bpx6W7nm8N2g2sRc4Pml58iUuz/WhKE=
Subject key identifier:   D8:29:36:FB:03:A0:99:9E:40:6F:A7:3F:37:F2:8E:12:17:C9:33:26
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584E7634E01BB69519FBC749B200
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399976
IP address blocks:        2602:80c:2057::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:e0:1b:b6:95:19:fb:c7:49:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=35261e75-81bd-4e31-9eb2-dbc03721da5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:b7:92:05:c1:2d:43:c8:3f:6f:21:81:2f:
                    68:df:c4:d3:69:59:b5:bf:34:79:28:b0:ad:bc:73:
                    6a:22:24:34:3e:18:16:26:df:e8:87:5b:4f:a8:fc:
                    75:d3:e1:91:9d:11:1d:23:c6:4a:db:11:28:35:05:
                    b3:71:f1:19:02:dc:80:f2:5c:06:b9:8d:1e:62:b1:
                    fe:d7:e4:cd:4d:d6:03:a9:91:93:51:83:95:2f:c9:
                    02:77:14:9d:8e:5a:a4:e9:06:a0:50:5e:5f:28:da:
                    97:70:e6:e4:7f:ea:3f:65:08:76:00:ce:25:c7:f8:
                    3e:3a:ae:39:0f:42:a4:98:b1:3e:86:a3:e9:1c:23:
                    3c:0b:50:cf:77:30:80:59:e9:d5:b6:76:7f:f0:9d:
                    6d:3a:e7:28:94:21:d8:e0:63:db:a4:40:7e:53:54:
                    3d:61:75:2d:b7:e5:00:0e:53:c7:d6:6f:bd:68:a8:
                    da:16:d0:0c:8b:a9:f4:19:9d:fd:c3:7b:03:db:96:
                    3f:2f:7b:4c:76:00:ed:88:94:1b:71:21:a7:71:5e:
                    bc:ca:ac:24:72:b9:31:a0:f1:83:91:04:9b:08:cd:
                    b1:ae:b6:38:db:8f:f7:2d:28:b0:13:74:6a:b2:8f:
                    99:8d:14:55:e5:57:8f:59:df:5d:bf:68:56:b3:0f:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:29:36:FB:03:A0:99:9E:40:6F:A7:3F:37:F2:8E:12:17:C9:33:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2057::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:22:c9:9c:c6:0e:a2:24:5f:d4:7c:00:c0:9e:53:ab:01:39:
         db:8b:c3:1d:d4:e3:30:27:19:47:80:10:10:f9:03:f9:6e:dc:
         a1:1a:93:ae:f2:10:8b:1c:05:2b:10:b3:4b:97:d5:c7:ca:18:
         5b:92:30:b1:33:c3:10:ad:fb:0f:45:29:d1:84:5b:64:e2:22:
         df:43:58:09:be:10:7a:aa:46:93:70:90:8a:fe:f1:0a:ea:a9:
         55:d7:e1:5a:97:d8:b6:6f:de:8c:9d:0c:33:13:94:20:29:0a:
         4a:1a:30:c7:a6:65:4e:cb:8c:a6:57:69:e1:60:0d:88:92:f6:
         d7:48:28:3a:93:0c:9f:56:bb:8d:d6:ab:f2:da:04:6d:b7:e8:
         1e:93:0b:fe:0e:3f:63:65:5f:2e:06:1b:ef:ed:4a:7a:88:6e:
         a5:98:78:fc:1c:2e:8d:72:3b:aa:b7:7a:2d:33:f4:0d:94:bc:
         f9:df:0b:bc:2b:e1:54:31:25:57:27:3f:b9:25:b5:67:da:28:
         b1:36:37:fe:89:ce:7d:31:b6:4f:f1:30:5c:fd:64:c5:be:d0:
         c6:ce:92:af:ea:e3:bd:5d:55:bd:d6:b2:f1:c3:12:86:a3:74:
         2c:d8:c3:f7:21:d4:d2:16:55:fc:39:f8:0c:fb:69:0d:2f:e1:
         79:40:0b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:51 2026 by rpki-client