Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa
File:                     66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa (raw, json)
Hash identifier:          ADQHiFGqu5tTNZ2ujUGcsHSzMb+pLEVXZXOVZTB+Zcs=
Subject key identifier:   11:4C:49:0A:76:A5:EF:88:99:DF:4C:8D:FE:6A:28:9F:77:25:85:84
Certificate issuer:       /CN=50652d78-ba7a-4c61-b45c-77fb9faa18a3
Certificate serial:       010D0C9F4328584E9384F0ED03658F96B83D44F4
Authority key identifier: 52:82:90:8A:E2:FF:B1:98:CE:78:5E:31:24:82:57:97:70:E9:90:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     402474
IP address blocks:        2602:f3df::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f0:ed:03:65:8f:96:b8:3d:44:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50652d78-ba7a-4c61-b45c-77fb9faa18a3
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=68504f8f-b372-4b0d-a72b-8b83a131448b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:d1:ba:c3:15:6c:f5:c3:40:8b:e1:46:f3:
                    e3:50:d0:04:4d:4c:cd:72:8c:fe:11:68:e0:bd:0b:
                    90:4a:13:0f:ff:b1:81:90:a2:08:44:fd:dc:a5:39:
                    52:34:d5:26:16:7e:b7:d4:fa:28:f2:1d:9a:8b:37:
                    33:7d:9c:64:ea:fa:00:86:4c:e8:03:f1:35:e0:a0:
                    66:b0:68:9a:2c:97:f2:3c:d0:13:73:7b:00:93:c0:
                    6c:5c:ba:64:08:1f:59:2d:07:ed:5e:38:ee:c2:d6:
                    36:3b:d9:3d:90:d2:04:c3:dc:1e:79:7b:76:84:f0:
                    ed:8d:26:2f:18:0d:4f:f0:c9:64:7c:b1:bd:16:a6:
                    09:ce:b9:11:ca:2a:9b:e0:9a:93:fd:27:b5:15:54:
                    e4:ec:6c:4c:12:e7:17:97:13:4c:19:db:2e:12:b7:
                    6f:62:46:02:e0:20:4e:a7:55:14:ee:46:ae:da:43:
                    89:e2:b0:ed:b7:49:76:2c:f9:22:1e:cf:a3:49:fe:
                    39:c0:7c:ff:69:95:fd:17:b2:b9:23:f0:e5:1f:c4:
                    96:a8:9e:72:f0:41:2b:df:9c:e1:d6:02:aa:e8:53:
                    83:40:d5:d0:e3:15:e2:9a:e1:a6:88:75:23:b1:e6:
                    c9:aa:5b:8d:e4:ef:56:ff:ba:39:95:79:36:2a:05:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:49:0A:76:A5:EF:88:99:DF:4C:8D:FE:6A:28:9F:77:25:85:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.crl

            X509v3 Authority Key Identifier:
                keyid:52:82:90:8A:E2:FF:B1:98:CE:78:5E:31:24:82:57:97:70:E9:90:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:fb:a5:4c:08:b6:7f:87:97:37:47:00:0b:4d:82:a3:ae:
         ef:8c:35:91:39:d7:45:29:bc:ed:47:89:5f:2d:52:39:77:b8:
         2f:ed:80:7f:52:ca:9c:05:e9:58:84:7a:ca:80:c0:8b:03:e8:
         7c:6a:e0:89:ee:b1:c9:2b:af:1e:a5:7c:6f:c8:7e:19:56:e5:
         70:0c:e5:18:18:94:21:b3:1e:fa:fd:48:64:71:81:99:04:2f:
         22:9f:43:fd:f3:a1:2e:7a:b2:f2:78:c7:c7:4e:7d:61:f2:7d:
         43:8d:c4:3c:a1:77:89:4b:17:80:71:99:cc:69:73:ce:3e:05:
         a2:6e:67:94:be:6f:88:1a:d0:58:66:15:1c:0d:23:da:df:4b:
         24:c5:76:72:cc:b1:5f:0b:fd:25:be:61:41:42:8f:c3:ca:f9:
         6a:ff:6a:5b:95:c8:c7:f6:e0:d8:d5:89:69:55:37:23:d7:77:
         92:f9:db:2a:91:bb:14:47:0c:69:dd:34:d6:82:ba:d0:37:bb:
         a2:4e:00:aa:af:0a:1f:7b:72:e6:85:e5:bf:96:90:cd:5d:06:
         02:35:83:bf:33:9d:42:d0:3c:fd:06:a7:d9:43:d6:9d:a1:a4:
         06:b6:4d:3c:05:f5:a4:3a:4a:7e:dc:7b:9e:e9:53:11:32:51:
         3e:ff:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:03 2026 by rpki-client