Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa
File:                     2c2f2002-b19b-3f29-a667-5eca934bdc03.roa (raw, json)
Hash identifier:          1NOFdXT/H83fzDIO/q5HB8nqdXcaQqgr4woVWeN0njE=
Subject key identifier:   3D:09:A3:9E:18:13:E0:C0:91:23:7C:5C:62:2A:49:23:89:40:8B:97
Certificate issuer:       /CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Certificate serial:       010D0C9F4328584E5084A1B34BBB98862273E940
Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     3573
IP address blocks:        2610:b0:41d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a1:b3:4b:bb:98:86:22:73:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=3405b7f7-6205-4641-90bc-e12deb4db54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:63:7e:10:f5:5e:65:0b:0a:a0:41:48:10:
                    fb:d3:bd:90:9f:08:82:38:47:3a:ff:5f:97:6a:15:
                    0a:29:8c:51:c0:00:21:0e:d5:91:41:8f:b7:e0:d2:
                    65:c9:4b:75:ee:22:cf:5c:ce:5c:e9:89:95:9f:5c:
                    91:4c:df:7d:bc:40:fa:70:43:e7:23:47:10:46:fc:
                    3a:4f:31:ff:d5:f8:25:9a:44:a4:4a:23:23:64:b1:
                    d3:c9:90:bd:a6:3c:98:bb:0d:db:36:d4:75:eb:bb:
                    cd:b2:27:5c:46:1a:77:28:45:e5:69:c5:90:a1:3e:
                    20:59:e9:54:19:e7:37:dc:ea:c2:b9:c3:51:a3:e1:
                    b3:2d:66:20:53:ce:db:ee:8e:7d:e0:47:c0:8c:d9:
                    54:c9:ae:99:b3:aa:c4:af:c7:0e:3c:eb:2e:3e:94:
                    ab:15:14:70:cc:2c:f8:17:84:b9:10:da:95:3a:d1:
                    13:c6:46:3f:7e:f1:05:67:bc:97:18:19:56:ac:b3:
                    a4:3c:f2:ab:f2:4b:79:05:6d:c7:eb:01:6f:e0:65:
                    6c:8c:04:2a:f2:90:3a:bb:5b:ae:39:69:ac:0b:90:
                    c6:82:05:cf:ce:f3:da:65:1e:f4:12:10:8a:2e:3d:
                    c1:a3:b3:ea:5d:c1:ef:de:ec:21:a8:5e:0c:cf:95:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:A3:9E:18:13:E0:C0:91:23:7C:5C:62:2A:49:23:89:40:8B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl

            X509v3 Authority Key Identifier:
                keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:b0:41d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:0c:1f:23:70:2e:42:a1:3a:f9:fa:bb:65:65:68:a7:72:
         3e:8c:62:18:d0:eb:af:ad:7f:08:86:bf:c3:f2:e9:eb:bb:98:
         57:47:e8:b6:ef:92:e0:bf:1d:5e:e0:7c:c6:6e:5f:5c:6b:32:
         4c:81:75:6e:6b:ac:b4:90:a9:9b:e5:aa:c5:6f:62:03:1b:10:
         74:b4:92:5b:7a:88:3a:ec:b6:fb:8f:1b:22:7c:dc:a0:43:dd:
         fb:c7:f7:eb:a8:03:a2:fb:00:11:ec:36:fc:08:1d:b1:3d:c7:
         3a:e1:53:bc:f0:5d:09:dd:c1:6c:a9:df:ee:6c:f7:fb:40:77:
         d3:48:c4:ff:61:09:15:3f:f6:53:85:ed:17:f4:ec:3d:7a:c4:
         9e:61:eb:5a:c7:cf:50:76:9b:ac:7f:2a:4e:88:6f:9c:21:7f:
         ae:46:f0:ef:0e:71:6e:39:38:04:67:0b:7d:57:1a:17:9b:bf:
         e4:65:2c:94:3f:aa:35:6b:8a:e5:fb:97:0c:f0:96:d0:0b:2a:
         05:29:02:9f:10:d0:a7:6d:a7:05:bd:b2:fb:ed:07:a3:75:05:
         4f:d0:d6:18:ea:5b:74:1a:a1:34:ac:1e:f6:3c:46:b9:4d:ae:
         a6:ff:0c:f0:e5:19:51:f2:dd:31:5f:59:79:76:42:e9:5e:0b:
         47:58:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:14:38 2026 by rpki-client