Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/a2be95b3-1a83-3528-a958-0c7fc1baab34.roa
File:                     a2be95b3-1a83-3528-a958-0c7fc1baab34.roa (raw, json)
Hash identifier:          mn6u/AwgdzKaMYCZnjaFD1MlYu2Q2HX9F5nPLL9+P6M=
Subject key identifier:   83:5D:20:74:7D:04:82:40:0C:68:69:81:9A:80:22:ED:43:05:A8:E6
Certificate issuer:       /CN=70a36240-104b-454c-b230-bf415e356e88
Certificate serial:       010D0C9F4328584E640F6ACC7E4FE94D1D490180
Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/a2be95b3-1a83-3528-a958-0c7fc1baab34.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     206439
IP address blocks:        2602:f7bc:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:6a:cc:7e:4f:e9:4d:1d:49:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a36240-104b-454c-b230-bf415e356e88
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=e1ae2c03-88cd-4f5f-9502-a66db7d7a949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:34:cf:a7:37:f7:8d:04:02:9f:89:0f:1b:
                    f3:ab:c7:9b:42:0c:c1:57:72:7f:9c:3a:d7:eb:d8:
                    d6:26:df:4e:6e:fc:0c:41:68:89:f6:87:54:45:b9:
                    23:1b:18:4a:2b:57:20:4c:7c:4f:5c:54:df:7f:be:
                    96:9d:7d:11:f8:23:01:09:eb:ff:b6:4a:dc:40:94:
                    4e:51:9a:12:77:c5:63:72:e6:9b:97:d5:d0:44:84:
                    df:8b:19:d8:95:d5:c7:77:b2:f1:d8:91:a5:3d:fb:
                    10:43:f4:b2:82:f5:b4:5c:81:af:53:1c:8e:83:8a:
                    b8:c3:21:53:25:3d:05:68:97:2e:c8:51:26:0c:1e:
                    48:99:f5:bc:04:23:63:ad:7f:43:9f:43:f0:ba:66:
                    9c:6d:5f:09:32:01:d4:63:ea:20:5f:3e:43:77:87:
                    1c:e9:58:83:be:34:48:e2:c2:d7:f0:13:07:53:51:
                    7e:39:35:8b:b9:ea:bb:18:85:0f:d8:66:df:6e:5e:
                    df:01:e9:7b:3c:3d:46:fa:b3:52:1a:f1:c6:16:87:
                    4b:2e:60:85:41:aa:f0:6f:b3:5d:c6:69:71:fd:d0:
                    e6:66:34:a4:b0:39:a1:86:f0:8d:56:28:35:af:85:
                    58:c4:ae:68:22:1e:6d:ba:3d:f3:97:72:1f:df:9f:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5D:20:74:7D:04:82:40:0C:68:69:81:9A:80:22:ED:43:05:A8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/a2be95b3-1a83-3528-a958-0c7fc1baab34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl

            X509v3 Authority Key Identifier:
                keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bc:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:80:f8:6e:97:cf:88:75:38:bf:4f:65:45:9f:58:a9:dc:
         a9:76:6f:ab:d5:88:93:e8:f7:29:23:41:ad:ee:d9:53:45:9a:
         8e:2d:25:1e:dd:fd:5e:83:d6:d2:c8:b1:d2:f8:75:78:10:11:
         c5:1e:ab:9a:e6:77:85:1c:13:d4:35:02:d3:a5:bb:5b:ca:4d:
         cb:b4:2d:ec:30:12:0e:3c:0c:db:a1:e3:0f:11:3b:44:af:9f:
         3c:c3:3d:55:2b:97:59:2b:7d:b7:d2:15:3c:71:df:2d:f9:b9:
         b8:e0:ee:bf:80:4f:31:9b:ac:ff:48:b7:d6:21:c9:ad:38:d4:
         ee:99:52:1a:6a:5d:41:62:c8:15:cd:d7:85:5a:6c:de:26:3c:
         65:5f:ea:42:2e:a5:2c:f1:3d:a3:ba:46:71:7c:d1:2e:09:d4:
         c7:16:b8:73:7c:fe:34:84:3c:4b:7e:df:26:8e:f5:7e:fc:69:
         18:44:1f:6f:94:f7:70:3c:f3:0f:76:17:e2:fd:c9:9b:ad:a7:
         ec:74:11:8f:24:0f:55:7f:cd:d8:a6:14:4a:15:3a:23:5e:1b:
         04:32:61:75:c3:92:1b:87:9a:1c:57:d7:74:2a:9c:7c:c6:d3:
         7f:bf:b7:e8:e1:14:4b:d6:97:af:77:fc:d0:c3:ec:4b:cf:c0:
         ba:3a:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:10 2026 by rpki-client