Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
File:                     3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa (raw, json)
Hash identifier:          4ELE501scXEqTxs2HMGbNdW1bnUKou6gQV+dJc8wS7s=
Subject key identifier:   EE:DD:41:07:AD:86:39:58:26:69:7A:DD:43:83:26:19:FB:50:68:EE
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584E5A4A04CD598DFBF9D1B6DBC0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     1218
IP address blocks:        2602:fdaa:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:04:cd:59:8d:fb:f9:d1:b6:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=4fc024b7-cf6d-4213-b6bc-c7b3b73f2726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:85:e9:a9:51:86:b3:3c:72:9f:4f:12:d0:
                    19:71:b4:5c:cc:52:4e:9a:cd:e2:19:7d:9d:e5:d0:
                    52:50:91:fe:48:5e:93:d1:cd:b7:f3:1b:37:e8:e1:
                    15:e1:0e:18:af:1b:4e:ad:5a:50:89:12:7a:ce:be:
                    37:75:d4:58:6f:77:e0:fb:f0:ca:37:0f:75:65:23:
                    db:3a:e2:16:39:cc:91:19:65:5b:a1:9a:fc:47:29:
                    63:67:1a:bf:0b:1b:53:6e:fb:8e:6c:a5:3a:e8:9a:
                    99:54:0d:97:ba:9e:66:36:06:a8:3e:20:4d:09:06:
                    ea:d7:db:3d:33:a6:d5:36:e6:6b:7d:c7:53:a3:a7:
                    90:4c:e1:e2:a3:9d:c0:3c:32:50:47:ac:6d:98:4a:
                    8b:2b:a7:15:8b:0e:df:37:11:ae:af:ca:b4:a3:02:
                    32:98:c6:1f:ce:4a:0a:e0:fc:b8:20:4c:79:fe:1a:
                    23:64:b1:14:28:7d:c4:fa:07:77:8a:f4:df:29:6f:
                    fb:6a:cf:35:b2:c1:61:fe:87:4e:ec:26:7c:97:21:
                    05:d1:76:7e:b5:0d:ed:4c:b9:86:0e:3e:33:2d:5a:
                    b5:9f:04:0d:48:a2:e0:4d:9d:ca:44:53:e5:70:58:
                    29:80:72:e2:81:b0:da:a8:9c:d6:fa:99:5c:24:0f:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:41:07:AD:86:39:58:26:69:7A:DD:43:83:26:19:FB:50:68:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:7f:46:1a:4d:00:10:3d:73:7c:54:b1:75:fd:21:f8:d7:
         7e:d5:12:8c:92:ad:e4:20:dc:d9:16:e7:a8:3f:d0:62:3e:1c:
         f9:8d:65:74:dc:a6:4b:04:91:47:59:42:9b:66:3c:3e:20:54:
         0b:0b:b4:86:dc:c3:2d:84:68:e8:85:1e:bf:59:09:ba:98:a2:
         28:62:1d:52:f1:d2:31:d9:85:95:13:7d:f3:6e:85:8f:d6:fc:
         8f:2e:9e:bd:1e:93:1d:10:08:81:89:19:ab:6b:ba:9b:9f:04:
         26:41:93:da:33:76:e3:40:a0:1b:e5:d0:56:03:32:47:7e:90:
         a6:a5:a9:af:bc:5c:81:7f:06:b7:28:09:75:3f:71:29:28:3c:
         cd:24:11:ea:1f:38:f3:4e:61:7e:44:f1:fc:b2:41:91:3a:bf:
         91:47:36:63:f8:7f:50:c7:61:e0:ff:9b:2a:a7:43:06:6a:9a:
         c0:e5:6d:5b:2d:0e:ce:9e:87:20:d4:d6:20:d6:f0:b7:4c:90:
         5a:dc:8b:55:d7:89:8e:36:31:bc:60:ce:00:cf:10:4f:cd:30:
         cf:0d:ac:0c:0e:1d:dc:7d:86:90:c0:36:ce:31:c6:27:b9:d5:
         d7:70:b8:35:6b:fe:da:8f:15:4f:71:13:6a:e5:21:5e:6f:47:
         0d:6d:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:07 2026 by rpki-client