Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
File:                     e38f6ec9-0bc5-3381-991e-d21407696e1e.roa (raw, json)
Hash identifier:          zmd6/uFGiowZaj8bnsHL9eqM2eP42z0BuJOde9V8P+I=
Subject key identifier:   76:F1:F5:7D:89:84:3F:1B:13:C4:01:10:27:E2:AF:F2:C2:30:EF:D4
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F4328584E5D14A1CF29F41E88742B2040
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     203690
IP address blocks:        2602:fc42:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a1:cf:29:f4:1e:88:74:2b:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=e0427f2f-f63c-47cf-9295-49d5e7b7c7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:45:97:8b:50:cd:4e:fd:c3:2d:0c:d3:9f:
                    9a:a5:3b:67:f6:93:40:6f:59:75:65:59:90:de:bd:
                    16:c4:01:85:54:99:a6:3c:78:f3:70:7d:c7:a6:00:
                    3f:df:53:a9:39:dd:93:3a:46:3e:a4:d9:91:38:a1:
                    fc:c3:64:6c:1a:a6:b9:94:7e:cf:0c:6a:e0:c6:2d:
                    f7:28:f2:4a:74:38:44:e3:33:82:c3:05:c0:77:0d:
                    92:cf:eb:3c:a7:a5:25:d6:cc:d4:62:53:6c:68:db:
                    c6:00:4f:c1:2f:c2:46:6e:f6:63:db:35:5c:36:20:
                    8e:0f:b6:20:f2:3a:62:5d:fa:e1:41:84:3c:ca:3f:
                    96:23:06:08:0c:cd:ee:b2:1a:1d:be:0e:8b:dd:64:
                    82:03:99:b2:ac:95:34:72:c9:a2:85:3a:a4:a7:c4:
                    89:1e:11:92:e2:c4:e5:04:4a:d1:fe:9e:83:79:a9:
                    df:32:e4:65:46:f7:1a:81:9f:f8:bc:4d:b7:01:c3:
                    ee:9b:46:12:ec:fa:4f:b2:03:6a:67:73:ac:97:41:
                    fa:92:7c:75:60:e7:0b:ab:8d:29:36:5a:9f:7f:02:
                    15:aa:3d:e2:87:14:b6:24:99:41:c8:d5:36:8b:60:
                    5d:ff:6a:72:66:7a:02:d6:7b:cc:a5:e9:03:7f:ce:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F1:F5:7D:89:84:3F:1B:13:C4:01:10:27:E2:AF:F2:C2:30:EF:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc42:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:56:a3:a2:38:ef:6c:e7:e5:4a:fa:f1:31:0c:85:7e:be:
         37:7d:df:85:01:69:54:16:b1:fc:9a:56:fc:72:d3:ed:38:79:
         17:71:a9:00:9f:e9:67:31:82:c8:c0:dc:45:b9:af:40:ec:8d:
         c6:92:90:96:f1:b3:77:42:db:f4:06:a5:3a:a2:bf:64:cb:aa:
         e2:18:2d:b6:f1:40:c7:3b:6a:07:38:fe:03:08:76:c5:0a:eb:
         79:10:63:48:c7:64:2a:c7:53:19:25:f3:20:f4:5e:4f:65:36:
         0b:ae:40:77:8e:12:ee:3a:50:01:37:42:65:a4:3e:a1:4a:9b:
         dc:20:05:e7:90:dc:74:c7:18:95:6b:af:f3:40:2b:09:f8:bc:
         77:2c:16:68:b8:95:b1:fb:bb:74:0d:2c:6d:8f:33:c8:a8:ed:
         f4:8b:a1:d4:c6:d3:0b:3b:8c:fb:d5:ad:6e:1d:f5:63:94:2b:
         ff:16:ff:cf:8e:1b:c5:67:22:78:54:c8:22:c8:44:a9:48:51:
         6c:bb:69:8e:61:40:68:30:ed:d2:dc:f3:eb:dc:81:1d:89:db:
         52:2d:46:1a:93:b9:75:bf:7d:0e:bb:19:39:ea:72:42:1f:e3:
         5c:94:8a:92:4c:f5:a3:86:42:48:cb:a2:a9:fb:88:bc:32:4d:
         f8:56:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:55 2026 by rpki-client