Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/71016faa-75f7-3603-ac25-b6cd73c16da4.roa
File:                     71016faa-75f7-3603-ac25-b6cd73c16da4.roa (raw, json)
Hash identifier:          KBG+CTpm3irVTrhVDI1sotGtEZlST8zZ69UZg8sR7q8=
Subject key identifier:   97:0E:46:7B:75:56:81:83:FC:9B:93:05:77:E2:E8:AD:6E:BB:DD:26
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584E4AEF46FFD7E2B469A1B21700
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/71016faa-75f7-3603-ac25-b6cd73c16da4.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     203236
IP address blocks:        2602:f9f6:800::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:46:ff:d7:e2:b4:69:a1:b2:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=52875272-8c13-4e1b-8a01-638c24368413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:d5:4e:b3:46:f1:64:a2:35:23:ad:55:86:
                    0e:18:c1:1e:fa:30:2e:c8:3e:68:67:8c:c0:78:63:
                    20:4f:cd:7c:b4:f8:15:0a:81:f5:26:db:ce:29:53:
                    54:74:c8:f0:84:b1:50:9c:89:76:4e:29:16:8b:7e:
                    5c:11:08:f2:99:fd:9f:66:9d:35:24:63:96:54:71:
                    bf:e4:9a:e7:12:b3:0e:82:06:0c:9a:58:3c:44:13:
                    34:51:11:cc:5f:71:50:41:d6:99:89:a3:c5:33:dc:
                    c6:96:2d:6d:51:ce:68:63:38:d5:e7:49:6b:31:6d:
                    c4:98:db:c9:9c:0c:b6:29:25:0b:63:91:e0:81:27:
                    1e:82:a7:b9:18:bc:9b:2d:d4:a7:b3:e0:ee:24:e6:
                    03:c4:1c:0c:7c:8a:28:98:2b:12:91:a8:b6:44:a1:
                    54:3c:48:11:54:24:16:57:d1:58:78:52:69:4e:e2:
                    a9:9d:0c:ee:b7:3c:1c:68:41:64:8f:98:03:e5:ee:
                    6f:9f:6e:ad:9b:cb:b7:c0:d3:0b:bb:1b:b3:18:df:
                    e3:88:65:2e:0b:71:17:51:1e:8d:26:66:9d:19:07:
                    0f:5a:da:2d:6a:c9:a5:6c:79:8f:68:ad:97:76:d1:
                    f5:90:3c:b8:7f:e6:e0:a5:38:d0:99:1c:b3:72:a1:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0E:46:7B:75:56:81:83:FC:9B:93:05:77:E2:E8:AD:6E:BB:DD:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/71016faa-75f7-3603-ac25-b6cd73c16da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:800::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:80:26:ef:ed:95:e9:81:30:c6:0a:ba:33:69:f1:9b:91:
         2b:cd:03:45:fa:15:1c:4a:ad:d0:96:4f:15:d7:59:67:5a:22:
         2a:b4:43:ea:10:02:cc:f5:fd:f4:15:c4:2d:d0:9e:3d:d3:0c:
         02:64:26:68:ad:45:9b:5f:78:40:97:cb:69:cd:c8:d3:f2:15:
         69:aa:4e:23:9f:b7:81:fc:7e:20:db:46:ea:a0:df:d5:44:18:
         ef:6a:a7:d5:fa:50:d9:cc:aa:c6:94:8a:9f:88:e8:b5:08:a3:
         15:0d:5c:c4:a7:2f:48:9f:2f:64:9a:7b:ce:9a:5b:3d:04:85:
         35:de:0c:c0:43:f4:c7:e0:1f:c3:c8:e3:75:65:23:e4:de:df:
         c4:fe:5a:95:51:5a:10:d0:60:cf:71:dc:cc:4f:0d:e2:d6:21:
         ad:dc:35:e9:54:56:70:f0:cc:a1:9a:74:f0:27:67:06:bc:36:
         7a:2c:97:69:22:3f:fd:cb:75:21:b5:53:ee:7d:d0:a4:32:7d:
         de:35:d6:c3:3f:a8:ee:4f:dd:f6:4f:5a:b3:4f:2f:54:34:46:
         6a:78:7f:ae:25:d5:b3:01:a1:7c:94:78:0e:c1:76:f9:1f:0d:
         b6:e6:7d:99:26:99:27:96:16:3c:c2:dd:ba:b3:5f:a3:a4:31:
         96:77:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:24 2026 by rpki-client