Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/45002108-7c87-3363-a863-5ca91cbf33ed.roa
File:                     45002108-7c87-3363-a863-5ca91cbf33ed.roa (raw, json)
Hash identifier:          zqfojdL264gYZdMHEVTUrbOUgNt6nNP+qBQ9ROPG8TY=
Subject key identifier:   5F:FD:08:85:17:E4:FD:78:64:98:51:94:B6:2D:EE:38:A7:25:F8:87
Certificate issuer:       /CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709
Certificate serial:       010D0C9F4328584E9384F518F96639011463A300
Authority key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/45002108-7c87-3363-a863-5ca91cbf33ed.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     212177
IP address blocks:        2602:f84f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f5:18:f9:66:39:01:14:63:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=d50a7993-a01b-48aa-86b9-2013c11b86e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:78:9f:d9:64:c9:69:99:e3:22:d8:26:d3:0c:
                    54:e9:ae:40:32:e0:54:e9:04:94:4c:a4:e7:96:d9:
                    25:e8:d5:38:c5:44:32:4d:25:04:68:07:35:a7:45:
                    e6:2b:20:95:04:5c:62:12:c0:df:3b:d8:be:2a:b7:
                    55:15:91:64:62:36:4a:a6:f3:9d:bb:81:1c:98:60:
                    36:17:e3:09:2e:07:e8:c4:d5:fe:1a:13:70:c8:b5:
                    e1:ad:16:b4:d3:6d:64:81:4e:dc:e3:ac:66:dd:1f:
                    77:6e:ee:38:05:9e:36:73:76:00:5b:8a:a9:45:fb:
                    06:de:45:ad:b7:b9:9e:b5:b0:0f:8d:d7:36:c1:6f:
                    b6:29:b7:f0:07:1c:fb:ff:ef:35:d8:90:bf:70:45:
                    09:f1:15:5a:62:dc:58:43:f7:a0:5d:48:4c:0d:a1:
                    93:08:87:15:2d:79:2d:06:76:98:36:28:3e:8a:19:
                    5e:92:d5:63:c7:5b:8b:61:bd:dd:13:22:6c:c8:26:
                    5b:28:81:80:8f:1d:8f:a8:6a:5c:75:bb:1e:28:92:
                    fd:01:bf:bf:03:1d:f3:df:e2:52:68:24:a5:af:53:
                    d2:8d:20:07:48:e4:a3:63:51:8f:45:76:cd:5c:46:
                    9f:43:51:95:34:6c:c7:68:db:e7:85:a7:76:43:7b:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:08:85:17:E4:FD:78:64:98:51:94:B6:2D:EE:38:A7:25:F8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/45002108-7c87-3363-a863-5ca91cbf33ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.crl

            X509v3 Authority Key Identifier:
                keyid:10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f84f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:57:5d:0d:35:61:8f:1a:31:f8:ac:88:c2:9a:3f:da:3b:
         80:7d:9f:77:b8:4b:61:fd:5b:25:28:ba:8c:ce:ec:91:a5:b5:
         c1:28:50:66:25:cf:b6:da:5c:b6:19:fe:5b:d8:aa:95:49:5a:
         58:e9:4f:09:dc:83:ce:44:2b:8a:34:e5:d8:6b:4a:7d:35:73:
         32:d4:a0:42:66:9c:9a:b1:ae:2d:65:11:fc:49:34:26:3a:36:
         94:6f:83:de:d2:0d:6e:99:8c:ec:c5:94:da:bc:fe:13:6d:9c:
         8e:9d:d8:46:35:57:d7:d2:76:4d:95:9c:00:d0:7f:90:18:10:
         7b:3b:b7:35:84:23:d9:38:67:82:11:ca:88:24:6f:dc:9c:a2:
         97:6b:2e:f3:b8:ca:04:98:a9:a3:e7:3d:b9:fc:1d:a6:c0:e6:
         c7:cd:23:0d:77:be:6c:4c:66:30:56:90:2a:5b:3c:0e:1c:5a:
         12:b6:74:ca:19:7d:28:57:61:ca:31:c3:33:4d:65:89:af:30:
         21:70:bc:11:a8:57:bc:b5:ee:1d:f6:4c:24:8c:9c:42:0b:a2:
         c0:ac:bc:83:ed:e3:43:94:b0:1f:62:1f:15:53:eb:c1:d5:0a:
         4f:03:33:aa:e3:a9:17:7f:af:c4:12:51:95:66:bb:3b:58:59:
         c8:b0:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:19 2026 by rpki-client