Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
File:                     c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (raw, json)
Hash identifier:          Z/m1m9fDFid8CHH7WEdHNgfJfYDKaAgd8uZhbvkp7vY=
Subject key identifier:   D6:97:19:27:37:68:CD:98:7A:61:28:8B:36:0A:74:A8:B9:7E:51:A2
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584E885A47F5469D77F699618B88
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     33039
IP address blocks:        2602:f95c:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:47:f5:46:9d:77:f6:99:61:8b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=cad694a3-692e-4264-969e-86f38c111fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:73:56:71:f0:fc:39:a5:06:e5:ba:87:7e:
                    ab:76:c3:65:08:4e:60:51:f5:b1:b2:16:4a:78:21:
                    8c:43:c0:a2:11:b0:5a:b7:2f:83:1e:d1:e7:a7:8d:
                    ad:f5:ec:27:35:f1:06:31:22:be:eb:0c:7b:9b:4a:
                    4f:e7:21:86:1c:73:74:24:94:de:bc:24:56:9e:ca:
                    a6:ee:76:5f:fd:11:0f:63:8f:ea:5c:fd:27:57:b4:
                    b1:a4:0c:88:34:c7:15:32:9e:26:a4:17:c6:63:ac:
                    f8:54:b8:b8:2b:76:d5:fc:1e:c4:4c:33:f8:ac:35:
                    ca:fc:70:d1:d8:0c:4e:9c:d8:4c:eb:59:76:41:87:
                    bb:c9:7b:e8:ca:ab:80:c8:f7:9d:a2:89:2d:12:bc:
                    ff:37:8a:a9:55:e9:d2:ee:6d:76:ba:e1:b8:5f:a6:
                    d8:5d:3d:ed:2e:39:d3:c3:dc:80:df:b4:62:8c:ac:
                    c8:6c:7e:b1:e0:54:05:21:e4:97:71:fd:2a:78:ab:
                    51:aa:fa:46:e1:48:5a:e5:9e:c3:02:03:86:3c:04:
                    fd:90:50:02:6b:90:cc:74:d5:8f:82:6a:7a:95:ca:
                    d8:48:7d:47:77:27:64:92:e9:c6:fb:1c:75:cc:5c:
                    10:a4:fc:67:d4:6d:10:d4:66:85:b1:46:e7:d9:c6:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:19:27:37:68:CD:98:7A:61:28:8B:36:0A:74:A8:B9:7E:51:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/c47e0337-491b-3e57-a6f9-0040b1fabe11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:99:69:17:75:de:37:76:54:8f:b7:16:ba:0b:f6:8e:0e:02:
         2d:80:be:0a:73:89:12:b6:73:f3:38:87:32:5f:57:ec:7e:32:
         1b:81:02:49:6e:5b:f2:a5:85:74:61:e1:5c:6b:bf:10:26:62:
         e2:58:a0:44:74:97:7a:9b:41:71:de:04:75:2c:9c:eb:c6:9b:
         31:bb:d5:cf:50:ee:62:6d:12:1e:2d:6e:e5:71:8f:59:f2:84:
         a9:b1:4b:a4:2b:87:a9:41:1e:b7:82:d7:98:e6:3d:88:bd:25:
         3f:a6:80:55:f6:67:f1:35:98:aa:54:a5:ec:3a:45:e1:70:b0:
         e4:f7:f1:0b:c2:30:02:b4:b0:b6:93:7d:c5:f3:80:a8:4a:0c:
         26:d9:f6:36:d9:e7:fd:6d:c1:d7:c1:63:69:14:38:dc:2c:11:
         2d:fa:d4:2f:d7:04:f6:35:ad:e0:1d:de:5c:f5:d9:3e:27:de:
         47:2d:a6:43:ee:8f:4f:9d:ea:4a:4b:c6:b7:d9:0d:c7:6b:54:
         14:ad:8e:ef:a5:59:c9:04:4e:a3:b6:12:ea:11:38:31:ac:13:
         15:1e:f2:b0:74:df:32:6b:12:9d:4d:81:a0:37:5d:7a:df:f1:
         71:e7:ae:8f:90:27:1b:44:45:c8:9a:a1:7d:66:a4:33:5e:0a:
         05:74:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:26 2026 by rpki-client