Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa
File:                     1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa (raw, json)
Hash identifier:          eiLfSBb5vf6YHoflh7d2G/W0uS22HloJ08qmdSLpUjs=
Subject key identifier:   02:4B:E6:95:EF:0D:3E:85:7D:C8:B6:A5:42:33:0C:38:97:B6:9A:5F
Certificate issuer:       /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
Certificate serial:       010D0C9F4328584E842A326C13836F490038F900
Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     18636
IP address blocks:        2602:f4f2:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:32:6c:13:83:6f:49:00:38:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=ed6aa86b-fc3a-4575-b72e-b9ae83c99e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:d9:0a:75:03:3f:f2:38:ef:4d:6d:b8:4a:
                    a6:2e:d0:69:8a:01:b5:4e:b8:e1:a2:fc:75:32:b1:
                    d3:f2:6d:3f:b1:c0:2f:52:64:25:71:65:10:ee:38:
                    22:b8:24:4d:f9:3a:ef:e4:ae:63:de:a8:47:92:33:
                    85:5b:26:2f:e7:54:59:2e:90:da:87:cf:a2:b1:1c:
                    2b:cf:62:96:2b:c7:63:4a:6c:1e:13:cf:90:29:13:
                    f6:64:d8:82:16:de:0d:61:81:50:26:bb:83:71:9a:
                    e3:1c:23:f1:a5:d6:10:35:55:c4:2a:6b:4e:27:3f:
                    1b:29:35:c2:c5:7b:69:4c:17:09:3c:00:1e:24:eb:
                    40:2a:a4:4a:a2:04:f1:06:c3:08:83:7c:75:0f:41:
                    49:83:0c:40:cc:5f:97:25:4a:a2:f0:5c:51:08:e4:
                    df:d3:83:7b:bb:bd:f7:82:a4:9e:d2:c5:da:c8:d7:
                    dc:6f:ee:bc:93:87:2a:4d:ed:16:6c:ae:d5:18:00:
                    12:e8:78:8d:ba:c1:6f:19:2f:56:2b:fc:2c:b4:03:
                    29:55:fb:4c:e9:13:d1:a7:be:b5:0a:5a:c2:82:98:
                    a2:44:1d:92:46:ec:2a:3f:a1:c3:05:42:43:a8:7c:
                    09:71:47:46:49:4b:82:3c:ca:92:65:d2:bb:7c:6c:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4B:E6:95:EF:0D:3E:85:7D:C8:B6:A5:42:33:0C:38:97:B6:9A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/1d26456f-490f-38ce-b6a3-88edfc7f5bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl

            X509v3 Authority Key Identifier:
                keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4f2:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:cd:6c:cf:16:94:1d:68:04:e4:f6:da:88:4e:96:87:e9:
         52:f3:0d:97:29:c8:fe:d7:03:f1:38:a4:19:c9:b1:5c:cb:a4:
         a6:51:64:22:1e:17:83:ed:f1:ef:d5:19:24:1c:81:54:5e:99:
         97:6d:3c:28:53:9c:95:08:24:26:51:09:27:ba:c1:28:e4:c1:
         a0:c3:83:78:38:dc:36:b1:89:37:5f:1d:ce:97:cf:b9:18:92:
         56:1d:80:fb:4b:55:de:79:95:d4:6a:3e:9c:40:27:4e:f8:03:
         44:a7:3f:cd:3f:7c:a7:cc:f9:72:d4:57:5c:0d:08:12:68:5f:
         3f:c6:2a:d0:f5:3b:6e:fe:8b:dd:d9:c4:b3:0b:b0:20:68:35:
         7a:fd:3d:af:f0:f7:47:19:6c:dd:14:c6:ec:06:af:2a:a8:50:
         3a:12:e1:85:f7:ea:ad:67:9f:45:54:d8:55:83:23:bb:92:cb:
         ca:af:01:4d:0b:d8:47:5c:69:f5:e1:46:94:de:c1:ce:16:0f:
         51:4c:b3:a7:b5:4f:7b:f3:76:b0:22:82:e1:b5:ec:c6:58:1b:
         79:2e:d0:c8:ab:26:fb:2d:81:0e:6b:c1:97:6e:85:5b:fb:d8:
         a0:9f:73:29:91:24:f7:0e:b8:18:70:84:59:e6:57:90:27:47:
         50:9e:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:24 2026 by rpki-client