Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa
File:                     1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa (raw, json)
Hash identifier:          RK96sOSM7dV47J3zmf+JPQnMaBqiVdXem8jRLZZBqxI=
Subject key identifier:   97:2F:F7:03:08:0E:E6:D4:36:6B:D7:FC:20:4D:7F:B2:81:A8:EA:1C
Certificate issuer:       /CN=cad5f01e-99f4-43e5-a86b-ce2f2de6b347
Certificate serial:       010D0C9F4328584E4F1F3C15EB47A659EAD34400
Authority key identifier: 1D:1C:F4:6A:E4:8E:19:70:B2:6C:0C:6B:A2:83:27:71:BC:22:E1:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     62564
IP address blocks:        2602:f953::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3c:15:eb:47:a6:59:ea:d3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad5f01e-99f4-43e5-a86b-ce2f2de6b347
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=755c1707-a890-40d5-9b14-5a194ca3e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:26:59:7c:6c:79:ef:c2:30:8e:c3:02:8c:
                    57:a0:2c:89:c6:ca:1f:67:88:0b:4b:65:50:21:e5:
                    62:81:87:99:a3:05:db:bf:b3:4b:5e:dd:90:da:15:
                    01:82:ca:b3:7d:aa:3c:de:77:45:56:df:98:76:2e:
                    ce:52:fa:95:da:d5:03:5e:db:61:d9:a7:db:ae:30:
                    15:a9:8b:70:8b:b9:e2:2a:98:67:ce:b6:c8:c1:bf:
                    0d:4d:d9:98:2b:88:a8:76:7e:bf:db:83:6f:53:ac:
                    f8:f4:7f:a5:24:0d:07:42:d7:f5:b4:f2:71:e6:50:
                    f4:83:eb:ee:76:28:04:f6:90:ad:c2:3f:9d:ea:8d:
                    f5:4f:cf:a5:b0:3e:7d:1e:c8:84:ad:4b:b7:65:32:
                    d0:9a:7c:74:0b:40:41:4f:ce:2d:f4:fd:20:e7:0b:
                    2f:ad:43:75:60:63:07:fb:6e:66:7b:37:2a:e1:40:
                    c1:fe:00:e7:04:ee:86:99:c0:2d:6f:34:6f:6b:17:
                    84:25:85:c1:d3:ef:93:9c:f4:50:ee:08:07:b7:50:
                    13:aa:9a:02:5a:de:6d:f2:71:26:0a:63:a2:3f:82:
                    54:65:31:61:75:51:e4:32:36:72:25:c8:2e:f0:30:
                    9f:dc:33:72:3d:77:c3:7c:20:80:5a:2d:5c:24:af:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:F7:03:08:0E:E6:D4:36:6B:D7:FC:20:4D:7F:B2:81:A8:EA:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/1bafd282-165e-34a7-80bb-36b9e4ee27d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1C:F4:6A:E4:8E:19:70:B2:6C:0C:6B:A2:83:27:71:BC:22:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cad5f01e-99f4-43e5-a86b-ce2f2de6b347.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f953::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:54:30:0f:bf:77:1a:fb:c9:8d:e2:7e:a2:90:9e:99:05:
         19:4b:88:ab:65:4a:a1:b4:15:c6:0c:14:ce:55:8e:32:d2:e5:
         90:fc:ba:05:62:34:c7:df:1b:7f:d3:ef:ad:c4:a7:d1:6e:04:
         40:3b:bf:2c:0d:71:2b:b0:35:03:0e:2c:3c:83:47:48:59:58:
         5c:88:0c:1a:33:c9:39:2c:3a:69:78:bb:f0:d4:89:ef:f9:67:
         d5:56:ce:ea:03:86:e8:36:4d:e4:af:63:0e:7e:e4:94:f1:15:
         ca:52:e1:5f:02:1e:46:d8:b5:c1:30:02:b7:a1:a5:f0:ec:0c:
         dd:ae:c6:c2:65:1e:d5:63:7e:b9:b6:bd:af:75:f6:e3:c3:14:
         e8:0d:55:ab:95:06:08:22:cc:5f:86:dc:c2:50:18:05:36:af:
         e2:8d:8d:74:70:97:08:4c:2f:38:1b:dd:13:92:81:69:bc:cc:
         95:5c:ff:fb:b5:90:09:2d:b0:43:b2:5c:3f:7d:34:16:e7:49:
         c1:d3:6c:78:bc:de:81:bf:61:27:98:76:d1:a5:d0:f5:60:a4:
         05:b5:04:93:9c:59:cb:a9:ac:b1:b0:a5:07:f1:47:8d:6f:fd:
         5d:a7:a0:dc:d9:c6:c2:b9:0d:24:68:d6:0a:0a:63:3b:ff:48:
         91:ab:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:27 2026 by rpki-client