Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
File:                     9785b2c1-44bc-393c-9287-c1b9c65de83f.roa (raw, json)
Hash identifier:          ZoBrgl8LDVqhNpYKbQsatvz9icPd5/GktyVLa2ASmDA=
Subject key identifier:   C3:42:33:5C:39:41:E5:1F:DB:2D:8C:8B:9D:45:45:A9:C7:4E:3F:7C
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584E2D9F1E225C6B8335812C7070
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     150369
IP address blocks:        2602:fd6f:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:1e:22:5c:6b:83:35:81:2c:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b4cb5511-ee5c-4c00-ac02-1c056c36b5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:c8:28:52:d9:15:bd:56:0b:d2:7a:75:10:
                    e5:8e:17:84:a8:a3:83:8b:86:b2:6a:0b:ea:e5:30:
                    10:b0:56:af:2b:bf:ec:a9:94:db:e4:cd:62:e8:4a:
                    0d:ac:f4:2f:ed:ce:f6:43:3f:1c:de:99:e0:eb:fe:
                    d7:95:19:16:98:ca:d1:a1:de:59:ab:82:2c:ed:45:
                    c7:86:ae:2b:03:6e:4b:6c:0c:a7:c1:6d:6d:2d:e2:
                    cf:25:96:35:97:61:3b:82:d8:cb:ba:75:2b:97:1a:
                    67:07:f3:c7:71:64:3f:bc:a5:db:d4:60:63:91:f7:
                    52:f8:51:d5:ff:17:4d:b0:51:9d:5f:f7:95:d9:07:
                    9d:ec:c7:3f:b2:7e:42:54:1b:a8:2b:df:8d:9b:a8:
                    a5:ca:2f:a9:3c:6a:2b:a8:32:46:f7:24:4e:a3:55:
                    1f:62:ba:5c:b4:b6:f2:71:d2:a2:f6:9f:77:1b:4a:
                    a1:e6:37:25:5b:67:ca:a9:c1:66:8a:aa:27:56:9d:
                    2d:3c:36:7f:89:96:ed:dd:80:d9:cd:ac:47:d4:24:
                    cd:c4:7f:10:bd:38:ad:30:ee:b8:ee:74:e1:2e:bc:
                    43:bb:a5:a3:26:a2:29:02:d0:ff:73:e9:a3:18:1d:
                    6c:7a:3e:21:81:96:8a:be:31:c3:76:1f:ca:45:26:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:42:33:5C:39:41:E5:1F:DB:2D:8C:8B:9D:45:45:A9:C7:4E:3F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:4d:23:a8:1e:51:78:21:a1:13:70:5b:77:a4:88:f4:5c:
         44:b9:e2:3c:2b:80:c9:75:4d:f4:44:2e:6a:f1:f6:0e:c7:b7:
         8d:bd:dc:5f:e2:1a:2c:9e:51:2c:a8:ed:36:67:ea:45:a8:be:
         77:8b:6f:ea:64:6b:63:1d:0d:39:32:1d:94:61:44:d4:88:bb:
         54:3f:b6:b7:56:a3:5b:b1:5b:2d:bd:08:f6:9d:f5:06:0f:0e:
         fc:da:0c:23:4f:32:b5:5a:db:b7:2f:a5:cf:8f:e0:33:d3:9b:
         f6:83:e5:24:72:5e:d9:4d:99:c9:d4:88:03:0d:61:70:c5:cf:
         48:c5:7e:7b:2d:6f:7c:48:2e:cc:82:19:02:4d:d9:86:54:56:
         3e:70:b7:b4:9a:ba:a6:42:ad:53:7e:c6:b3:bf:f5:28:2e:13:
         bb:42:e0:c3:6d:78:2f:7e:8c:50:17:64:4c:0d:fe:e8:2e:34:
         7e:da:69:75:03:2c:00:ee:f4:b6:7f:f8:98:cb:85:9d:d7:70:
         b6:6b:57:9c:69:9d:3a:76:80:9c:d0:61:66:0b:eb:c1:6f:25:
         1b:56:03:60:c2:bd:fd:0f:0e:19:71:31:aa:4b:15:7a:ad:35:
         ff:ed:64:ef:ab:92:5e:75:ce:ba:e3:9c:af:eb:74:cc:b7:41:
         24:92:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:56 2026 by rpki-client