Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa
File:                     02d672a4-08bb-3e92-b541-ae26424edbc7.roa (raw, json)
Hash identifier:          nv7I+/eS7QJiz35rORrS8sluOYqrxKO3FQF1gLcb/oY=
Subject key identifier:   DB:8C:FB:E8:FE:C8:CD:93:F5:6C:A1:9F:5C:4C:B4:6B:D1:28:74:9E
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584E9A7FD5CBAF23AEF04933E700
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     393249
IP address blocks:        2607:f8f0:614::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d5:cb:af:23:ae:f0:49:33:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=fd01dbb1-6a63-48ae-a535-6e61061abeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:48:c7:e5:6e:e2:9e:72:35:35:b0:c2:ab:
                    51:4d:7b:9c:4a:7c:8b:78:f1:8a:81:00:7a:3b:a2:
                    06:79:57:00:0a:b2:c8:d8:a4:9d:94:76:83:44:0c:
                    23:47:1d:65:9b:f1:6e:c8:a7:15:ce:f0:61:4c:78:
                    b7:2b:6f:07:cc:79:aa:a5:58:62:39:3b:87:17:8c:
                    56:9a:df:83:a7:b3:2d:b7:fa:0b:4a:af:b4:e5:34:
                    dd:99:e5:34:4a:9b:e1:75:85:48:15:db:ee:47:ce:
                    61:3a:92:43:e4:25:4e:e9:7f:79:1e:46:f1:4c:f1:
                    ed:af:93:a3:e6:ef:2b:2d:d9:39:c1:01:02:e6:a4:
                    bf:71:be:1e:a7:c4:24:1f:a3:b2:74:4b:cf:07:05:
                    0b:2f:74:b1:8a:09:40:dc:8b:ee:ea:fe:14:fa:48:
                    0a:bf:8b:1a:4d:1d:0d:69:e5:cd:a9:bf:d2:9e:3c:
                    0f:7a:33:1e:ca:b2:42:8c:bf:0d:1d:09:55:e4:6e:
                    fa:fc:00:39:36:e4:68:b3:72:96:e6:8c:97:7c:ee:
                    1e:a9:9d:c9:63:3f:fb:80:41:21:e9:fd:ba:c4:65:
                    a6:b2:78:87:f8:e9:00:ca:30:90:92:ce:01:63:21:
                    f0:0f:a1:71:6d:e8:93:61:a4:bd:57:35:0a:6d:66:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:FB:E8:FE:C8:CD:93:F5:6C:A1:9F:5C:4C:B4:6B:D1:28:74:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:614::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:f2:47:0b:00:2d:f4:42:41:06:5d:49:55:56:4a:cf:70:
         de:f3:a5:fd:9e:ea:2e:89:87:ed:25:0d:f7:13:e3:e6:e8:31:
         ef:eb:97:1f:20:14:68:a9:db:2b:b8:17:52:8a:a0:1b:fb:38:
         b8:60:df:d2:59:7c:aa:df:76:96:fd:9e:84:7b:68:01:90:a0:
         aa:45:cb:31:2b:7a:14:a1:9d:1f:d9:d1:b5:60:74:e1:9d:a9:
         ca:96:26:d4:db:8e:09:bd:55:cc:76:74:24:78:7e:c1:72:ce:
         39:45:c1:a0:07:34:30:fe:90:f2:be:b3:44:07:83:19:96:5f:
         1b:ad:31:cc:85:10:54:2d:67:15:24:4b:37:bd:dc:15:cb:7e:
         a9:dc:5e:13:99:20:98:35:09:da:01:f9:e2:27:b9:fd:84:81:
         d9:56:ed:12:b7:44:4a:82:7a:6a:1b:ae:b9:6b:5d:f6:ee:e8:
         29:b1:9a:fe:e2:ab:82:aa:0e:44:eb:97:49:43:6e:f0:23:bb:
         01:b1:7c:4c:6c:04:81:f4:69:de:74:63:40:c6:f1:88:1b:69:
         94:72:3a:48:b5:e5:68:c6:a7:c5:17:9d:80:80:e6:3c:22:d4:
         6e:f3:cb:ad:88:1c:61:b6:97:e4:61:81:c3:4f:c2:2a:c1:86:
         90:38:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:21 2026 by rpki-client