Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/51346d8b-ffd3-337c-b33c-218aa418a1ba.roa
File:                     51346d8b-ffd3-337c-b33c-218aa418a1ba.roa (raw, json)
Hash identifier:          XG149ukjPIdQsRl35WWaVJRHESHK7AaMReIvAudQu64=
Subject key identifier:   7E:B3:BF:9A:1C:18:C3:6C:90:DA:89:F3:85:5D:68:B2:0B:58:EA:DB
Certificate issuer:       /CN=55459e1c-c761-4deb-9fd3-660282edd2d7
Certificate serial:       010D0C9F4328584E815FC1CBA2C8440E8F171080
Authority key identifier: C3:4F:9A:8B:59:B3:0A:DD:B7:96:1A:37:18:7B:73:FF:1D:6F:2B:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/51346d8b-ffd3-337c-b33c-218aa418a1ba.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     402440
IP address blocks:        2602:f3e3:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c1:cb:a2:c8:44:0e:8f:17:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55459e1c-c761-4deb-9fd3-660282edd2d7
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=29fb9154-c797-439d-a345-9c5ed4c17e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:0c:0a:5f:3f:fc:d5:3b:fe:bd:6e:76:27:
                    ac:60:d4:40:3d:d5:7a:01:27:10:8f:a2:f4:fb:75:
                    58:08:e9:3e:bb:dc:97:b3:6f:fa:0c:46:63:c9:15:
                    a7:ba:17:8b:6a:f8:0a:50:55:5d:dc:ea:7a:0a:b8:
                    0c:e8:23:b7:2c:b5:6d:34:8e:cd:46:22:ad:0d:75:
                    c4:8f:3e:f6:6e:82:f5:74:2a:37:69:ad:bb:2e:fe:
                    05:55:01:f8:82:96:4c:06:bd:b1:60:32:3c:b5:d6:
                    e0:36:2a:40:78:a0:5a:36:f3:c4:49:cd:96:e5:4d:
                    79:31:f7:37:93:1a:d4:8d:7e:c4:a4:c6:46:43:e4:
                    d1:d1:e6:d7:f6:8b:8a:c3:d0:10:5b:4f:1e:43:93:
                    13:f5:8f:da:c5:97:65:88:6c:19:30:e5:9a:a2:f6:
                    10:bf:fd:d7:6b:42:1c:38:2a:7f:60:68:67:29:4e:
                    bd:f5:46:06:5d:e1:74:2f:1e:04:32:fb:53:a6:a5:
                    b0:1a:ca:e4:03:91:af:6b:27:ec:55:7f:f5:19:4c:
                    d1:be:5a:23:71:29:83:7d:8c:da:7b:db:62:0c:42:
                    1d:d9:0c:c7:1b:c0:0a:4a:8e:58:37:8f:95:b3:26:
                    70:bf:92:95:86:71:7f:ba:c6:5c:59:78:f5:32:a4:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:BF:9A:1C:18:C3:6C:90:DA:89:F3:85:5D:68:B2:0B:58:EA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/51346d8b-ffd3-337c-b33c-218aa418a1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.crl

            X509v3 Authority Key Identifier:
                keyid:C3:4F:9A:8B:59:B3:0A:DD:B7:96:1A:37:18:7B:73:FF:1D:6F:2B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3e3:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:06:9c:17:c2:bd:0b:8d:24:aa:3d:8a:b6:9e:a3:25:e3:
         b1:71:fd:ba:be:61:56:9f:28:b4:3d:13:8b:b9:8e:9b:0f:3e:
         bb:d9:c1:10:d7:e0:64:74:9e:8d:ec:5a:ca:23:30:d1:e9:69:
         0f:da:cc:6e:56:15:51:75:29:b2:76:95:60:28:ad:d2:58:b3:
         cd:bd:7e:eb:a8:c2:54:88:c9:a7:e7:17:8d:93:20:53:3e:a0:
         24:05:a1:73:1d:f1:2e:5f:1d:3b:70:e7:7e:c6:a0:b9:8e:5b:
         3c:b2:ba:de:78:dc:a5:7c:f0:c6:23:7c:e3:81:97:81:35:93:
         b5:12:62:a8:f4:50:0f:ae:7f:2b:1e:c6:44:c3:3d:8a:62:a5:
         f5:0a:80:7e:51:c4:70:bf:a4:27:4c:2c:83:0b:ae:89:a9:85:
         fd:e8:ae:c1:6a:56:49:58:1e:65:be:29:d5:ef:60:fa:fb:b1:
         ee:44:1f:1d:48:e7:89:01:29:92:38:a0:24:fa:3c:91:a3:0a:
         56:c9:30:07:77:59:4b:d4:a9:05:99:0c:57:24:c5:fc:bd:a5:
         68:e4:aa:5b:0e:33:90:17:12:1e:27:7f:e5:65:21:19:f7:53:
         c5:86:3e:aa:08:2d:61:87:b9:ea:92:3f:e8:9d:19:6a:62:e1:
         89:1a:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:12:05 2026 by rpki-client