Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
File:                     3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa (raw, json)
Hash identifier:          Z15vYALAJXqWcg/guqU3IOytoACVVeD0nAGeugCscLs=
Subject key identifier:   1C:D6:8A:FE:9D:41:37:3B:9E:37:13:43:4B:A9:F8:7A:BC:68:64:66
Certificate issuer:       /CN=d189c13c-82f8-4a93-80ac-c659e448dd77
Certificate serial:       010D0C9F4328584E842A3B41B666FDC2D1A4DD80
Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     401400
IP address blocks:        2602:81a:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:3b:41:b6:66:fd:c2:d1:a4:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=f6b86893-e495-4225-a237-235a041a8685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8e:da:6e:f8:c7:74:f6:9d:6e:a7:52:51:b0:
                    0d:0e:c0:0c:a3:64:56:b4:89:eb:b6:d1:6b:8e:24:
                    19:13:3e:94:f8:3e:1e:c3:c8:e2:5c:9e:d8:06:95:
                    4e:d7:7e:d1:1d:a1:79:e1:04:23:6d:83:04:0e:72:
                    aa:07:a2:81:7b:af:18:b4:74:df:39:cd:13:73:88:
                    ba:b0:9d:f7:2d:e6:e0:66:36:2c:ff:5a:87:6d:58:
                    eb:3d:23:3b:10:73:2d:b0:0e:15:97:da:4c:5b:3e:
                    9f:dc:d9:11:37:45:a5:b7:8b:f2:f1:3c:8d:ae:92:
                    43:33:e4:48:c4:0b:f3:c7:b1:5a:68:db:3b:a1:97:
                    67:18:e8:b6:a3:1c:ea:db:d9:38:20:96:75:d1:3e:
                    7a:58:85:bd:27:db:c0:16:dc:bc:59:8f:73:54:09:
                    3f:69:55:94:6a:97:94:fe:3d:61:28:37:f1:ae:19:
                    f1:a8:df:7b:fa:ce:15:c7:09:87:25:0c:48:c7:76:
                    45:a8:c3:4e:9f:9f:2c:d2:4e:f8:dc:9e:0a:ec:e5:
                    c8:23:60:2e:e9:1b:93:40:1c:36:ee:7a:27:b4:72:
                    e6:ec:9c:e5:13:26:fa:5a:78:fc:65:a5:19:6a:a5:
                    0c:bd:0e:07:37:b2:cf:55:55:5b:ba:a7:8a:42:0d:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:8A:FE:9D:41:37:3B:9E:37:13:43:4B:A9:F8:7A:BC:68:64:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl

            X509v3 Authority Key Identifier:
                keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:52:53:96:e2:b1:d4:a6:4a:7a:aa:c8:b1:e4:5c:51:d6:b1:
         59:a1:60:00:38:de:e7:6e:d8:40:a9:71:67:fd:31:15:47:e8:
         e3:aa:ba:64:f6:4b:ba:ef:b1:75:a5:3b:ee:59:2f:1f:a8:90:
         cf:94:e3:48:9a:55:8a:ad:9f:86:d8:dd:ad:72:77:43:05:9b:
         d0:81:96:53:48:6c:81:2f:40:f2:ff:42:c3:20:76:29:74:76:
         51:74:99:a7:6c:a7:a7:b1:3e:f3:c0:04:39:ec:3b:88:e8:e2:
         ca:00:12:ba:a9:10:f0:40:70:d2:ba:c4:86:0a:45:b2:a8:15:
         a1:6b:39:ac:16:71:12:ff:5d:ec:3b:0b:ab:52:2e:4a:66:d5:
         31:e8:aa:fc:c5:8a:47:6c:65:f2:cf:4b:6c:3b:2e:e3:7b:da:
         62:5c:2c:7c:21:31:1f:8a:3e:e0:f4:8f:ba:87:c7:49:7a:82:
         e4:cf:66:fc:6a:72:8b:ee:a9:87:52:70:27:ad:e2:c6:90:e2:
         f7:49:2b:2d:e2:5c:06:80:5c:e1:bd:ed:8c:c1:f8:36:30:1b:
         ea:2d:10:71:d9:b5:05:09:ae:29:a8:5c:1d:86:52:e3:58:93:
         f6:21:7d:28:ba:0b:1f:d8:6c:30:4c:c6:ac:8b:e0:77:b4:b9:
         f3:4e:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:52 2026 by rpki-client