Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/3d49770f-800a-34a9-b579-a4adf2ce610b.roa
File:                     3d49770f-800a-34a9-b579-a4adf2ce610b.roa (raw, json)
Hash identifier:          C23qBzAyV0EsO3PrWRk47UkeMg2dYPUv6SrG0eJjyac=
Subject key identifier:   93:A4:39:20:EC:94:DC:52:8E:0F:25:A9:01:7E:40:48:D3:D4:BC:B1
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584E7A64DECE668BA78931B78F00
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/3d49770f-800a-34a9-b579-a4adf2ce610b.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     27010
IP address blocks:        2602:f9f6:430::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:de:ce:66:8b:a7:89:31:b7:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=d4f0bf72-09c3-4f00-8afe-911b010e04d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:03:a5:d5:ed:ae:ec:a4:18:f4:e2:5e:0d:04:
                    73:b1:ef:c2:f9:89:e5:7c:9d:ce:3c:47:c2:d8:27:
                    20:c1:78:29:58:1e:02:28:ec:47:ed:53:4f:e3:72:
                    18:c3:62:a9:a8:a1:9e:bc:a7:51:a6:1c:73:09:0b:
                    ad:a7:f5:e7:ea:af:a2:47:09:fa:8f:f3:a3:36:b6:
                    11:8b:59:f3:87:ff:c5:1f:4a:20:de:ad:3b:cb:10:
                    99:e5:77:3f:d6:b6:af:aa:86:19:45:bd:a9:62:79:
                    3d:f5:b5:ce:d0:07:4d:4c:20:34:b8:c3:af:85:f5:
                    13:bd:95:e5:94:7f:b5:07:18:80:4e:4e:d3:2a:9e:
                    29:db:af:ed:e5:f0:23:77:5f:90:55:bc:08:f4:cf:
                    3a:27:da:f7:8b:ea:44:1c:dd:ae:55:50:89:f3:ae:
                    02:d0:15:d4:a0:a8:8e:d0:d9:6f:ce:34:86:86:90:
                    89:7c:d9:10:18:9f:d6:aa:aa:88:5e:26:b4:66:9c:
                    7d:0c:89:46:eb:a3:79:b9:2d:77:a8:cf:35:e8:bf:
                    94:21:07:19:dc:ab:57:06:c2:9e:d4:6f:b2:33:39:
                    50:6a:88:b8:10:99:6a:2c:7f:3e:d6:80:3b:95:16:
                    c0:4f:f9:bb:94:35:27:1e:22:cb:0e:c8:92:1b:bf:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:39:20:EC:94:DC:52:8E:0F:25:A9:01:7E:40:48:D3:D4:BC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/3d49770f-800a-34a9-b579-a4adf2ce610b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:90:99:8f:8c:c8:74:a8:e9:22:d5:64:09:8c:6b:c8:a4:e8:
         e6:0f:17:f7:89:ee:3e:ea:41:4d:e3:8b:40:ac:6c:9a:52:d8:
         a1:b3:41:c3:2b:65:64:9d:a5:a9:81:17:ac:e0:2b:7e:0e:9f:
         ba:c5:f1:04:14:97:7c:88:81:9c:23:91:a7:e4:ee:d8:ed:48:
         17:83:b7:92:3a:c1:ea:54:74:86:ab:a2:88:54:5a:af:f3:5d:
         ac:db:9b:ce:72:14:b7:ba:4f:87:ab:93:01:69:73:bb:8e:ba:
         98:db:1e:e9:5c:3f:26:9b:2e:87:0a:d6:41:22:88:a7:4a:8d:
         d4:18:77:d0:42:5b:b5:d4:01:8e:b2:d3:fe:a9:0a:4f:85:96:
         e5:65:8e:85:7b:ba:0e:ea:9b:e8:a9:97:a7:04:e5:f4:b7:f4:
         16:d6:f5:30:4d:3c:ab:29:be:1c:35:96:38:2e:ad:4f:ef:f8:
         7e:ae:70:50:eb:f1:82:53:9f:c4:dc:bb:da:f7:a4:dc:c9:df:
         88:be:eb:16:56:bf:97:21:ca:52:8f:62:eb:a6:04:dc:89:98:
         68:10:7f:b5:1a:37:7b:60:ae:a6:5e:08:b2:a8:78:dc:7f:86:
         3b:8f:43:1a:48:27:09:a5:f3:86:f3:0f:33:9a:c8:d3:ff:c9:
         55:9b:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:14:04 2026 by rpki-client