Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
File:                     0f44003e-48cb-3fe5-97c3-09015e401420.roa (raw, json)
Hash identifier:          HVrq4J3SYh6NUTZeJBH8ez6a3QVGUnFF0r03/LL4BLY=
Subject key identifier:   BF:51:62:D4:98:9A:0B:83:81:EB:B8:B6:A9:F4:B2:AF:99:78:09:62
Certificate issuer:       /CN=ce78c233-fea8-412e-b7ae-1080a457c01e
Certificate serial:       010D0C9F4328584E6DD4C64A3E7CBB7FCF062300
Authority key identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2602:f669::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c6:4a:3e:7c:bb:7f:cf:06:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce78c233-fea8-412e-b7ae-1080a457c01e
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=36192719-b687-4282-b0f8-02fbf7954bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:6d:90:12:1e:16:4b:11:a7:93:f3:ee:d8:
                    60:08:94:c2:e3:fa:b8:ab:45:c6:bb:2f:b6:7b:94:
                    7f:8d:16:8d:ce:d3:cb:fd:91:f7:f6:a0:50:19:17:
                    fa:48:21:1a:10:2d:a4:4c:27:95:60:9b:d0:0f:bc:
                    98:b9:49:b0:c9:c7:00:0c:7e:05:a0:05:fe:de:8f:
                    8b:01:16:43:9a:a2:7b:b3:a8:e4:ff:39:b2:8b:e0:
                    59:ce:07:9f:04:a4:a2:ec:43:ce:ec:62:20:e1:66:
                    22:23:2e:aa:7d:ea:be:db:47:5c:cf:25:06:b3:1c:
                    f1:66:2a:a3:e4:80:69:1a:e3:01:5f:e6:b4:56:53:
                    08:4b:9f:f8:14:fc:d5:29:b0:8a:6f:2b:26:ca:73:
                    0d:ef:de:f7:46:d6:49:60:27:99:c2:87:08:22:9e:
                    b8:d1:09:94:b0:f3:1d:c2:bf:fd:d0:40:b8:78:72:
                    0f:5e:b6:b5:c0:29:d0:cc:24:29:5c:14:ab:79:77:
                    29:3d:69:8f:de:03:37:d8:16:5c:92:7e:db:a0:ca:
                    77:2b:4a:ce:76:8f:4c:94:9e:29:99:e9:f8:6a:c7:
                    10:b7:17:7d:15:57:53:b8:1c:c6:7a:f4:d0:39:cb:
                    c5:33:73:98:d7:6b:76:3d:86:61:74:04:da:95:fa:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:51:62:D4:98:9A:0B:83:81:EB:B8:B6:A9:F4:B2:AF:99:78:09:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl

            X509v3 Authority Key Identifier:
                keyid:4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f669::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:42:ff:96:7f:b0:22:a1:9a:0b:14:6e:af:6d:9e:10:4e:1c:
         08:37:79:22:cf:20:b2:c8:16:ea:6e:f9:8b:e0:0e:1a:10:47:
         82:64:21:f8:b9:ce:08:c2:2c:6f:2f:84:e6:f8:d9:77:e1:f4:
         f5:cf:a0:bd:65:80:91:3f:03:3c:a0:dc:49:92:34:35:6c:e0:
         3a:c1:34:de:bb:ea:97:49:29:84:fb:33:72:de:18:80:8f:41:
         ba:82:c2:99:9c:0e:b0:64:58:7e:3d:6b:84:36:df:30:2f:2b:
         05:5a:37:d1:18:99:a7:24:6f:d0:31:84:13:83:f8:9e:8d:5b:
         85:c3:0b:8f:71:11:a7:f8:12:e9:6a:f7:7f:cd:dd:a0:6c:43:
         a4:f2:5a:a3:43:04:f9:55:4e:59:8f:e5:8f:f1:7b:db:9b:e3:
         70:4a:d4:e6:cf:c5:09:09:9b:99:d0:55:08:fe:d8:f6:86:de:
         a9:b1:f0:6c:3e:0d:d0:41:73:49:dd:ef:c9:d2:e4:10:15:47:
         c8:a1:62:19:77:c3:a5:93:b5:b5:3d:b2:1b:47:90:0d:34:d0:
         c7:56:7c:03:32:04:25:8e:07:a2:81:20:0d:3c:c9:b0:6a:d3:
         77:eb:3b:54:bb:39:b4:96:7f:4a:4f:4e:0e:e3:d8:e0:42:7e:
         86:cf:a2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:39 2026 by rpki-client