Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/e9b7ae7d-0572-3883-966c-d31cab42cfb2.roa
File:                     e9b7ae7d-0572-3883-966c-d31cab42cfb2.roa (raw, json)
Hash identifier:          WCDxDCjUt5+eq7XrOvpvzG6VU41ArTCjLntL1WdQAHo=
Subject key identifier:   E7:E9:42:A3:65:88:81:60:D5:52:11:38:BD:E3:14:46:AD:48:66:43
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584E534F4A483718637B2409CEA0
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/e9b7ae7d-0572-3883-966c-d31cab42cfb2.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     26006
IP address blocks:        2602:f9bd:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:4a:48:37:18:63:7b:24:09:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=b5d289ab-f56f-4945-a75c-5b75aa5b4798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:c1:b0:86:58:40:6c:da:dc:0e:4b:f6:95:
                    fa:eb:38:43:74:96:a9:7a:9f:69:ae:c2:e0:27:55:
                    a6:b1:58:8a:cc:a8:1f:bc:65:e2:13:ec:d3:46:2c:
                    94:85:1b:1e:9a:7d:e6:69:73:f4:fe:18:fb:06:24:
                    47:82:26:4a:dc:64:a1:97:d9:df:69:e1:1d:b5:a9:
                    76:b0:fb:39:00:16:a7:67:44:a8:ad:dd:f2:a5:17:
                    9e:0f:f0:e6:68:9d:f7:07:1d:dd:8d:e1:89:00:13:
                    a8:45:7e:5f:85:a4:bd:89:7d:d1:9e:cb:30:33:94:
                    94:74:0d:31:c8:8d:07:1c:30:6e:5e:98:c4:ac:26:
                    05:a6:5e:ba:3c:e6:5a:00:63:a6:ec:b2:dd:e2:69:
                    46:41:f6:eb:a6:11:ba:45:33:61:2c:2a:35:5f:6e:
                    e3:01:ac:be:a9:f2:0b:9f:71:ae:4a:ee:90:4d:30:
                    63:a9:8e:b1:e9:ab:48:39:8e:f6:53:58:c0:d7:57:
                    10:89:38:a6:7d:3a:b6:1c:70:26:71:bd:ae:d5:82:
                    78:97:8b:e5:9e:08:56:8d:17:9c:c2:29:5f:ff:75:
                    8f:b0:c5:82:22:26:dc:be:02:33:1f:d8:88:99:1e:
                    7a:79:5d:84:56:f2:5a:6d:84:89:cd:a4:d4:18:70:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:42:A3:65:88:81:60:D5:52:11:38:BD:E3:14:46:AD:48:66:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/e9b7ae7d-0572-3883-966c-d31cab42cfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:55:4d:c5:bc:28:79:f9:a0:dc:32:f4:de:2b:f8:24:39:
         f6:74:a3:85:cc:6d:fe:f0:93:89:64:79:88:ac:24:4f:19:d5:
         ca:a8:8e:32:85:66:fc:45:6f:55:fc:99:82:3b:87:36:4b:68:
         87:76:73:de:d9:a9:e0:0f:8d:dd:eb:47:e7:9f:58:ac:92:db:
         52:55:d2:c5:0a:71:93:a2:52:4f:1e:f5:4e:4d:78:d9:6a:5e:
         92:73:4f:06:59:f1:b4:8b:cc:1e:63:c9:76:bb:98:23:10:03:
         7e:b8:8f:52:bf:f6:08:02:14:c5:1a:81:d7:06:cd:a9:85:56:
         dc:18:5d:54:3f:22:6f:70:f2:a4:31:a3:49:2e:69:48:54:a1:
         aa:c6:3b:71:ce:ec:0f:4f:4d:99:cf:4a:c5:39:b7:3e:c9:78:
         59:48:eb:83:f6:52:05:4c:cc:5e:1b:5b:32:cf:dd:2b:25:55:
         8b:c6:3e:54:f5:ec:52:66:f2:b3:c7:16:dc:97:1f:90:75:11:
         20:8c:61:5d:49:dd:43:bd:1f:a3:6a:4a:23:a0:39:2a:a8:50:
         bd:46:f9:31:67:5b:1e:5d:f7:db:89:18:cb:61:62:d9:33:50:
         66:d6:20:c7:4f:cd:1e:32:84:5f:cf:66:27:e6:2b:85:a1:3b:
         6e:2f:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:46 2026 by rpki-client