Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/379de05c-afc2-3fd5-9b95-8caf92bd193c.roa
File:                     379de05c-afc2-3fd5-9b95-8caf92bd193c.roa (raw, json)
Hash identifier:          rxpqbWFGfbrhK0J712sz8ZeHp9CrAQX/vBc03mM0js8=
Subject key identifier:   FF:43:13:A7:9B:52:A9:DD:C5:78:5A:2E:45:31:88:63:BB:59:6D:6C
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584E6B0A19EC9B55C879DA8AB180
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/379de05c-afc2-3fd5-9b95-8caf92bd193c.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     396908
IP address blocks:        2602:f956:7a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:19:ec:9b:55:c8:79:da:8a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=3fd9c008-85f4-49ef-b8ad-5ae048db65d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:4b:1b:94:57:d0:0e:07:c3:b4:e7:ab:3d:
                    2a:61:02:e3:f4:f4:cf:7e:bb:80:39:ed:b4:20:e2:
                    04:53:81:a3:56:cb:c0:c3:08:a0:b7:da:45:9e:3a:
                    35:77:f9:44:6e:de:a0:19:2c:11:d1:cb:90:91:04:
                    35:86:f1:b5:08:73:c3:5a:aa:6e:fb:4e:e9:9d:17:
                    c0:ce:79:e9:0f:b1:e4:54:27:d8:83:e1:86:22:cb:
                    41:fb:48:ea:b6:c6:71:1c:73:6a:db:a1:56:9f:f6:
                    35:f0:58:6a:4c:16:83:ea:a0:12:48:90:14:8b:59:
                    25:ef:4c:d3:26:9b:e1:1a:03:3b:ef:41:df:fb:d7:
                    2d:bb:71:0d:57:2b:9b:82:3f:81:81:f1:8a:27:74:
                    c3:c3:59:c3:be:70:ef:cc:66:b7:38:ce:3f:0b:6c:
                    af:c6:5f:78:d9:a2:62:40:fc:64:b3:fa:72:34:e3:
                    1d:9a:a6:08:db:65:3b:be:ab:b1:21:1c:72:7a:4c:
                    75:bf:61:cd:dd:8f:04:5b:01:9b:f6:e0:a6:07:f8:
                    e7:76:a3:13:37:08:70:4f:06:f9:f2:1a:e8:d3:53:
                    b6:99:1b:ec:d2:ce:a5:84:61:45:c5:68:9c:c3:a1:
                    de:f9:e9:e7:e2:8f:69:02:ba:24:29:bc:3d:97:d2:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:13:A7:9B:52:A9:DD:C5:78:5A:2E:45:31:88:63:BB:59:6D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/379de05c-afc2-3fd5-9b95-8caf92bd193c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:7a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:09:07:b8:c4:10:d0:06:a7:b3:49:cc:c8:95:89:38:90:
         54:59:f5:92:2c:f4:c6:a6:e8:d8:6b:74:93:3f:95:2c:32:b1:
         e6:4d:81:2d:1e:f6:9c:7f:64:21:f7:69:b3:54:04:5a:57:47:
         81:63:41:c7:fb:ff:7d:a3:93:3a:ac:99:be:bb:eb:c9:bf:df:
         de:3f:76:e6:18:56:a0:bc:14:54:23:df:be:80:93:fb:44:0b:
         c0:2c:6a:1e:d7:c8:cd:84:e5:6a:b6:cc:04:e3:e2:e4:3f:58:
         44:91:87:f5:83:62:54:c7:7c:8e:ca:20:de:d4:2b:80:9d:b0:
         35:95:b0:c4:6c:78:c8:4f:8d:f7:d9:6b:6a:1d:ec:e3:ea:2b:
         72:a5:9e:a6:97:47:e4:23:5c:0f:46:bf:97:3e:75:63:55:19:
         bd:87:bf:94:57:a3:0b:ec:69:d3:8b:e0:18:d0:31:60:9e:54:
         c5:4e:ab:5c:da:25:78:4c:ea:02:7a:cd:87:c1:85:6b:15:14:
         ff:db:4a:2a:00:fb:04:47:af:19:fc:70:4d:32:12:c2:11:39:
         1b:61:51:37:ef:f4:f6:a6:fc:18:c4:69:84:79:f5:a1:2d:3c:
         07:c6:49:3d:d5:13:22:74:66:c4:a5:50:53:7b:48:e8:e0:53:
         9e:0c:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:24 2026 by rpki-client