Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d/45e3da2a-7e6b-349f-b336-fc6d3c4ba0ab.roa
File:                     45e3da2a-7e6b-349f-b336-fc6d3c4ba0ab.roa (raw, json)
Hash identifier:          WhcZG+v12mkcvOg4UOs3U4r49NaSnUy0iAMOKM8EIYI=
Subject key identifier:   9F:D1:43:F1:9B:CA:D9:8B:3A:90:EA:C3:62:D8:70:FD:C0:1F:20:AB
Certificate issuer:       /CN=df649651-971f-4666-91f4-289553a9720d
Certificate serial:       010D0C9F4328584E8271BC4132E1CC2DCC935A29
Authority key identifier: 74:51:10:29:84:14:B9:80:4F:A0:22:CA:87:C1:A1:DF:D1:97:85:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d/45e3da2a-7e6b-349f-b336-fc6d3c4ba0ab.roa
Signing time:             Wed 15 Jul 2026 18:12:46 +0000
ROA not before:           Wed 15 Jul 2026 18:12:46 +0000
ROA not after:            Tue 13 Oct 2026 18:12:46 +0000
asID:                     402691
IP address blocks:        2602:f36d:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d/df649651-971f-4666-91f4-289553a9720d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d/df649651-971f-4666-91f4-289553a9720d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:71:bc:41:32:e1:cc:2d:cc:93:5a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df649651-971f-4666-91f4-289553a9720d
        Validity
            Not Before: Jul 15 18:12:46 2026 GMT
            Not After : Oct 13 18:12:46 2026 GMT
        Subject: CN=57ada276-8612-4df6-93a1-24e3594e6730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:65:b6:19:dc:47:a8:80:41:15:80:b8:b1:
                    c0:2b:23:43:78:d0:7d:e5:06:16:d5:f7:3a:41:9f:
                    3d:55:b3:12:0b:60:f6:2a:7f:3c:71:25:0d:02:83:
                    c4:ef:27:39:36:f9:10:8a:aa:5c:63:8c:73:57:fa:
                    74:50:7d:52:f9:89:94:15:1b:80:7f:8d:e0:56:82:
                    6b:2b:00:6e:b3:39:3c:02:52:b9:1a:71:3f:22:70:
                    9c:67:16:a2:89:da:0d:3f:60:8c:92:8d:23:69:8b:
                    a0:74:4a:0d:6d:da:7e:ba:cc:ea:cd:36:24:ca:0d:
                    1d:a4:7c:4b:eb:a5:8e:1e:58:24:f8:d8:e4:b5:94:
                    e5:d8:41:53:fc:1d:d4:a0:9d:c5:0a:64:4b:ca:f5:
                    fe:6d:37:00:46:25:0e:b7:a4:49:41:25:31:07:e9:
                    0a:be:94:84:26:6f:35:33:e7:dd:7c:29:ce:db:0f:
                    eb:03:80:df:1f:27:a9:f9:e1:dd:4e:1f:e1:88:f4:
                    1e:e3:70:12:cd:70:be:ca:fb:72:d5:a6:f0:6f:66:
                    73:f6:36:ba:d7:47:0f:ca:43:2e:d0:05:5d:5c:19:
                    00:43:f9:cb:fa:a6:fa:4a:54:63:1b:9d:00:07:fc:
                    ca:42:97:8f:56:62:ec:ed:55:2c:e9:51:60:64:99:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D1:43:F1:9B:CA:D9:8B:3A:90:EA:C3:62:D8:70:FD:C0:1F:20:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d/45e3da2a-7e6b-349f-b336-fc6d3c4ba0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d/df649651-971f-4666-91f4-289553a9720d.crl

            X509v3 Authority Key Identifier:
                keyid:74:51:10:29:84:14:B9:80:4F:A0:22:CA:87:C1:A1:DF:D1:97:85:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/df649651-971f-4666-91f4-289553a9720d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f36d:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:06:db:b4:bb:69:68:d9:33:a0:b1:83:4c:0c:ed:fa:b3:57:
         3c:24:53:4a:d3:52:9d:4c:8c:25:a5:51:76:e7:84:0d:ea:e5:
         18:ff:93:db:71:98:e7:1e:67:d8:c6:51:2b:41:d0:f4:a3:ec:
         58:fe:23:03:07:7f:f9:42:e2:f4:c2:3f:8b:fa:95:a6:2b:74:
         f1:6f:4e:5d:75:1e:3b:fb:46:c4:e1:9f:62:1b:d3:07:fd:ac:
         7b:c3:bb:ba:e2:0b:9e:63:61:93:84:02:15:f0:be:38:51:56:
         79:9f:b5:f7:32:f3:c3:1a:66:18:9a:4e:67:f4:9f:f7:d5:f1:
         d6:1e:76:53:7a:e4:eb:8e:de:75:ca:99:eb:7d:0b:b2:6d:be:
         76:98:29:f3:85:38:d2:e4:da:10:43:88:29:67:03:77:c6:92:
         77:37:f5:dc:de:d2:e4:4b:50:4a:ec:07:82:30:df:27:75:d5:
         bb:b0:a5:02:b6:a7:10:9d:5d:60:63:7e:df:c3:4d:79:6f:37:
         58:eb:59:85:66:f2:51:ad:12:e8:29:57:24:82:9b:c3:47:14:
         84:6a:91:cc:31:13:0f:6b:0c:e9:1e:da:cd:e6:63:71:ac:73:
         34:77:84:ec:50:14:89:e1:82:16:07:2d:19:90:7e:a7:2c:20:
         60:9e:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:22:50 2026 by rpki-client