Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
File:                     ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa (raw, json)
Hash identifier:          UmOS10nJO4SYzcPYVvbId5waOsZIW7LTvQ9ALYTwTiY=
Subject key identifier:   B9:62:94:DD:64:45:C7:6A:C2:42:9B:3A:84:35:6F:85:24:80:CB:7A
Certificate issuer:       /CN=c52f54e9-4dc6-4976-963e-f51088184223
Certificate serial:       010D0C9F4328584E6B0A1D60C547DE534C080980
Authority key identifier: 59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     33973
IP address blocks:        2602:815::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1d:60:c5:47:de:53:4c:08:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52f54e9-4dc6-4976-963e-f51088184223
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=43ee22f0-f86d-46b0-872e-4303abee81d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:9b:c0:b5:54:91:9d:96:01:e4:21:82:f3:
                    9c:8a:d9:5c:e3:dd:53:bd:ee:7a:b0:00:bd:bf:22:
                    65:2a:ab:ed:5f:97:a1:c0:e7:0b:e6:07:c3:3a:2b:
                    5c:4c:c5:97:d7:90:f5:ae:16:0f:b5:05:1c:3c:2a:
                    28:87:fa:c8:fe:82:8f:f2:8f:ec:83:8f:5f:ce:d3:
                    3e:25:d7:da:16:da:4b:6f:b1:0d:95:52:5d:43:5a:
                    05:52:68:45:95:a1:9e:33:38:ec:e7:77:72:fd:12:
                    57:a8:46:6f:00:91:4e:0a:3e:fa:e9:f6:73:a3:11:
                    d4:7e:de:a5:c2:7d:6d:14:ff:02:ec:fa:1e:c5:0f:
                    e7:10:bc:65:c6:e3:b4:fa:06:b3:39:5e:78:45:63:
                    9e:4d:09:98:15:2f:2e:68:4d:79:45:0a:22:4e:8b:
                    24:96:38:0c:89:86:8c:d0:7a:f6:c4:7d:e3:b5:2e:
                    23:2a:51:d4:79:01:d5:9e:37:59:12:92:5d:b4:3b:
                    00:de:4c:02:ce:f0:84:7f:c5:3a:1f:f2:5c:f1:d6:
                    68:d9:44:32:e6:e1:4a:30:12:88:ce:7e:4e:ec:97:
                    47:9f:b9:63:6c:3a:22:bc:60:aa:cc:56:76:82:2e:
                    6e:c9:fa:37:ad:51:fc:2e:6f:ce:56:43:1a:14:80:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:62:94:DD:64:45:C7:6A:C2:42:9B:3A:84:35:6F:85:24:80:CB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/ff63752b-29e7-3fc0-b6b1-6ebef74cb0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223/c52f54e9-4dc6-4976-963e-f51088184223.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:A7:EF:DA:24:0C:DB:76:A3:58:FA:9D:33:06:2D:0E:1A:7D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c52f54e9-4dc6-4976-963e-f51088184223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:60:1c:07:06:bf:a6:2f:76:8c:f8:f7:2d:fb:44:ee:fe:
         bb:eb:d6:ac:6c:5c:79:f6:7a:4c:79:dc:7b:a3:49:f7:6b:30:
         68:bb:60:2e:2b:c5:51:70:51:8a:b3:c1:b7:0b:bb:ae:55:25:
         15:47:80:1b:db:a8:5d:07:a4:aa:11:ab:23:2d:c1:f8:ff:c5:
         f3:9c:80:90:74:bd:fd:2f:65:4b:11:b2:25:18:bc:7b:75:ee:
         35:7c:59:c6:6d:cc:71:9f:7c:98:b3:a1:2c:be:f4:d1:b7:67:
         68:bc:6b:aa:eb:3b:f3:c6:db:96:97:3a:27:f9:60:86:87:7e:
         51:a8:ae:4b:79:63:ee:59:f3:e8:5b:37:88:69:4d:3b:51:2d:
         08:43:37:df:40:79:36:56:44:c7:db:de:99:67:93:d2:1b:e0:
         44:e3:0c:df:ad:51:d7:76:1e:71:ea:4c:9b:3b:32:16:7c:b3:
         d3:ec:4e:2e:d4:48:18:f1:e5:70:92:b8:b2:40:3b:29:ca:cf:
         7c:39:16:95:85:c1:24:e6:30:1c:7a:99:95:17:cb:e1:ac:8f:
         58:ce:e2:e4:eb:80:56:63:45:8b:81:a7:8d:c0:c6:49:99:af:
         63:db:ae:30:39:e2:e4:a3:83:d7:8e:3d:e8:37:f8:8a:57:0d:
         74:a3:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:40 2026 by rpki-client