Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/5c03fefe-e4e3-3fe0-9a2b-4642d40b8925.roa
File:                     5c03fefe-e4e3-3fe0-9a2b-4642d40b8925.roa (raw, json)
Hash identifier:          0RFtiG9ftGazyFGcfJCl0FRkVU9AO2CMM7pYLwoxH3w=
Subject key identifier:   BB:D2:D0:AA:25:C3:CC:00:13:57:C4:D4:CE:E0:19:15:B6:61:61:DC
Certificate issuer:       /CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315
Certificate serial:       010D0C9F4328584E86F4E6FB21732A8A056E1C80
Authority key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/5c03fefe-e4e3-3fe0-9a2b-4642d40b8925.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     27284
IP address blocks:        2602:f6f6:1::/48 maxlen: 48
                          2602:f6f6:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e6:fb:21:73:2a:8a:05:6e:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=ca4678ca-75d5-41e1-8008-5433174f8fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:67:d0:ae:f5:a9:0d:6b:11:48:6d:77:cb:
                    c4:f3:f4:a2:c6:93:4d:2e:71:f4:a4:ab:30:6a:26:
                    c8:bc:04:72:21:36:15:1a:bb:3f:16:53:0e:3c:b6:
                    aa:be:f3:4f:af:f5:17:db:0b:ea:93:fa:75:8b:35:
                    61:28:7b:1d:14:eb:c2:c3:f2:fc:b7:af:a1:ac:a2:
                    bd:a1:91:58:70:a0:78:f7:79:07:71:9a:5c:bb:f1:
                    3d:da:ad:a2:82:e7:28:5c:96:50:29:00:5b:b5:1f:
                    26:19:d7:3b:40:1e:0c:37:62:ae:26:de:f2:ac:87:
                    a3:b4:89:12:01:59:fc:f4:f4:8b:d1:e5:9d:35:79:
                    10:81:2a:54:cd:99:cb:ab:4d:22:fc:45:c0:bb:e4:
                    0d:9b:a4:f7:e7:08:e4:ee:a6:8e:68:41:5f:c6:5f:
                    69:8c:3d:f1:11:df:cb:bd:fe:3b:5a:77:a1:2d:b1:
                    ad:08:38:00:64:3e:67:0d:72:cb:f3:ef:c1:43:2f:
                    b3:05:c8:8e:9c:3b:5b:d9:0b:78:85:77:6e:b2:e5:
                    13:ae:5c:18:20:ad:89:83:65:f0:70:b2:38:1e:5c:
                    49:85:43:11:a9:b0:91:fd:55:ab:c5:cf:6b:08:72:
                    42:bf:ae:d8:d0:5c:36:80:1d:f9:89:ad:39:8e:fb:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D2:D0:AA:25:C3:CC:00:13:57:C4:D4:CE:E0:19:15:B6:61:61:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/5c03fefe-e4e3-3fe0-9a2b-4642d40b8925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f6:1::-2602:f6f6:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:45:84:f9:0a:ef:1b:fa:f3:a8:3d:1c:92:20:d1:bd:c0:
         31:b5:26:94:56:23:d5:06:cd:d0:a1:d3:7c:b1:6a:ee:5e:af:
         84:75:7d:0c:84:74:41:ef:7e:fb:91:b7:51:44:6d:2c:a9:93:
         a9:7d:4b:d4:68:0a:5d:7e:02:3b:11:67:77:27:18:9b:b5:65:
         9a:06:28:bb:7c:78:49:0a:6e:07:4e:f6:23:ca:73:01:8f:39:
         ec:f1:27:1c:ac:15:57:33:29:3c:3e:74:61:b7:fc:25:cb:55:
         57:35:36:6f:90:9d:e4:e7:79:3c:40:04:ef:63:82:ab:46:96:
         c1:48:72:7c:9f:19:ae:64:8d:04:3e:53:a5:70:6f:21:16:1f:
         25:51:33:a4:ed:17:a4:15:d6:b4:97:e7:1a:c4:14:92:09:a7:
         f6:2d:94:58:ea:28:cb:9c:ed:92:94:3c:bf:99:d8:e9:8f:f7:
         52:89:b5:e4:dd:f6:48:09:14:48:a1:41:ae:4a:8a:78:6e:b6:
         62:39:27:60:a4:9e:1b:78:86:c4:f9:35:fd:e5:b5:47:f8:da:
         ed:29:08:6c:33:70:ad:58:b0:11:83:78:80:6b:8e:40:ce:8c:
         f1:e8:3c:e4:50:ab:05:cf:46:c3:ab:b4:ea:ae:3b:6f:4d:f9:
         0c:23:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:28 2026 by rpki-client