Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa
File:                     0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa (raw, json)
Hash identifier:          R871uuErcLipD0+w2nwzEBNaepMlgc+X6HldTEUW1Vc=
Subject key identifier:   3F:54:6C:E0:75:33:3E:23:A7:48:6A:37:EA:A4:9F:6D:33:19:31:A9
Certificate issuer:       /CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
Certificate serial:       010D0C9F4328584E94EA839FBE23F7D210062670
Authority key identifier: 99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     25693
IP address blocks:        2602:f6b0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:83:9f:be:23:f7:d2:10:06:26:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=f940ca51-4f8d-41a3-b003-b667a41e6d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4a:30:f2:f4:c0:0d:40:df:86:7e:c9:98:02:
                    a9:3e:e6:f8:c8:c4:eb:9f:79:83:25:b3:a6:f7:9b:
                    6d:3d:66:64:0d:0c:2a:74:da:72:43:c0:47:ff:1b:
                    85:b5:be:dc:09:2b:0c:0c:22:78:2b:c2:86:e3:9f:
                    7f:55:b6:dc:6d:a4:3b:05:1b:6e:74:87:dc:9b:8b:
                    b0:b4:c0:c5:7a:47:3f:0a:79:db:f8:c8:0d:d9:9b:
                    58:40:5e:24:08:dc:af:12:0d:68:cd:66:a2:a4:2b:
                    d7:05:6e:40:16:7c:1f:04:37:7e:a6:9b:83:39:62:
                    bc:ed:04:8a:c6:11:bc:49:c0:58:ee:a9:60:86:b6:
                    86:ce:fb:f5:e0:00:ce:98:0b:db:e1:08:3e:e8:2b:
                    a3:bc:c8:48:76:8c:a6:ee:92:0d:ae:cd:f8:2f:51:
                    3b:c0:3c:86:b2:53:fe:9c:02:40:8b:e5:3c:a6:49:
                    59:d0:67:60:b3:b6:40:e2:0f:fd:24:7a:6b:25:06:
                    02:38:74:a6:eb:19:bb:2a:55:44:04:3a:e9:fd:40:
                    b9:c8:a2:f4:e8:76:72:4c:11:6f:32:e7:a4:17:5e:
                    0c:7e:ac:6b:38:07:b2:33:c4:73:a6:b7:36:25:0d:
                    56:55:de:06:a7:b4:e6:0f:56:b0:8d:fd:19:de:6a:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:6C:E0:75:33:3E:23:A7:48:6A:37:EA:A4:9F:6D:33:19:31:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl

            X509v3 Authority Key Identifier:
                keyid:99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:07:ce:39:7e:e7:26:20:c7:e6:8e:73:1c:94:d6:b5:3c:74:
         8c:ba:a9:38:3a:c3:b7:e7:5f:ad:15:80:92:46:c6:37:69:d9:
         99:90:4f:02:2a:a8:93:4e:81:dd:b6:9a:05:aa:c2:fc:26:5f:
         1e:c9:f1:dc:64:9f:83:fa:d0:ef:67:ee:09:d4:b1:ab:bb:1b:
         d8:83:cf:e4:8b:c5:2b:46:ac:eb:1e:96:3d:3a:8b:05:fb:15:
         99:f9:8a:3a:c4:0b:e0:0d:9b:91:fa:fc:90:14:77:da:8d:c1:
         40:c6:9a:4b:58:54:dc:81:4b:06:b7:4d:71:32:1e:d2:76:29:
         a8:5b:1a:58:ac:b8:55:0c:80:f7:84:a3:0d:1c:e4:c9:c0:eb:
         87:2c:42:1c:fa:ff:4f:6d:5f:05:1a:bf:fb:ec:46:41:61:21:
         ee:e6:50:81:e8:86:1d:11:81:e1:a1:c3:30:5c:59:b6:2e:64:
         53:d9:f4:f0:42:0f:84:65:38:f8:c4:d1:ca:24:9a:ff:ba:d3:
         62:d9:1b:e9:6a:0e:07:58:0b:e7:3c:ce:1d:7e:72:a3:3d:63:
         5b:e0:53:a8:5f:ef:09:2d:54:41:c9:a8:a1:35:97:62:f2:66:
         33:8a:f7:90:bd:3e:27:87:22:0f:8b:23:60:91:bb:e4:e1:1a:
         39:80:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:30 2026 by rpki-client