Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa
File:                     ba123b0a-7cc6-337d-9697-a1535b947efe.roa (raw, json)
Hash identifier:          y1489lMeBIezexvF0GiqMBsugMqpakbN9EeUmCkBosM=
Subject key identifier:   D5:01:55:63:D3:07:8C:0E:09:81:05:90:DF:73:A6:9B:90:F0:E5:DD
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584E86F4FA2751379739AAD43C00
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     14618
IP address blocks:        2602:f98b:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fa:27:51:37:97:39:aa:d4:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=d4967501-956a-4ccf-bfd8-5dd58df06a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:cb:dc:ea:eb:d3:8a:68:7e:a6:67:ce:ec:
                    ec:be:88:90:29:72:e4:e0:85:9b:85:43:be:d1:d8:
                    6b:d1:f1:29:6d:d7:db:73:9d:56:f5:d5:70:7b:be:
                    2e:ee:4f:33:83:1d:e4:93:9f:bf:f6:e6:4c:a0:a8:
                    92:78:f2:1f:2e:38:b7:b9:87:e2:ec:28:83:e2:84:
                    af:c4:e2:f0:e0:2b:29:75:87:58:4e:17:68:ca:1f:
                    ed:c0:a6:04:a8:3b:fa:63:67:59:18:83:95:52:8c:
                    0f:fb:97:05:27:54:cb:a9:21:78:cb:a1:0c:86:0b:
                    50:71:f7:e0:bf:6d:a5:47:1c:e5:b4:ca:15:b9:c3:
                    22:93:e1:c9:98:16:7b:8f:ee:da:e5:21:68:bb:ab:
                    4f:45:6d:91:70:b5:fd:c6:fd:ad:84:a2:fd:31:17:
                    c0:31:a7:ba:65:8e:ee:6f:0f:f2:68:2c:b5:b2:8e:
                    69:50:f9:47:11:50:b3:e9:40:03:1f:34:07:a5:a2:
                    e1:21:65:77:a2:a1:eb:44:fa:43:3d:e8:c5:f7:64:
                    37:09:50:b4:06:38:83:51:34:2d:d6:2b:87:4e:88:
                    ec:ee:03:e0:8c:f8:b9:97:96:1e:c0:a7:f1:b7:49:
                    ce:ab:59:fd:eb:f3:c9:1d:c7:b2:7a:c7:2d:36:3f:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:55:63:D3:07:8C:0E:09:81:05:90:DF:73:A6:9B:90:F0:E5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ba123b0a-7cc6-337d-9697-a1535b947efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:f5:42:23:bf:0e:bf:bd:11:bb:45:7b:ac:5b:b6:6d:a3:
         1b:45:d7:61:68:55:4c:d1:9d:dd:e6:92:16:71:34:7f:1b:8e:
         f1:ef:fe:9d:1b:d9:c1:87:b7:33:29:18:75:e2:af:ce:4b:79:
         37:0a:20:1d:5c:13:99:06:2e:3d:4d:ef:dd:5a:be:da:72:ee:
         39:b1:7b:47:8e:27:b8:61:44:57:c3:16:fe:ac:4a:a8:05:29:
         63:00:b4:c5:4f:89:2f:14:1d:60:c6:d2:7b:cb:23:ff:90:38:
         07:06:79:40:ad:dd:38:1d:fd:6c:0f:88:98:24:76:d5:c9:15:
         a3:b8:e9:36:4c:e0:0f:60:34:92:c6:0c:3d:e8:0b:7a:56:6a:
         c2:fc:03:8a:95:01:e1:49:96:7e:d6:bc:b0:47:87:27:35:d2:
         35:a5:49:c5:f6:68:61:d7:29:00:df:80:2b:1b:ad:75:13:f9:
         fc:dc:e5:ab:2a:0b:0a:ae:fc:34:23:7b:fb:39:f1:24:51:8b:
         e2:be:74:a4:09:1b:8c:f6:34:5b:34:e8:4b:e3:fe:59:a5:91:
         48:1f:11:ca:e2:fb:8f:36:da:a5:75:a1:43:d3:4f:30:92:f3:
         f1:eb:3c:a1:19:11:3d:7d:45:23:05:6f:a1:09:40:93:3e:e5:
         6a:3e:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:25 2026 by rpki-client