Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa
File:                     f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa (raw, json)
Hash identifier:          MP926Ne6GOlDKL0/6+puAZ3cbJXRE856Bewk4RYM/Xw=
Subject key identifier:   27:4A:68:10:79:8A:6B:3D:DF:FF:FE:98:1F:AC:F0:37:AA:43:8D:B4
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584E7A64DF170A3F20A8DDC93100
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     213663
IP address blocks:        2602:f9f6:440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:df:17:0a:3f:20:a8:dd:c9:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=45604350-2355-4f4a-90a1-84b7957cb268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:f2:8e:a0:58:b7:84:f8:85:ee:c6:ab:4d:
                    d0:d5:16:92:a7:a1:53:97:26:f5:57:04:14:42:07:
                    e8:0d:1c:af:78:4a:1c:a6:c1:f3:2c:b5:a9:65:40:
                    d6:71:e0:6d:fa:2e:fc:e4:32:f7:f9:46:30:47:7b:
                    ea:6f:b4:7a:26:b8:91:de:78:55:9d:19:b9:e5:fb:
                    02:2a:59:c2:c7:c0:c1:93:9a:75:b7:09:dc:1b:eb:
                    34:69:38:e7:a4:0b:e1:1a:3a:21:a7:c6:64:eb:f4:
                    b9:82:a3:db:11:7f:a8:4e:ec:1e:42:ee:78:d7:9e:
                    65:80:17:8c:50:5b:0f:9f:ae:41:84:c3:d3:f2:e7:
                    19:81:54:df:f3:14:04:26:f8:db:25:e3:ac:ea:64:
                    cb:fb:23:c9:87:ac:72:43:d0:fa:13:61:76:63:7b:
                    f0:17:bb:aa:57:38:a0:6b:86:b0:4d:05:e6:db:2e:
                    ab:de:50:34:d7:23:72:b5:54:13:3e:06:b3:c3:d3:
                    bc:28:85:0c:c2:04:45:c2:7f:11:38:f7:7d:8c:0e:
                    ff:cc:14:52:ce:cb:ec:b5:cd:9c:ce:f9:8d:30:18:
                    a7:a1:f8:5c:33:2a:de:17:f8:b0:bb:2c:ed:3d:3e:
                    cf:f6:41:11:0e:70:29:2b:08:e5:ee:66:56:a3:fb:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:68:10:79:8A:6B:3D:DF:FF:FE:98:1F:AC:F0:37:AA:43:8D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/f96f3766-d16a-3bf6-b6a6-401ba52a287c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:92:ee:88:97:f2:d1:7a:f1:bf:2b:e0:82:49:5d:6f:09:
         83:b4:02:5c:15:ec:31:90:fa:a8:38:72:7c:91:64:7c:5a:5e:
         31:4e:33:ca:02:42:a1:55:3e:73:61:34:c3:2e:f4:bd:5d:2f:
         b7:3b:ff:54:5d:d8:8c:8c:47:14:70:f1:94:b5:69:bb:da:62:
         4e:42:f4:8f:29:7e:48:a4:57:cb:b1:92:74:cf:62:f0:2b:f5:
         d6:6d:93:f3:31:83:74:d6:34:9e:be:14:9b:97:e3:42:2e:aa:
         44:71:a0:e5:8b:03:77:fb:32:48:10:a0:18:76:e3:16:e3:d4:
         f9:96:22:89:fa:c5:e6:84:f3:ee:38:fc:e1:e9:4b:a1:35:22:
         37:ed:a7:60:7d:72:6d:14:24:19:a4:cc:06:8c:4b:99:bf:91:
         7b:98:7e:54:37:76:05:9a:29:e8:e8:34:85:ae:7e:8a:13:d5:
         cc:67:c4:a1:30:28:5a:8d:36:b9:66:0c:88:1b:f5:8e:31:5a:
         c2:8a:16:7d:1c:60:4e:54:b5:1a:5e:e6:bb:4f:59:cb:ed:92:
         9b:7d:48:50:7e:fe:85:a3:ab:f5:e2:24:a1:5e:ae:1f:4f:3e:
         f4:be:b3:03:0b:e8:b5:6c:d8:90:b1:3f:63:5c:3c:b1:44:d0:
         c3:d7:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:42 2026 by rpki-client