Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/a45adc4b-52a6-3533-a3dd-c5dfac055560.roa
File:                     a45adc4b-52a6-3533-a3dd-c5dfac055560.roa (raw, json)
Hash identifier:          rwCY8TUFi9DHI6nk0KuuVf8WbLy3IIZG9ITFiK8LMi8=
Subject key identifier:   AF:D7:61:F6:F3:DA:68:28:DF:87:DD:02:C4:6E:AC:5A:0D:6E:33:E6
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584E7E94EA0D03D6E6C90175D980
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/a45adc4b-52a6-3533-a3dd-c5dfac055560.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     149506
IP address blocks:        2602:fbda:710::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ea:0d:03:d6:e6:c9:01:75:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=6e948ca9-863e-48e6-aff7-77dd5c46b7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2a:ba:67:a3:8b:96:86:1c:ec:9a:e6:6a:70:
                    63:01:db:71:94:64:30:7c:9c:3b:33:bb:3c:d1:95:
                    b5:84:e6:8d:76:97:10:cf:a1:26:a5:b4:ee:14:f5:
                    14:26:98:40:16:7b:e7:f1:9e:69:8d:89:54:7f:9a:
                    9e:01:2f:ca:4e:ef:5a:3a:9a:37:c4:dc:75:4e:07:
                    82:ce:9a:1d:ad:51:86:75:e4:4c:95:93:41:55:71:
                    07:ba:e5:b7:34:2e:ef:1c:e9:98:0c:bf:b4:2c:4a:
                    78:27:de:4b:33:cf:a1:7c:61:08:f5:26:01:5f:4c:
                    22:32:8c:e2:60:51:42:45:3b:00:90:aa:fb:30:2c:
                    65:5d:44:1d:f5:b7:25:54:c2:15:39:ea:9e:5a:97:
                    f1:76:68:9e:2b:5a:b1:a1:c2:0f:8d:09:b0:60:16:
                    98:17:35:06:c3:01:32:b7:59:65:c9:51:17:ec:d7:
                    7c:24:5b:1c:7c:cd:8e:86:af:d6:99:2a:a8:4c:04:
                    b1:a4:b6:d7:87:a2:1e:35:aa:30:91:8d:ec:51:d8:
                    73:bd:60:8e:89:76:6a:b7:fa:77:3e:9c:0a:ed:e9:
                    80:9b:f7:bb:bd:2c:a5:77:b2:c6:3b:19:3b:c5:f0:
                    e8:11:22:8b:33:bb:59:c2:89:26:bc:3b:f4:86:02:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D7:61:F6:F3:DA:68:28:DF:87:DD:02:C4:6E:AC:5A:0D:6E:33:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/a45adc4b-52a6-3533-a3dd-c5dfac055560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:58:13:75:d3:a5:67:4f:43:23:f1:a3:ca:8c:74:5a:96:83:
         ce:4a:78:fa:86:02:6f:d9:ee:bd:db:b2:d9:9c:0e:78:d3:2f:
         6c:67:0a:ed:8a:91:2c:b0:be:b0:ef:f9:bb:b9:8d:8d:f7:33:
         82:6e:fe:47:41:bd:5e:9d:81:4f:5f:8b:65:d5:fe:b7:8f:0f:
         20:a7:f1:ad:50:fc:27:8a:da:cd:a8:04:b2:31:43:2c:d8:37:
         c6:39:6f:c1:e1:31:36:5a:b0:c4:50:3d:47:99:6c:18:c7:0f:
         a2:a7:44:e4:20:f0:61:bb:26:39:4c:44:f4:0f:79:6a:75:64:
         5e:34:c8:03:cd:fb:9b:5c:e5:b3:d9:6d:80:95:2b:d7:8e:6d:
         f1:1c:e6:0b:34:28:61:37:4c:11:58:1d:26:3c:55:9e:d9:f4:
         47:4b:8b:d1:4a:7f:81:94:f2:3e:d8:43:e4:be:c6:b9:19:7d:
         06:5b:04:51:4e:24:de:83:91:8b:1d:4d:46:32:42:ff:54:85:
         f8:9a:01:9d:01:10:ba:6b:19:25:bf:04:89:93:51:cc:d7:be:
         16:24:27:ce:57:21:72:75:a2:0f:fc:84:3a:f7:09:9a:9d:cf:
         c2:8b:30:e9:cf:b8:8a:e8:18:26:25:17:7c:da:f2:bb:df:37:
         66:58:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:36 2026 by rpki-client