Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa
File:                     ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa (raw, json)
Hash identifier:          RDw8pwK+p+4CirDuTLFEgDcteA2qCBz4I4NGe7PvRSs=
Subject key identifier:   8C:8D:FB:05:4F:E7:10:47:25:C9:8A:32:07:EA:61:C1:28:C1:73:8C
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584E709F737E9A610B6AC9589580
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     400556
IP address blocks:        2602:f71e:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:73:7e:9a:61:0b:6a:c9:58:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=a0570ce3-d1bd-40a6-a5ee-734bfc7d53c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:31:41:da:9e:2b:85:de:13:bc:b8:95:1a:7d:
                    39:ab:41:3d:a4:fe:1e:88:8f:34:30:fa:98:d8:5e:
                    c3:2f:f5:df:1c:c0:51:f9:50:57:69:68:4d:ff:ea:
                    39:80:e2:ba:6c:10:5a:ae:d8:f6:e4:51:35:91:62:
                    4a:ed:b2:f9:71:27:70:63:b9:19:d4:7a:7d:80:63:
                    52:d0:f9:98:68:22:36:79:a0:75:49:18:ec:1a:bf:
                    7a:3e:74:fb:06:31:39:77:41:7a:9a:03:f4:e4:7d:
                    34:c4:26:a1:03:24:d7:79:7a:ca:7f:31:bd:16:43:
                    73:9b:3f:17:e4:03:31:a6:a2:ae:3a:97:b3:47:c7:
                    ad:1f:87:8d:9d:02:db:83:37:9f:12:f1:59:88:f2:
                    db:be:38:56:9e:f2:3a:fe:1b:2a:b5:0d:60:5d:d6:
                    f3:dd:77:d0:78:da:a3:69:1a:b2:f3:e6:53:55:b3:
                    52:14:5b:e4:a4:bd:49:a9:9f:96:2a:76:00:16:fa:
                    ea:2f:d0:6d:0c:be:d0:9c:ee:09:d0:bb:8b:c5:f6:
                    b5:17:26:ef:b7:45:12:5f:0d:bf:cc:4a:9f:95:ad:
                    3f:48:5d:4b:7c:5e:7d:36:56:87:44:72:86:12:26:
                    70:dc:87:8e:5c:f2:a1:4c:59:4c:99:13:e9:e0:6d:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:FB:05:4F:E7:10:47:25:C9:8A:32:07:EA:61:C1:28:C1:73:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/ac2bc3bf-adf8-32de-ae4d-0e5eddfa0f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:71::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:59:29:9f:e2:6a:53:84:a5:a6:cf:28:3b:45:46:6e:3f:fb:
         53:e1:09:52:28:3c:28:45:18:9b:43:bf:e0:3a:62:f1:e4:f0:
         6c:cf:55:24:42:d1:5a:7a:ec:f2:a1:7e:c0:a8:35:00:d4:0b:
         03:5b:52:d4:63:ce:ca:d0:67:54:e9:3f:d3:13:d4:90:34:ce:
         bf:11:8b:a1:49:af:b8:a5:e3:13:b3:13:8b:98:61:03:65:c5:
         50:f3:51:06:de:d3:66:f1:06:cf:aa:19:fe:d6:ba:9e:7c:b7:
         49:28:49:d7:04:7c:35:c7:6d:c7:a0:fd:b5:d2:54:e2:cb:91:
         04:54:8c:76:2b:e2:f2:cd:e4:d7:a3:42:48:af:55:8d:a9:9f:
         e4:6f:90:f0:3b:72:50:1f:1a:ad:33:0d:1f:a8:a3:fa:a2:d3:
         1f:18:02:c2:fd:fb:73:24:07:03:2f:fb:04:01:f4:30:94:8f:
         62:0b:06:01:1b:46:77:36:4f:97:93:49:8a:39:d9:6f:04:84:
         c3:29:26:3e:8f:ac:b1:b9:ee:a5:ba:50:da:09:2c:97:c6:e9:
         d8:75:28:34:e5:a0:2d:e2:66:7a:bb:59:cc:b7:1e:15:d6:9f:
         b8:6a:85:10:6c:51:75:4e:58:ef:02:32:60:8b:46:8d:ed:81:
         c3:b5:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:46 2026 by rpki-client