Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886/a7b5b0cc-6e77-30b9-ae8c-46bd27f22703.roa
File:                     a7b5b0cc-6e77-30b9-ae8c-46bd27f22703.roa (raw, json)
Hash identifier:          bvQqHSyBsp4Ym6faqE0DE2rp5uYLOEq5QLX4oKMKYyQ=
Subject key identifier:   81:CB:78:D3:3F:FE:E7:D2:71:19:C4:DC:19:26:C3:99:24:1B:BC:A5
Certificate issuer:       /CN=e01efe77-25a6-43d8-9d4c-8e897d902886
Certificate serial:       010D0C9F4328584E85EA54B0780E888442B4FFB0
Authority key identifier: A4:05:1D:97:86:40:B8:16:2E:FF:34:7C:41:A8:CC:2D:14:C8:DE:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886/a7b5b0cc-6e77-30b9-ae8c-46bd27f22703.roa
Signing time:             Fri 17 Jul 2026 00:03:10 +0000
ROA not before:           Fri 17 Jul 2026 00:03:10 +0000
ROA not after:            Thu 15 Oct 2026 00:03:10 +0000
asID:                     6517
IP address blocks:        2602:f348::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886/e01efe77-25a6-43d8-9d4c-8e897d902886.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886/e01efe77-25a6-43d8-9d4c-8e897d902886.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:ea:54:b0:78:0e:88:84:42:b4:ff:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01efe77-25a6-43d8-9d4c-8e897d902886
        Validity
            Not Before: Jul 17 00:03:10 2026 GMT
            Not After : Oct 15 00:03:10 2026 GMT
        Subject: CN=8458b2db-7761-4c2b-bbdf-678a2ea7eb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:46:cb:ae:93:f7:97:61:7c:6b:de:d5:48:
                    0e:8d:c9:9d:14:10:c1:ff:65:1b:0b:16:37:85:45:
                    e7:c9:1f:a1:55:d7:b3:f2:e4:94:22:c5:9d:3b:ef:
                    d2:dc:c6:33:b8:d9:ee:6f:bd:ce:a9:7e:ca:38:e5:
                    81:e5:73:fc:b3:b8:2b:a7:68:7f:81:6d:52:44:e6:
                    cb:c9:0d:6f:76:89:65:81:1a:4f:57:7d:44:3d:bb:
                    70:1d:81:09:fd:80:2a:ba:11:9c:89:e4:0d:48:80:
                    5e:98:d5:39:42:d6:bf:ea:8d:5f:56:64:95:09:1a:
                    bd:1b:8d:d1:99:61:bd:79:7f:e0:9c:10:ec:59:7d:
                    6d:16:2a:f4:bb:d9:8e:fb:80:be:d5:f7:9b:5f:df:
                    34:20:63:d8:f1:96:45:da:83:8b:31:4b:05:52:03:
                    40:73:8d:d3:e2:38:9e:92:9d:03:1c:ad:82:c0:38:
                    2a:3f:24:2c:29:57:2b:04:85:81:0a:95:5d:6e:5c:
                    40:d2:c5:3a:25:bd:a1:67:89:87:e0:67:d4:53:0c:
                    89:c2:c3:b1:41:ca:d0:17:48:7b:4f:3e:eb:13:4a:
                    89:bc:3e:85:f6:cb:8d:48:7b:c3:8a:1c:92:6f:62:
                    67:4c:cc:d0:36:64:9d:ec:d1:11:e6:47:0e:aa:da:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CB:78:D3:3F:FE:E7:D2:71:19:C4:DC:19:26:C3:99:24:1B:BC:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886/a7b5b0cc-6e77-30b9-ae8c-46bd27f22703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886/e01efe77-25a6-43d8-9d4c-8e897d902886.crl

            X509v3 Authority Key Identifier:
                keyid:A4:05:1D:97:86:40:B8:16:2E:FF:34:7C:41:A8:CC:2D:14:C8:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e01efe77-25a6-43d8-9d4c-8e897d902886.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f348::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:68:ab:53:72:3e:f8:55:b5:09:df:cb:1a:dd:3e:2a:18:
         e6:b3:55:95:b8:67:64:bb:fe:e0:e4:e2:5d:47:09:7e:4c:3a:
         c3:8f:fb:93:a7:9c:9e:3f:5c:8e:79:d9:65:47:67:e2:64:51:
         ea:c3:ff:2e:6c:1e:0f:dd:a2:df:1d:96:e6:e3:50:82:48:22:
         b0:e3:34:ff:00:8e:15:26:7d:a9:fd:2b:f1:a0:6d:69:ea:5f:
         7a:13:a7:0b:02:cd:b2:e3:91:19:e6:a5:94:6d:a9:51:35:d5:
         0a:5f:23:ca:d1:fa:54:63:f5:b6:dd:fb:b0:6f:c6:87:18:dc:
         13:9c:5f:65:04:4b:28:a7:a2:61:22:71:0d:49:db:d0:c3:9a:
         c8:19:64:d2:12:a9:cd:3c:60:0d:d9:4b:54:b1:b7:b0:6d:eb:
         0a:bd:89:e3:c4:4f:07:e6:df:ba:fe:37:be:37:55:89:fb:9e:
         1c:4a:68:54:1d:b5:26:4e:b8:80:aa:95:7f:0b:fa:19:11:50:
         b9:c5:55:7a:b3:52:c3:ac:68:35:a4:bf:75:96:e3:32:81:2e:
         ba:a8:19:04:de:1d:0e:b9:eb:96:06:17:0a:82:9a:c4:38:11:
         f2:e7:9e:19:8a:15:11:81:16:4f:b1:41:1d:08:0b:09:ac:7e:
         e0:aa:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:50 2026 by rpki-client