Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/954c02b1-b38b-3536-8f33-1f49a24ae813.roa
File:                     954c02b1-b38b-3536-8f33-1f49a24ae813.roa (raw, json)
Hash identifier:          iCFNPdqcmh3gW2XhZjihxC71Qw6Xf4ygwqkI7E5AOvw=
Subject key identifier:   89:F7:BD:50:ED:9A:60:2A:96:97:CC:BD:CE:2C:63:30:55:27:A4:69
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F4328584E7A64D4F1D1F8A759971A7000
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/954c02b1-b38b-3536-8f33-1f49a24ae813.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     400550
IP address blocks:        2602:fb9e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d4:f1:d1:f8:a7:59:97:1a:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=8ced4112-e638-4204-aeca-38825df6bc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:2d:75:ae:21:bb:2d:6f:d2:97:eb:0a:20:
                    2b:38:da:87:2f:40:32:8e:51:04:1c:1d:8d:d8:6e:
                    3a:bb:6a:be:11:38:2d:9c:f9:9e:8d:eb:65:9d:3f:
                    4a:7f:fc:7b:0e:69:48:c4:57:31:2d:12:d4:8b:ea:
                    ba:66:5a:0c:5a:08:24:8c:98:38:56:92:bb:9d:22:
                    89:d7:3c:bc:9b:2a:69:02:e9:06:a0:12:f8:44:bf:
                    df:42:f0:4b:f3:78:1b:f8:8e:91:31:ba:f1:12:d4:
                    4b:1e:90:59:98:f7:e4:9a:1e:f1:d8:43:aa:60:c3:
                    33:6e:5a:45:f4:e1:55:71:de:6a:ee:f9:d1:4a:64:
                    d9:23:6b:7b:f4:e9:8e:de:d9:d3:09:be:15:ae:dd:
                    c4:68:0f:6b:eb:0e:37:a7:c8:55:a0:79:7d:86:00:
                    d5:ba:0d:af:33:bb:a5:29:74:84:f9:dc:c8:eb:4a:
                    5f:a6:f4:e5:c8:0f:ca:cd:09:27:29:ba:fc:d1:86:
                    aa:2a:80:c7:e8:d4:35:17:ef:c8:5d:18:3a:f0:f8:
                    b1:8f:c8:97:3a:71:32:90:93:99:86:92:78:a3:ec:
                    dc:2d:2a:3c:fe:58:92:1a:55:fe:67:1f:76:3c:3c:
                    52:33:58:fd:5f:80:70:5b:98:c1:9e:82:e2:05:0a:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:BD:50:ED:9A:60:2A:96:97:CC:BD:CE:2C:63:30:55:27:A4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/954c02b1-b38b-3536-8f33-1f49a24ae813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb9e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:7d:a0:11:85:b3:c4:7e:be:52:43:75:d7:7a:8d:74:17:
         2a:08:22:45:de:4a:4f:e8:59:da:4f:75:b8:f0:36:4c:a5:c8:
         ef:11:73:df:24:ec:3c:83:2b:ca:d7:b5:78:d1:c8:65:02:9e:
         95:bc:33:ac:a9:12:a6:a9:4d:d2:32:79:59:62:dd:73:1d:76:
         93:eb:21:b2:2e:44:89:56:cb:8d:01:7a:f7:24:b3:6b:f3:2d:
         12:19:51:d7:15:16:4d:89:19:2b:3b:12:f4:c0:b7:5d:55:2a:
         51:cd:4a:8d:22:02:6b:77:6e:45:c3:f2:1e:68:26:97:77:c3:
         19:bd:a9:d0:5f:71:67:6a:1c:cc:87:15:35:5b:4f:28:6c:bd:
         d1:86:80:c3:c6:35:03:f0:2b:cf:d8:e5:52:3b:4c:b0:6d:3d:
         62:f8:e4:0f:62:60:bf:c0:f0:c5:42:33:89:c5:38:b4:6d:da:
         cb:d6:c1:b9:b9:ad:a1:ae:2f:32:99:06:cc:a6:09:c5:97:11:
         1c:93:79:86:00:d2:b9:69:c4:a6:c3:39:f0:46:90:4b:b9:81:
         1b:0f:e8:36:36:6f:1c:53:28:2f:db:cd:74:71:d8:64:99:cc:
         51:73:df:dc:6e:f0:d0:cf:ae:31:57:60:ff:e9:1c:01:99:ca:
         2c:9d:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:04:02 2026 by rpki-client