Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
File:                     84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa (raw, json)
Hash identifier:          euOPDxcJix05QQerCyAie4wRjnbfzjj38BJluvbgvG8=
Subject key identifier:   4D:F0:28:E8:E5:C8:6D:B4:38:D5:5E:18:34:4A:41:E2:D5:E9:65:A4
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584E6B0A219E08AFF05D3A628940
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     46427
IP address blocks:        2602:2c1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:21:9e:08:af:f0:5d:3a:62:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=de7a8430-f335-4954-9966-f251c06c5dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:95:d8:04:e2:dd:4a:18:29:10:e8:61:09:
                    f0:0a:e4:c5:b9:ba:10:43:b8:dd:89:00:09:91:72:
                    2d:f9:9e:bb:b1:1e:71:72:2f:3f:e7:f9:3c:7d:e4:
                    c4:3d:5c:e4:4b:a2:cf:6b:e9:58:5c:16:d8:4a:b5:
                    f5:65:8f:42:81:fe:fc:92:d0:08:05:c3:e1:20:ae:
                    32:33:b1:de:ef:54:58:e8:9b:12:69:64:13:61:ab:
                    24:93:51:1e:6b:0a:2f:0e:a0:fd:71:82:c8:7e:ac:
                    ec:96:ad:92:b4:57:8c:77:51:57:25:be:95:db:50:
                    9c:fa:fe:bf:24:e6:95:62:9c:fc:9c:40:6f:15:9c:
                    91:78:98:40:9c:f4:2b:53:2c:3c:3c:5a:f6:43:97:
                    5e:f4:06:bf:fb:9b:00:bf:f0:25:16:e6:00:c6:56:
                    27:10:82:bb:1f:be:54:e2:a0:89:79:99:37:f1:93:
                    10:4d:e7:10:cb:b3:e1:94:df:50:a7:5a:ee:f1:e8:
                    3c:da:53:3e:ce:d8:77:81:dc:d2:4b:94:e4:6f:fe:
                    2b:bf:49:17:de:b2:a7:ea:45:04:3f:33:66:bc:bc:
                    76:d4:bc:c5:85:dc:62:89:4e:8a:b8:c4:ba:6f:4b:
                    29:92:48:80:91:f6:8e:cb:ad:ca:ae:87:62:28:4f:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:28:E8:E5:C8:6D:B4:38:D5:5E:18:34:4A:41:E2:D5:E9:65:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:cb:1c:92:5b:ac:57:dc:37:cd:18:38:fb:26:e6:7b:d0:
         4a:18:f1:94:cb:fe:c6:cb:7e:be:26:b0:ae:cc:9e:52:85:c7:
         6e:61:ab:ee:ad:15:3b:04:20:73:a6:9f:c2:e2:02:84:48:e5:
         35:c2:79:b4:51:2a:c1:2f:71:cd:fd:14:7d:4d:cc:f1:79:bb:
         b7:79:fb:b2:f6:d9:ab:4f:2f:c6:f5:83:9e:04:29:da:06:c0:
         45:b2:15:09:1a:97:8f:94:01:66:e0:fb:4c:29:2a:41:80:97:
         58:16:48:ac:5c:dc:b1:c5:55:00:fe:b8:e2:af:45:23:15:38:
         3f:9a:c3:7f:84:f5:f1:b7:0b:0c:8d:c9:25:75:05:63:6c:5e:
         0f:5f:39:32:84:84:48:e2:c8:19:39:72:dd:8d:68:a3:4b:75:
         50:ca:4d:c9:d3:92:4e:10:10:d3:fc:90:1f:c2:9e:6f:7c:f1:
         f0:22:b6:80:b1:9d:13:7e:95:b0:b7:62:a2:30:dc:fa:a0:81:
         4c:16:4f:92:d5:5c:e0:77:45:f2:fb:1b:9f:ec:78:70:93:58:
         06:b2:28:e9:79:3a:d5:02:40:df:aa:39:e6:b8:8a:c3:7a:4f:
         af:4a:16:45:79:e1:3e:38:cc:d8:35:24:c2:99:b1:d4:94:4b:
         70:d4:79:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:45 2026 by rpki-client