Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/604b8de0-89f7-3787-9269-06e767adbec2.roa
File:                     604b8de0-89f7-3787-9269-06e767adbec2.roa (raw, json)
Hash identifier:          wbQ4YlhtuZmqz8A1gFyTEKCzen02U/12o2PYqDOEL9w=
Subject key identifier:   AA:15:B1:C9:BF:59:4A:54:D9:D4:84:CE:35:CC:95:2F:A6:F4:76:54
Certificate issuer:       /CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
Certificate serial:       010D0C9F4328584F49742BF205324EC8EAA7CFC0
Authority key identifier: E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/604b8de0-89f7-3787-9269-06e767adbec2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397170
IP address blocks:        2602:f6bc:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2b:f2:05:32:4e:c8:ea:a7:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=72a575ee-8253-407d-9cef-782f48936e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:e6:d5:a1:0a:07:e4:31:18:67:83:3a:6b:
                    61:63:75:52:d1:b8:53:43:01:87:45:fe:9a:ef:8f:
                    d4:bf:b5:7f:ab:f3:b1:bb:de:ca:df:57:e3:e6:e7:
                    66:7e:b7:25:83:20:d8:98:4d:06:e4:01:75:0d:ef:
                    d0:d2:dd:46:14:41:4c:33:97:fc:c3:66:be:19:e3:
                    50:b8:65:29:4b:1a:e6:97:ad:54:de:c9:5f:e8:2f:
                    aa:4e:73:0a:cb:23:c1:b8:95:ba:d4:b6:02:97:f1:
                    68:11:fa:93:e3:58:96:31:23:bf:4e:68:83:0d:f3:
                    b9:33:dc:33:fd:d2:0c:a2:f8:17:8f:99:fe:8f:85:
                    6d:e1:e2:2e:81:21:49:c2:5b:9b:5b:6e:aa:c3:d1:
                    7b:fd:7f:b9:59:d9:03:4f:24:0c:7c:03:e3:c8:cc:
                    e4:b9:11:4c:97:78:67:be:14:8c:4e:b8:1e:52:6e:
                    4d:74:74:b7:63:33:ad:75:c3:7c:d0:20:3c:27:29:
                    5a:14:73:64:19:e3:0e:d2:49:8f:6a:97:c9:23:d3:
                    be:77:80:5c:a9:55:56:44:71:9d:42:f8:82:14:2f:
                    c5:e5:91:6b:17:ee:ed:a3:d1:49:be:44:9b:b4:6f:
                    72:9e:83:f3:35:21:9d:1a:47:f1:3f:e2:a1:ec:47:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:15:B1:C9:BF:59:4A:54:D9:D4:84:CE:35:CC:95:2F:A6:F4:76:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/604b8de0-89f7-3787-9269-06e767adbec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl

            X509v3 Authority Key Identifier:
                keyid:E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6bc:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5e:47:3f:45:0c:06:89:45:6a:76:0c:8d:4d:02:6d:3d:96:
         c1:94:84:dc:4c:e8:34:bb:e8:43:98:27:28:4e:ae:f6:3c:ff:
         7d:d2:15:e4:54:20:8e:41:b1:fd:f9:87:08:96:d7:51:f7:67:
         2a:49:38:7f:a6:a8:45:08:55:b1:33:ef:ef:9b:a4:77:e6:ae:
         c1:3a:e1:c3:4c:94:c7:a1:f3:e9:c8:53:49:af:51:4b:4c:37:
         19:28:f4:99:51:7e:e8:b3:6c:66:7d:b1:f4:23:73:fc:7c:9a:
         d9:92:eb:96:0c:37:0d:5e:e8:0c:de:90:e0:4b:20:6f:b5:79:
         e1:57:58:dd:b0:5b:24:7f:ec:c0:8e:09:72:38:d9:ce:54:dc:
         d0:a0:c1:d1:1a:d1:6a:70:74:05:c1:46:b2:2a:a4:40:1c:90:
         5b:53:ce:a9:ad:b8:fa:c0:b2:11:fc:f7:df:68:a4:9c:c9:d3:
         e9:76:34:4e:06:6f:b3:68:17:d0:80:df:a0:21:40:ce:4f:06:
         00:85:87:db:80:be:87:6b:f3:4d:d3:55:56:49:53:28:b8:39:
         ec:27:13:19:88:8b:54:84:11:b0:63:16:27:89:bb:50:66:c9:
         8a:fb:d0:f0:2c:f7:a3:68:99:3d:b9:1b:7f:6f:e6:7c:ce:85:
         f0:4e:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:26:37 2026 by rpki-client