Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3fa3109f-9542-3991-a9da-fea12f42beb3.roa
File:                     3fa3109f-9542-3991-a9da-fea12f42beb3.roa (raw, json)
Hash identifier:          MAOPYeboxoSSJs7zuze0ixsNcV/3RiW0M9Yi+YzfTNY=
Subject key identifier:   91:C8:C0:8B:E3:60:D8:E1:AA:B3:A5:CF:99:57:99:1D:49:4C:DC:57
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F4328584E5FDF602741D7368808BB0CE0
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3fa3109f-9542-3991-a9da-fea12f42beb3.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     26904
IP address blocks:        2602:fc15:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:60:27:41:d7:36:88:08:bb:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=93e2ef52-4d77-4b11-89d7-ded244cbb52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:15:0c:d1:cd:55:9c:4e:53:c8:7c:52:ff:
                    2d:c3:73:ca:82:c9:0f:e6:7a:13:fc:a4:39:da:e7:
                    de:6e:cf:5a:49:41:58:23:f7:e7:10:f0:91:2e:e9:
                    30:07:58:55:78:cb:e7:f8:88:17:9d:83:23:ef:b3:
                    83:c0:ce:ee:9f:1a:94:95:b9:44:35:9c:e3:ce:d4:
                    fc:1e:cb:21:92:a6:29:2a:fa:d7:68:da:17:31:d2:
                    dc:09:d5:b4:e2:a0:a9:a2:60:a7:02:0d:f8:49:d6:
                    77:21:80:32:03:45:c4:28:58:44:ce:75:aa:05:82:
                    6a:79:5f:6a:55:19:d7:5e:01:99:a0:98:a9:e5:5b:
                    3a:fe:53:56:22:ed:21:fd:3e:65:83:a8:8b:1f:2e:
                    fc:5f:d3:4d:08:f7:fa:47:bc:a4:5c:41:2f:57:d3:
                    e2:dd:a2:70:a6:6e:3a:84:88:37:5f:09:46:08:68:
                    d7:2b:49:50:8c:fb:14:fd:28:6b:ec:51:2b:c3:64:
                    38:64:e5:6f:6a:b1:b2:54:96:43:e8:40:32:82:28:
                    a1:fb:22:09:e5:64:30:a3:35:02:cc:85:97:c7:dc:
                    0c:78:da:92:f9:6a:be:f0:fd:c3:eb:41:54:6e:59:
                    67:6b:c5:0b:7c:5e:9b:a3:c5:62:ca:d3:59:50:1d:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:C0:8B:E3:60:D8:E1:AA:B3:A5:CF:99:57:99:1D:49:4C:DC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3fa3109f-9542-3991-a9da-fea12f42beb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:f6:4b:ab:7f:82:a4:6a:4f:5a:56:36:60:03:c4:21:57:
         54:6e:7b:f8:c1:77:7c:2e:af:41:de:ab:15:6d:1b:df:69:22:
         bf:ce:a7:71:1c:e3:82:67:66:c3:df:91:49:6b:e4:be:7a:65:
         be:4a:91:f1:db:b2:95:ea:10:da:0a:68:f1:54:49:44:f0:1b:
         28:58:2e:22:fd:57:30:f8:91:0d:b6:21:e4:29:28:ac:2d:c8:
         bf:0d:fd:4e:48:9c:27:cd:8e:9e:e0:0b:b2:20:ab:8c:50:4e:
         05:ac:83:c6:af:40:7b:02:16:78:2c:56:a4:f5:b1:ce:d5:f1:
         f8:ff:12:86:6f:64:ef:84:b5:2e:99:fa:d8:86:38:f5:99:92:
         93:19:cd:0c:96:e7:04:08:4d:ea:67:36:88:1a:00:b1:4a:12:
         ee:c1:a1:65:79:8b:12:85:b6:12:40:08:61:fe:13:92:7d:c8:
         bd:b2:b6:52:cd:ca:de:3f:1e:d2:e8:56:68:c2:f5:73:ad:24:
         67:ac:88:a8:55:a1:96:d7:34:56:ce:8c:bb:02:f6:80:fe:c5:
         b8:5d:a8:c9:ec:ef:c9:9b:3a:fb:14:53:72:00:30:35:2d:27:
         fe:3e:5b:e8:0d:7a:5a:1e:89:bb:fb:23:3c:e9:57:e2:26:96:
         8e:95:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:29 2026 by rpki-client