Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/11cb1f4a-fc00-346c-82b3-804bc91f7514.roa
File:                     11cb1f4a-fc00-346c-82b3-804bc91f7514.roa (raw, json)
Hash identifier:          FEd++pLzXYC2q6kM80DncM/lAG5FSqq5uiowHrFL65E=
Subject key identifier:   32:3E:3C:54:C2:60:A1:5F:27:81:C5:42:FF:CE:7A:28:C0:16:36:2D
Certificate issuer:       /CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07
Certificate serial:       010D0C9F4328584E815FC17C7ACBAC65AB735300
Authority key identifier: 77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/11cb1f4a-fc00-346c-82b3-804bc91f7514.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     149513
IP address blocks:        2602:f846::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c1:7c:7a:cb:ac:65:ab:73:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=49c15476-088c-4a95-bb3d-0e9714fef105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:aa:e7:0f:91:f2:68:89:e5:a6:7d:9e:6f:af:
                    90:9b:28:49:2b:f5:f6:d5:1f:9e:3a:96:bf:eb:4a:
                    68:1f:c5:9d:0e:38:65:6f:44:9b:46:22:1f:1c:51:
                    c5:0b:46:ef:ec:2f:14:45:31:6f:83:5e:87:56:e3:
                    bd:84:66:2c:d1:c6:15:7b:d2:f1:2e:7d:0f:3b:14:
                    9c:84:81:06:fc:c1:9b:1a:98:d1:3b:b5:b9:d3:db:
                    c6:b7:e1:9a:6a:0f:d4:67:40:bf:2b:b9:0d:98:78:
                    82:6d:b9:18:0a:f7:e2:00:2f:09:6c:dc:b8:c8:7f:
                    ba:b2:0a:e1:b5:4f:23:88:65:27:1d:92:48:1f:9d:
                    68:2a:7d:32:30:0e:9d:fc:f0:ca:fa:03:e2:bc:56:
                    4e:f0:8d:25:c5:01:dc:60:0a:0a:98:29:0e:ff:52:
                    32:8a:7e:11:9c:e6:3b:63:ab:76:58:3a:02:ab:ee:
                    60:f6:a7:7a:8f:73:24:c8:01:89:a2:47:28:24:49:
                    80:fd:92:9d:8a:1c:92:f5:0c:80:a4:c5:c5:9e:ae:
                    0c:0e:ed:d7:1b:d9:b9:52:c8:05:30:e2:c6:24:19:
                    3d:6e:a4:af:8b:a9:e6:3d:d6:b7:91:ef:73:49:bd:
                    75:5d:c9:69:49:40:d6:60:17:87:a6:86:f9:ba:fd:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:3C:54:C2:60:A1:5F:27:81:C5:42:FF:CE:7A:28:C0:16:36:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/11cb1f4a-fc00-346c-82b3-804bc91f7514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.crl

            X509v3 Authority Key Identifier:
                keyid:77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f846::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:65:0a:47:7d:db:5a:d8:8a:82:7f:47:f7:22:a4:bb:f0:67:
         d1:c5:fa:c1:36:60:d1:de:6a:d2:7b:b6:bc:57:ff:07:c9:b8:
         1d:4f:87:92:58:be:f5:77:b0:dd:23:03:62:12:43:02:01:1e:
         44:04:55:47:b0:09:98:8d:02:a9:c2:b8:de:03:08:b1:d3:42:
         3f:ce:73:ad:4e:e0:af:30:7c:46:04:47:4a:ab:b4:94:4c:a8:
         f3:0b:f1:e7:f9:f0:e4:60:5b:07:c4:bc:28:c9:c0:91:f2:2e:
         0a:98:45:43:37:b6:f0:50:68:f4:e4:9f:4d:22:8e:d5:30:05:
         42:02:5c:68:4d:bf:ea:09:06:34:82:78:1a:91:66:84:87:4b:
         fe:8b:80:10:0c:0c:2b:93:fb:d6:83:9c:b6:ed:86:c4:04:e4:
         6f:5d:df:b3:43:50:b4:ba:49:c7:08:9f:62:51:69:71:01:14:
         eb:54:c4:b9:33:d2:5f:53:80:56:f4:49:4d:ea:0a:d2:fe:04:
         c7:82:99:d4:08:95:3c:15:f9:f4:f1:6d:48:c5:01:c4:d7:f5:
         79:57:26:20:5d:85:9a:e7:0c:05:b1:b6:bb:c4:b6:40:fd:f3:
         ce:b8:fc:3b:d0:90:24:c1:a5:4f:a3:84:38:07:d4:fc:35:e2:
         fc:33:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:54 2026 by rpki-client