Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa
File:                     cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa (raw, json)
Hash identifier:          lmAnUuPyAyQJIoyO6JKff1Iwm8g/8WNIDSki4sm5F2E=
Subject key identifier:   DD:C9:62:5B:5C:1E:6B:DA:CA:72:05:DC:9D:16:20:3C:B4:A3:21:1C
Certificate issuer:       /CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
Certificate serial:       010D0C9F4328584E736A16E95061F5AA4E918EC0
Authority key identifier: F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     216030
IP address blocks:        2602:f779::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:16:e9:50:61:f5:aa:4e:91:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f477ee-4cd7-4d8f-9517-9cf25b239fcd
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=cfefcaa6-319d-43cd-bf7d-425f52122b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:33:61:57:67:04:7f:cc:41:dc:22:ca:b3:
                    f2:bd:6f:3c:43:88:f4:eb:94:be:9d:08:1d:a5:dd:
                    c0:65:e0:ca:af:4e:2b:75:31:9b:91:c8:23:30:e4:
                    1f:47:0e:fc:91:b1:58:a7:80:f9:58:ec:5e:1c:02:
                    c8:ae:6a:6b:76:95:b6:b2:22:b7:90:87:5e:62:c2:
                    84:bb:76:3b:9d:1e:c0:82:d0:2b:fc:41:e8:7b:2f:
                    0b:de:bf:63:f7:ce:64:b4:b2:1e:b8:e0:bc:25:ab:
                    94:e2:44:81:a7:27:18:a5:92:a2:88:ab:50:99:15:
                    1c:49:2d:c3:7d:85:41:d2:95:10:30:62:fe:9e:40:
                    8d:16:5f:ad:2d:af:67:ca:36:7a:e1:89:d1:41:8a:
                    60:04:83:ef:06:ec:2b:8e:2f:b1:6b:ef:83:1c:76:
                    a9:98:08:31:d5:96:3d:1a:a6:9a:ef:5f:a3:a0:a5:
                    26:53:86:46:e9:24:18:d9:43:16:3b:66:dd:77:4c:
                    6b:5e:69:ed:e8:f3:52:b2:3a:54:84:bc:b9:dd:1a:
                    6d:03:18:e5:dd:a5:6a:97:1b:0c:ea:17:34:10:c2:
                    6d:41:a8:42:2c:a7:a1:24:be:16:33:b5:d5:6b:0c:
                    10:44:21:4c:61:4f:eb:49:db:2e:63:6d:aa:32:ea:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C9:62:5B:5C:1E:6B:DA:CA:72:05:DC:9D:16:20:3C:B4:A3:21:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/cb6367cb-b087-3766-a2ea-7feb91eb3c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.crl

            X509v3 Authority Key Identifier:
                keyid:F7:CF:09:69:9F:38:C6:D0:79:08:5A:A8:B5:0B:36:69:CE:0E:BE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75f477ee-4cd7-4d8f-9517-9cf25b239fcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f779::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:75:96:16:30:0f:ac:32:e5:da:10:77:e2:94:ba:36:ea:f1:
         40:16:32:79:98:dc:27:63:fa:90:44:38:b5:ee:aa:c5:f3:f7:
         97:2a:2a:97:ee:21:60:d2:2c:ba:b5:41:6c:96:fc:5d:cd:5f:
         cc:fe:93:2e:ba:6b:9c:01:15:d0:74:d1:e8:9e:9a:57:11:c7:
         a6:18:05:9b:e1:10:31:fa:3d:8a:4e:32:3b:77:0b:ad:c9:f8:
         a4:2d:c1:fc:4d:64:4b:00:ce:2d:e0:b3:a9:61:ac:32:fa:40:
         ed:2a:9a:e5:13:45:31:f3:be:3b:70:c2:70:aa:6c:ab:a7:da:
         eb:28:b3:a8:30:2f:c3:40:ad:73:97:a3:80:0f:af:3a:3d:25:
         4c:d5:a8:e2:8f:cf:08:6f:9d:5c:8b:c3:28:f9:19:c4:28:c5:
         84:1f:09:d4:df:66:2d:13:3c:6c:34:6c:9d:85:82:a6:7d:6f:
         ce:ba:ba:05:3f:e0:d0:a5:df:59:11:d9:ad:88:f0:f3:bb:dd:
         55:3e:34:23:d6:a4:2a:7b:c4:fb:8a:16:30:80:de:ca:33:a5:
         f4:a8:de:b7:3f:87:06:a5:cc:a8:5f:8e:d9:da:f5:56:50:48:
         bf:4f:8c:83:78:38:fa:72:73:03:b6:94:f0:c8:0c:78:ab:c5:
         a5:e9:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:12 2026 by rpki-client