Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/aac7bd5d-664a-3506-9970-0032633ef323.roa
File:                     aac7bd5d-664a-3506-9970-0032633ef323.roa (raw, json)
Hash identifier:          jKoapJeHtycjV7DlRM0qyIhDE1ufysxShbynII8brgc=
Subject key identifier:   E4:61:5B:3D:C0:C8:44:68:A5:68:33:89:81:6A:9C:A6:B2:DD:D0:90
Certificate issuer:       /CN=abaad708-212e-4627-8dbe-416a8512677d
Certificate serial:       010D0C9F4328584E6F3A2A581C38800FD13680C0
Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/aac7bd5d-664a-3506-9970-0032633ef323.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     399747
IP address blocks:        2602:fc6a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2a:58:1c:38:80:0f:d1:36:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=85eaed37-2ff8-487b-824a-517320600249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d3:e8:9d:92:8b:e6:64:bb:ce:95:67:f3:0e:
                    39:9e:11:ec:b5:c6:30:35:0d:05:65:9f:d6:a4:e6:
                    7a:dd:5d:d9:7e:1a:38:90:00:91:c1:02:55:4c:c2:
                    4c:2e:ee:1d:54:d6:00:36:5f:fb:e8:e0:67:da:31:
                    44:18:e2:3c:cb:ae:b3:1f:9d:8c:ef:cd:b7:0a:dc:
                    5a:8d:a1:82:ff:23:3f:62:ee:b6:4c:20:40:e1:28:
                    51:33:16:82:05:69:7a:58:4b:85:c1:23:40:12:1a:
                    c3:d2:7d:19:bd:ae:7d:72:a2:41:68:a0:73:8c:c8:
                    1b:29:ce:e5:ac:00:c3:e9:0b:a4:e2:f2:62:3d:1e:
                    6b:11:3e:25:13:64:5f:5c:94:02:a9:dc:28:1b:6e:
                    98:12:83:6a:23:c7:db:74:61:a0:fb:a5:cb:01:b4:
                    0a:ff:fc:90:18:6c:af:53:2d:0a:85:eb:79:26:bf:
                    a5:9c:af:03:c6:91:04:97:46:29:dc:77:c2:34:05:
                    2c:01:e5:13:07:18:9d:f9:8a:8a:16:4f:48:24:d1:
                    3d:b1:20:8b:44:db:a3:99:5b:49:ac:59:bf:04:05:
                    50:03:3d:f8:fc:f2:94:62:65:e2:72:e8:4e:3a:e6:
                    84:69:ea:61:60:99:d9:88:72:c8:06:86:53:8b:e4:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:61:5B:3D:C0:C8:44:68:A5:68:33:89:81:6A:9C:A6:B2:DD:D0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/aac7bd5d-664a-3506-9970-0032633ef323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:61:44:4d:3b:89:b5:f0:60:08:52:71:52:44:4c:38:2a:f0:
         99:cc:8c:26:a0:65:76:22:73:79:eb:38:b5:51:f6:45:9c:d6:
         d7:d6:76:62:cb:22:47:97:07:f6:d2:77:ce:d5:95:6b:ac:65:
         28:81:e2:12:29:e7:89:d4:f3:64:50:99:41:fa:88:ed:48:22:
         ea:3b:87:40:4b:5b:da:a0:ef:8c:eb:73:23:02:d7:34:62:a5:
         1d:47:06:d2:26:78:9e:5f:0e:97:6c:09:df:50:c2:7e:48:b9:
         38:54:d2:06:25:13:93:31:97:67:0c:cc:bd:47:e9:50:12:71:
         2b:01:c3:be:46:24:e9:7e:0a:57:25:b6:bc:f7:67:da:43:04:
         26:d0:b9:00:55:ba:fb:f3:28:fb:87:64:76:be:96:dd:4e:4c:
         0a:fd:bf:77:a7:46:4d:e5:8a:e7:ce:e8:1a:36:27:fe:10:4b:
         8f:bc:43:32:90:fe:27:2f:9d:89:fb:57:95:15:db:13:a6:53:
         18:7c:ec:1e:9c:0c:e3:5f:60:5f:ce:07:68:df:40:4c:91:ad:
         15:1f:80:d1:04:66:0b:00:27:af:2f:50:fd:b4:6d:ab:18:13:
         02:bd:92:71:fb:10:fe:99:10:2a:6c:ad:8c:56:88:d1:a1:22:
         7b:ff:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:29:01 2026 by rpki-client