Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
File:                     123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa (raw, json)
Hash identifier:          KOsmyJAxuMDoOURXCPA5An8gJrfGfBPTe/l+DBMOSO8=
Subject key identifier:   C9:A0:42:C0:F3:07:1C:ED:3B:EF:B0:A7:95:89:92:12:E7:69:56:80
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584E4129DF4432B13301E6302C00
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     13737
IP address blocks:        2602:f895:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:df:44:32:b1:33:01:e6:30:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=91ee2e0a-6ed0-43d0-a8bc-2ae4100b46bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:87:33:f8:43:72:07:c9:ad:00:2f:ba:13:d0:
                    09:8d:95:29:02:f7:dc:c7:a4:5b:58:08:6f:cb:9f:
                    5c:05:9c:ed:02:d9:3f:76:a2:fe:70:0f:2d:ad:db:
                    e5:c0:26:3d:b2:f2:17:1a:c5:47:e1:65:55:f2:60:
                    d6:85:e2:8e:6c:28:a4:83:81:22:41:2f:7d:c7:d7:
                    39:9c:c2:9b:f1:97:27:95:a1:df:4b:ee:5f:91:c9:
                    d7:9e:bf:05:1b:d5:aa:97:42:bf:12:b9:4a:8a:cf:
                    a9:1f:ec:10:45:59:a9:cd:e0:cc:c9:5b:dc:57:69:
                    2c:7a:55:f6:e0:66:2b:2f:f9:7a:4b:95:6d:6e:e5:
                    de:a9:a5:d2:58:04:af:9d:dc:8e:53:00:af:21:04:
                    43:9d:92:3d:e4:d1:d2:9b:84:50:0b:74:2c:9e:62:
                    74:09:24:e2:d0:35:bd:e1:98:62:1e:8e:28:48:33:
                    92:57:f5:fc:20:a3:1d:98:f3:74:08:de:1a:4a:bb:
                    54:ac:3c:aa:aa:e3:16:7e:2a:a6:60:86:71:0e:52:
                    54:54:80:4a:e1:cb:da:62:9d:27:06:8b:01:1c:ed:
                    c0:bf:25:e3:cb:39:08:e4:77:0f:14:7d:9f:42:d8:
                    e6:c4:6e:69:d3:42:4a:34:49:c7:02:40:61:0f:d0:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:42:C0:F3:07:1C:ED:3B:EF:B0:A7:95:89:92:12:E7:69:56:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:97:cf:7e:3f:b4:e1:4a:d0:e4:54:d8:53:62:1d:06:04:
         3b:d0:ac:5a:90:6b:5b:4a:96:13:94:92:cf:8b:4d:7b:42:0e:
         38:20:91:cc:ee:a7:a7:85:23:d4:5e:fe:d6:b0:e9:e8:c4:62:
         64:bb:5f:03:2d:16:a2:5d:13:3b:22:b1:df:3b:ea:c8:29:da:
         5e:7b:68:5b:1f:ca:35:23:f7:93:0e:c3:3a:eb:97:e1:eb:14:
         2e:f2:c9:12:17:bd:8f:5f:87:87:4a:ea:a1:c4:0f:1d:38:1f:
         43:d3:de:52:a6:27:7f:62:a7:92:c6:c9:00:e7:f8:27:00:77:
         2a:82:58:de:81:bb:ae:1a:d6:19:0a:2c:02:eb:4f:a4:68:8a:
         4c:07:52:45:20:26:b5:22:0a:9c:81:19:7d:14:d3:58:35:1d:
         5d:21:81:4d:5b:be:92:63:7b:5f:f8:e0:57:f5:30:28:1a:a0:
         3d:eb:87:86:9f:93:89:5e:88:24:80:26:da:cd:dc:9f:61:e4:
         ef:d8:9e:2d:06:6c:a7:cd:6d:62:8f:bb:14:d8:db:12:df:02:
         b1:f5:40:2c:c7:02:b3:9b:c3:15:93:7a:c8:67:19:bd:c2:49:
         d8:9a:17:f3:c3:b7:08:22:dd:85:f1:16:43:3c:04:b3:d7:0b:
         7e:58:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:48 2026 by rpki-client