Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa
File:                     07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa (raw, json)
Hash identifier:          HLbGC15vUg7VTAZLjZA3JclohL7qAThBriTa6sn6kk4=
Subject key identifier:   F6:5C:D8:83:B5:DB:52:2A:44:EF:48:57:62:E1:74:18:D7:5D:48:FB
Certificate issuer:       /CN=a3f17d39-fe12-49b7-8dc5-45109c63ea9d
Certificate serial:       010D0C9F4328584E885A4AB46B7E29193A3DBF00
Authority key identifier: 8F:41:CC:64:02:BE:D5:8F:AC:44:7A:3B:61:D5:2D:90:6C:73:1C:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     6939
IP address blocks:        2602:fa2d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4a:b4:6b:7e:29:19:3a:3d:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f17d39-fe12-49b7-8dc5-45109c63ea9d
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=9706c1b1-3d54-45d5-a040-050107c1331e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:b1:5c:91:6b:8a:cc:86:1a:d8:a9:48:98:
                    51:42:4b:2e:db:3c:d4:5b:96:92:b5:50:0b:40:79:
                    3c:ea:21:37:80:54:6e:97:49:ac:70:90:98:ca:0f:
                    fc:91:96:ae:36:3c:ec:4c:28:19:23:eb:09:a5:68:
                    a5:36:99:49:0b:9b:17:03:5c:a6:77:50:92:06:bb:
                    9d:f4:1c:b2:d0:d0:a7:f8:c7:90:38:4e:35:80:6c:
                    08:ad:34:05:6f:42:cd:4d:d3:f0:5a:6e:49:bd:60:
                    ed:6c:39:ea:34:3f:46:29:a1:ee:e3:23:af:bb:69:
                    9e:52:c5:a2:91:9d:34:e7:8b:f1:e4:2e:c3:66:f1:
                    76:f0:7b:a2:e4:5d:58:4c:52:7e:8c:ae:45:cb:0f:
                    40:1a:1e:a8:3a:ac:a6:c5:fe:17:40:6a:91:71:d7:
                    73:fd:70:86:ba:a1:3f:50:0e:c5:e6:9f:12:16:f8:
                    29:a9:35:42:d8:28:a5:4f:00:ed:be:08:c2:e4:98:
                    b8:df:dc:65:c6:1a:c0:6f:2b:1d:d0:ea:de:73:3d:
                    08:72:78:a2:10:5b:23:1b:54:68:00:69:aa:7e:23:
                    b1:f6:ff:76:ad:89:88:2a:91:c8:c3:15:78:3b:0c:
                    30:14:bb:fe:fb:f3:47:fc:03:3f:9b:00:1f:4b:f1:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:D8:83:B5:DB:52:2A:44:EF:48:57:62:E1:74:18:D7:5D:48:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/07104bca-eab3-3c4e-a816-1a1352a0fd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:41:CC:64:02:BE:D5:8F:AC:44:7A:3B:61:D5:2D:90:6C:73:1C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3f17d39-fe12-49b7-8dc5-45109c63ea9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:0a:e1:2a:60:fb:84:76:b6:99:16:91:77:f2:ca:1a:6a:
         58:7f:ec:16:a6:e3:bd:a5:a9:54:b6:f4:30:0b:e5:0d:0e:94:
         37:f8:43:23:cc:92:ef:57:47:f9:8d:19:82:f8:c5:fa:7f:81:
         4e:f2:c9:8a:38:36:9a:0a:06:f6:60:78:ed:3e:ec:60:d7:75:
         50:c0:3a:aa:af:d8:ea:92:ad:26:00:a1:9e:a8:72:27:ea:60:
         e1:15:18:37:95:62:54:46:a5:ef:10:37:d9:e8:11:60:88:36:
         18:79:be:a4:f2:a3:fd:c9:d0:84:4e:71:1a:af:59:50:03:84:
         a8:67:76:0b:07:b5:3e:c3:6b:18:d8:eb:34:3b:9f:6b:d4:6b:
         37:a4:03:b0:c8:7e:b8:5c:ad:11:fd:49:d3:f8:69:92:d5:3a:
         14:8e:14:bf:9f:f5:1e:7f:e3:69:bb:39:7c:9a:e9:8e:de:bc:
         94:d4:7b:66:d1:b4:8d:8a:81:73:17:9e:1a:5a:04:9f:fd:ea:
         12:05:7d:55:38:53:a2:98:28:29:7e:14:99:4a:ac:a9:d3:9d:
         b5:07:0b:69:42:18:d4:09:8c:28:fb:dc:74:1c:f8:33:9b:f1:
         d1:50:03:78:30:16:d2:1a:22:ec:72:50:6e:f0:38:01:d9:2b:
         29:a2:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:03 2026 by rpki-client