Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
File:                     e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa (raw, json)
Hash identifier:          ++kVM3W3bt9Tg52mloRxsyY1viErxfFedVVm0AAWOFo=
Subject key identifier:   8D:4A:8E:33:CD:D6:64:50:8E:D4:93:53:71:4E:2F:58:3E:5D:2F:6B
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584E5A49FEA3D7F22B738C69E2C0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        2602:fdaa:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fe:a3:d7:f2:2b:73:8c:69:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=f9eb7ac6-85cf-4f61-a7ac-d24a2fa5007b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:08:99:0b:b0:9b:1b:6f:f3:4f:5f:d8:69:
                    37:7b:c0:cf:52:79:1f:c5:d9:34:25:9d:ae:38:da:
                    84:e2:9b:32:3e:72:6d:a1:6c:2a:e4:3c:10:75:03:
                    18:75:a7:2f:ba:69:e1:de:60:1c:68:56:50:5b:dd:
                    e9:eb:46:e2:40:ee:30:a8:2a:21:c4:b9:0f:5e:3a:
                    7c:4f:46:a6:2a:e9:1e:8d:5d:98:ce:21:32:b9:76:
                    8e:ba:27:4f:3d:0e:ca:bf:a8:7c:e3:e8:fd:9c:3e:
                    0a:64:ee:79:cb:ce:de:08:a9:a2:8e:a6:0e:78:e0:
                    9b:db:d3:7a:9c:53:a3:a7:23:28:6b:6f:d2:78:e4:
                    73:d1:9c:7a:6c:c5:b8:7c:90:7c:ce:14:81:83:29:
                    12:12:6e:48:c3:f9:c1:41:f6:62:f9:4f:30:2a:16:
                    3d:df:eb:fe:11:f0:32:5a:ca:e7:ac:2d:e8:5c:dd:
                    d6:3e:af:81:ab:fb:e4:13:2a:1b:01:c2:ae:be:00:
                    51:9a:57:e6:f0:6e:be:7f:62:9c:ca:69:5d:6d:72:
                    3c:e5:15:f1:59:8f:b9:c0:d8:1c:c3:1f:db:77:24:
                    e8:75:54:68:05:1f:64:f3:f0:19:41:e1:1f:d4:d6:
                    57:56:65:95:0a:4b:57:95:1b:f2:ec:21:4a:28:80:
                    43:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4A:8E:33:CD:D6:64:50:8E:D4:93:53:71:4E:2F:58:3E:5D:2F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e38c5b2c-3ac5-3095-9c66-b14c15b4ab75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:47:b8:f8:9c:a5:6a:00:f9:0e:c2:ef:3f:52:c3:6d:c1:d2:
         5a:10:8a:e8:07:c1:f3:61:88:df:0d:02:b9:7d:42:3c:2f:57:
         c4:f6:69:91:6f:0b:99:f3:ec:02:c0:f3:a7:f8:5b:48:8a:1d:
         0c:0b:fe:d7:6b:4a:bd:d4:9f:11:2c:ff:3e:bb:64:d7:2c:a4:
         12:30:a5:a3:53:25:c1:6a:64:04:79:d6:4f:14:e7:3b:0b:54:
         8c:6f:b6:2e:72:8b:ec:74:20:11:f5:c9:93:90:8d:6f:3e:f4:
         24:4c:a7:8d:0c:b3:4c:02:29:cf:26:ac:62:41:b9:de:1c:80:
         24:de:75:d6:e1:9a:71:b1:c4:d6:df:f4:dc:4d:72:fb:ca:86:
         dc:83:1c:b0:6c:56:69:9b:ff:91:b2:43:ef:a7:63:30:8f:79:
         7f:2e:a8:e1:ab:64:10:ee:e4:b3:3a:00:06:33:00:31:c0:1a:
         cf:a7:ea:99:96:60:e6:46:00:bf:73:b4:78:6d:bb:af:43:8c:
         7b:24:12:51:8f:cb:51:08:4c:45:44:ed:39:8a:a6:c7:00:e1:
         6d:95:ef:22:8a:fa:d7:d3:48:51:7a:a8:a7:06:df:29:3b:1d:
         2f:8a:d3:b7:53:e6:19:81:04:87:1a:eb:db:78:0d:be:47:3c:
         81:74:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:40 2026 by rpki-client