Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077/bb9642f8-9867-3e9a-8c83-fc636a268c82.roa
File:                     bb9642f8-9867-3e9a-8c83-fc636a268c82.roa (raw, json)
Hash identifier:          61Jsk0YQlVmETzxk2esAJMfRWx8eHfdkZP2YUBScRqQ=
Subject key identifier:   F8:BC:81:2E:74:6D:57:79:E4:0A:46:D8:C7:EF:36:55:E0:33:D3:21
Certificate issuer:       /CN=e9884a56-5f0a-404a-ad35-c1452a564077
Certificate serial:       010D0C9F4328584E88082F8808A89203E466FB00
Authority key identifier: 15:AC:57:A1:E6:77:77:F9:CA:6C:B3:13:C2:75:D2:37:5B:94:18:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077/bb9642f8-9867-3e9a-8c83-fc636a268c82.roa
Signing time:             Fri 17 Jul 2026 18:14:56 +0000
ROA not before:           Fri 17 Jul 2026 18:14:56 +0000
ROA not after:            Thu 15 Oct 2026 18:14:56 +0000
asID:                     402777
IP address blocks:        2602:f347:80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077/e9884a56-5f0a-404a-ad35-c1452a564077.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077/e9884a56-5f0a-404a-ad35-c1452a564077.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:08:2f:88:08:a8:92:03:e4:66:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9884a56-5f0a-404a-ad35-c1452a564077
        Validity
            Not Before: Jul 17 18:14:56 2026 GMT
            Not After : Oct 15 18:14:56 2026 GMT
        Subject: CN=31469cb5-2095-4b4d-9dca-106744a388c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:14:52:2f:32:b5:59:14:68:ef:6a:0c:7b:
                    1e:31:f9:74:5a:2b:ae:74:5b:78:63:58:4d:a4:4b:
                    2e:8b:1e:ac:a2:69:5e:77:04:c7:31:56:1e:8a:ad:
                    21:7f:28:c4:38:aa:d8:e5:fd:8e:02:51:50:78:47:
                    9f:36:53:e4:39:43:c3:8d:b8:a7:31:00:8e:34:2b:
                    15:c0:25:cf:a4:37:bb:57:b8:c1:6d:c7:ea:ae:3d:
                    9b:24:6e:9c:0b:d9:42:6d:97:47:f0:6f:a6:3e:d3:
                    d4:2e:61:54:04:c7:5e:d0:78:c7:f9:15:44:5c:a2:
                    f6:a7:1f:6e:bc:49:26:af:51:d9:a2:35:d0:70:06:
                    0f:de:2a:bf:9e:09:0a:c7:e3:71:36:05:0e:34:7f:
                    45:50:14:88:cc:40:3f:12:2e:91:eb:12:74:9e:6b:
                    48:f4:fd:38:6c:e1:3a:af:f5:49:07:b5:71:37:ca:
                    59:3e:58:d8:07:e3:6c:68:18:b1:35:13:d7:89:b0:
                    0b:25:e8:26:92:a1:49:3f:7b:3f:ab:41:11:c0:84:
                    fe:ba:59:69:a5:eb:f7:15:7a:c5:6d:ca:74:81:58:
                    6e:f9:21:f1:98:cd:16:1e:b2:1c:2d:73:11:2a:9d:
                    a8:a7:a6:3a:9d:43:ef:d1:67:e0:cf:52:f7:a5:95:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BC:81:2E:74:6D:57:79:E4:0A:46:D8:C7:EF:36:55:E0:33:D3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077/bb9642f8-9867-3e9a-8c83-fc636a268c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077/e9884a56-5f0a-404a-ad35-c1452a564077.crl

            X509v3 Authority Key Identifier:
                keyid:15:AC:57:A1:E6:77:77:F9:CA:6C:B3:13:C2:75:D2:37:5B:94:18:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e9884a56-5f0a-404a-ad35-c1452a564077.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f347:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:20:41:88:52:15:de:0e:b4:f0:a1:db:a6:7e:52:2e:ac:5c:
         c4:fa:ce:3f:76:9f:d2:2a:89:0d:f1:7a:6e:8d:3b:3a:24:d5:
         f4:13:62:2b:63:af:cc:02:02:64:9a:f4:3f:73:ad:21:cf:17:
         50:3e:b9:b7:b5:2b:8b:b7:16:c5:5d:dc:f0:47:b2:e0:26:aa:
         e5:8a:4f:85:d3:f1:f4:70:76:01:2d:b6:0a:35:fd:1e:79:68:
         86:69:8c:f5:03:4b:47:0b:d3:27:1b:01:3d:25:87:52:d7:b2:
         8a:51:d4:01:03:e8:e9:57:2e:85:6b:d6:74:70:9b:a2:65:50:
         8b:1c:0f:32:58:ba:e5:05:d4:a0:78:a0:a1:78:df:0e:42:2a:
         f1:ec:df:23:8f:a8:6f:cb:55:37:56:30:8d:ec:51:a5:0d:87:
         fc:0b:4a:db:97:ed:a7:86:ff:f4:a9:de:05:9e:cb:90:30:10:
         cf:d6:96:ea:e7:aa:f2:45:25:36:2c:09:32:bb:31:39:52:e3:
         7f:68:29:9e:5a:5b:cf:b9:9b:c8:fd:87:ac:ed:5e:c8:6d:34:
         ae:cb:7e:19:b7:10:70:8b:01:f1:03:6d:cc:4b:2c:dc:1d:d0:
         c2:31:65:a0:91:46:29:a6:47:f5:30:18:f0:a7:6f:3b:ac:46:
         ad:22:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:51:21 2026 by rpki-client