Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa
File:                     02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa (raw, json)
Hash identifier:          Ys8wd6OGhf0jXcRgBEZwCsO8Alk8QE21uc9k4Ml8+nY=
Subject key identifier:   A4:8E:6E:C7:4C:D9:60:F6:38:42:F3:BD:FB:2A:95:9E:EB:73:0D:EB
Certificate issuer:       /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
Certificate serial:       010D0C9F4328584E7E94F3832162D637E20D2100
Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     46998
IP address blocks:        2602:f854::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f3:83:21:62:d6:37:e2:0d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=227e2709-3e87-4f2f-ad21-ccec0eac4785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:c3:ff:fa:d5:63:5c:70:4b:de:76:cc:71:
                    f5:cc:e1:e9:72:ec:37:44:35:9c:4b:f2:f9:1f:b5:
                    80:27:40:95:af:89:ae:03:6d:3a:e8:a3:12:6b:1e:
                    f4:60:2a:a6:4e:24:f0:67:41:01:2c:84:7b:19:4c:
                    c1:f8:0c:4e:be:05:df:26:9b:1f:fc:b7:9b:ed:f1:
                    b9:18:c8:28:6b:80:df:70:d3:ea:33:89:a0:bb:83:
                    bc:ad:d1:90:ca:24:21:5d:c0:86:12:25:f9:c9:c5:
                    e9:94:17:0d:93:7e:fe:39:3e:19:1f:b2:70:73:9c:
                    11:8d:27:e8:59:23:46:fd:fd:53:f4:a6:3c:f3:48:
                    3c:b7:13:70:92:81:4c:6d:20:4d:a3:de:61:14:9a:
                    86:47:01:7d:d5:66:c7:82:62:db:f1:a5:e4:02:44:
                    10:b0:be:d4:de:16:4c:d5:ee:3b:71:cd:9e:21:6c:
                    81:9f:fc:7b:30:4b:ff:ba:09:5c:04:e3:14:1a:0d:
                    88:dc:3d:59:0c:92:99:f9:de:a8:29:c8:73:d5:4e:
                    3b:3f:35:48:6a:27:f4:85:0c:19:8a:52:9d:ec:7e:
                    cd:96:57:f0:16:92:1a:b7:c5:17:df:39:1d:ac:5b:
                    20:bd:fa:d9:62:a8:93:b8:13:2a:7f:05:86:4c:f9:
                    40:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:6E:C7:4C:D9:60:F6:38:42:F3:BD:FB:2A:95:9E:EB:73:0D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/02c6ff06-bc0b-325f-9c2a-c61f1d0527ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl

            X509v3 Authority Key Identifier:
                keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f854::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:47:e9:b7:c6:af:cd:3f:df:4f:4a:8d:95:38:61:5c:05:b7:
         89:fb:9a:38:9a:a7:77:98:e8:ac:d8:93:8e:24:92:0c:09:22:
         b9:7c:ac:9c:88:ae:2d:03:ec:9a:c5:87:fc:9d:fe:5f:aa:9d:
         fb:d6:16:f6:d5:7d:6e:16:cf:f7:36:1e:d7:b7:b7:e6:b1:c9:
         51:88:f7:d3:5b:15:90:47:99:21:f2:35:24:08:25:4d:4f:bb:
         3b:1f:1d:b5:47:8e:eb:ef:03:08:67:45:eb:d5:bf:9f:ae:9e:
         03:9f:fc:15:3c:60:27:c2:bc:8d:f5:47:dc:e0:7b:40:28:5b:
         31:3c:54:05:b0:9d:dd:da:9c:67:c0:06:5e:88:f7:45:43:1f:
         5f:41:11:f9:c3:46:4d:21:46:d0:fd:c4:b6:68:1e:92:cd:18:
         bf:4c:81:07:ca:07:a6:7e:d7:6b:62:7b:9e:4c:30:85:45:90:
         20:b2:3f:3e:ad:14:af:bf:02:11:29:a2:08:46:6d:ea:25:ab:
         7a:d2:0e:6c:93:9e:9c:04:f3:c9:3e:28:a3:e4:3d:2b:db:62:
         0c:b7:55:a2:c1:a2:26:30:a9:bb:9a:3b:f6:a8:29:c0:ad:b9:
         03:45:b1:45:ad:f7:00:f5:59:40:18:68:a3:67:81:1f:66:8a:
         4c:a3:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:40 2026 by rpki-client