Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/56bd32e3-bf50-3eb8-9371-b737c6149dda.roa
File:                     56bd32e3-bf50-3eb8-9371-b737c6149dda.roa (raw, json)
Hash identifier:          WHZjKXC/p5otan0TrjjS97ziuMlrsUEG0chV5Lr9LkY=
Subject key identifier:   32:BF:9F:A0:02:63:58:52:A0:BF:BD:A3:2D:EA:FD:6B:20:CB:10:B8
Certificate issuer:       /CN=2654343f-7862-4859-8638-b9c2008b3151
Certificate serial:       010D0C9F4328584E37F374F6D6BDBC9A770E4740
Authority key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/56bd32e3-bf50-3eb8-9371-b737c6149dda.roa
Signing time:             Fri 19 Jun 2026 01:48:30 +0000
ROA not before:           Fri 19 Jun 2026 01:48:30 +0000
ROA not after:            Thu 17 Sep 2026 01:48:30 +0000
asID:                     13737
IP address blocks:        2602:f99f:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:f3:74:f6:d6:bd:bc:9a:77:0e:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2654343f-7862-4859-8638-b9c2008b3151
        Validity
            Not Before: Jun 19 01:48:30 2026 GMT
            Not After : Sep 17 01:48:30 2026 GMT
        Subject: CN=f4f602be-cf1f-4299-b867-b904ae132442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:7a:da:40:26:0b:4f:12:72:da:8c:ad:52:
                    0b:94:bc:34:68:5b:cd:90:0f:69:ab:63:8f:f9:09:
                    ff:ac:f9:99:b7:28:50:06:50:c9:29:3b:5b:be:85:
                    8e:0c:a2:f3:f2:bf:57:06:98:55:5d:c6:3e:24:28:
                    75:e7:d2:9b:c7:93:7a:f7:3d:d3:3c:d3:49:44:3b:
                    db:2f:d3:34:8c:34:8f:c7:02:80:bc:3b:64:55:e5:
                    63:98:88:35:a8:d8:07:69:9e:a5:90:4f:c6:82:90:
                    ce:d9:b7:4e:76:0e:c3:9e:e2:1d:b0:69:8f:53:37:
                    df:61:b0:9f:2f:18:77:88:44:b1:56:2f:d7:64:37:
                    32:87:83:f0:e6:ca:38:ec:b1:39:44:e6:45:bb:db:
                    8e:86:4f:04:06:3a:4b:a0:a1:51:29:a5:d4:21:55:
                    5e:74:ad:ca:f8:56:1d:97:cb:3f:69:50:bd:33:0a:
                    5c:9e:a2:c0:65:b5:17:d2:b1:01:84:68:d0:3e:78:
                    f7:3c:44:9c:4b:34:96:7f:d9:30:df:93:88:6a:1e:
                    6d:e9:ca:c0:a3:df:fd:2e:bb:3d:ae:46:32:45:56:
                    3c:b9:bf:75:e6:8b:82:3e:04:70:6a:78:46:22:fd:
                    d4:ab:96:b7:14:77:3d:34:a9:85:72:86:39:42:f5:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BF:9F:A0:02:63:58:52:A0:BF:BD:A3:2D:EA:FD:6B:20:CB:10:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/56bd32e3-bf50-3eb8-9371-b737c6149dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl

            X509v3 Authority Key Identifier:
                keyid:9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99f:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:b1:d8:49:5f:b4:75:0d:85:03:d4:f6:5c:64:83:07:77:
         25:71:5e:be:c2:48:e5:c3:52:42:5b:32:de:38:9f:f6:b1:ce:
         70:32:be:c3:83:b3:1b:ec:95:a6:58:6a:46:c3:0c:98:23:7a:
         48:31:eb:b8:0f:ef:e5:74:0d:0e:fc:c2:be:27:41:5e:5b:b0:
         c0:e0:b0:44:4f:6e:f2:65:9d:5c:e8:55:33:b2:75:a8:59:b9:
         a3:33:bb:cf:5a:5c:64:93:c5:71:1b:cb:c1:a2:c6:cd:cf:b6:
         99:b1:53:64:13:53:0b:b3:25:13:7f:16:8f:bf:d9:46:a4:54:
         7f:94:f4:4a:dd:d8:8b:46:2d:a1:00:87:26:b2:d7:3e:0b:01:
         b4:31:65:89:20:e6:b5:fa:05:e2:82:6c:9f:3e:fe:6b:15:68:
         79:27:01:d6:a2:8e:38:08:ed:24:95:f5:ba:cb:ac:8d:11:5f:
         44:43:c8:cd:fb:bf:97:1b:c7:4b:85:57:a8:cb:54:56:89:f4:
         c9:af:df:f8:33:d9:bb:42:59:89:14:98:32:86:fe:1c:4a:1c:
         ca:00:6e:91:16:f7:1d:b8:f7:10:fa:32:f2:d3:c2:00:3b:dc:
         6f:9e:a5:ac:29:f7:e5:8f:27:71:62:61:1b:eb:51:43:de:ed:
         4a:06:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:47 2026 by rpki-client