Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/19423013-4567-37f7-b4a1-a2726c525af1.roa
File:                     19423013-4567-37f7-b4a1-a2726c525af1.roa (raw, json)
Hash identifier:          rrfalwsPoSojWdFsnlHvKUvzhmcYXKaQGYnLGji4nqM=
Subject key identifier:   DD:CA:02:6F:79:4D:15:59:B7:93:06:FF:C3:6B:4B:70:CA:FD:A7:2A
Certificate issuer:       /CN=d3061db8-c3a5-40b9-9ce9-735cf5f78700
Certificate serial:       010D0C9F4328584E6F3A2E5B62FA49279247D880
Authority key identifier: 49:79:B2:EE:B1:D4:B2:49:DC:8B:DF:23:78:07:1D:9C:2D:09:4C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/19423013-4567-37f7-b4a1-a2726c525af1.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     398820
IP address blocks:        2602:fa44::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2e:5b:62:fa:49:27:92:47:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3061db8-c3a5-40b9-9ce9-735cf5f78700
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=027bacef-2441-47c3-bc25-65deb438303b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:a0:70:16:d6:01:c2:93:9d:39:ca:0a:ec:
                    21:e0:df:7c:f2:e9:bd:e7:0f:dc:28:e7:c9:a8:56:
                    6c:e5:39:cc:a8:d1:3d:b3:d4:4b:cc:d8:c6:54:9f:
                    fc:27:e5:56:77:8a:7c:e8:9a:7b:ec:42:aa:aa:d2:
                    c7:83:0c:58:d6:1f:12:47:9b:3d:b5:b8:6d:c8:c9:
                    75:b1:18:e6:30:47:89:b6:df:3e:23:21:8c:d9:fd:
                    60:44:cb:85:92:29:7d:2b:27:86:b3:23:26:d6:a4:
                    b7:05:77:88:b5:ee:43:ad:d4:ca:ed:bb:7f:23:90:
                    73:0d:fa:39:37:ba:97:2e:23:0a:48:7e:d0:65:03:
                    49:54:28:72:ac:1f:f1:53:91:97:df:89:d8:3b:6f:
                    66:19:0e:37:4b:24:a0:54:71:3a:53:5a:cd:36:4e:
                    65:a8:97:20:17:aa:98:0d:04:51:43:4a:c5:6d:7e:
                    34:ac:b1:a6:c5:45:6f:ad:55:ff:18:09:cc:61:21:
                    1d:83:ac:40:c1:ac:db:17:c1:53:f7:39:e0:16:c2:
                    3b:45:89:37:d1:28:e4:41:f2:79:5e:bd:ec:91:fa:
                    f7:a2:d0:eb:81:2b:54:04:6a:06:b2:c0:e4:04:1d:
                    99:ad:ec:95:e1:a1:89:56:94:70:50:73:d4:65:f9:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CA:02:6F:79:4D:15:59:B7:93:06:FF:C3:6B:4B:70:CA:FD:A7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/19423013-4567-37f7-b4a1-a2726c525af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.crl

            X509v3 Authority Key Identifier:
                keyid:49:79:B2:EE:B1:D4:B2:49:DC:8B:DF:23:78:07:1D:9C:2D:09:4C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa44::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:c2:a1:e9:44:d5:0f:fe:ca:b8:b8:8f:f3:be:dc:a8:26:af:
         a2:ec:6f:f3:61:73:3b:f1:19:71:30:0f:b0:de:0e:9e:78:b3:
         f7:25:71:81:be:7e:6f:d0:a2:cc:4e:d2:a3:61:87:7f:09:49:
         70:21:44:8c:58:c1:ef:9a:5f:53:d5:1e:31:44:bd:78:0c:69:
         aa:89:49:f8:d2:78:ea:0e:3a:0b:51:91:8b:70:43:a4:f3:83:
         9d:a9:64:0f:9d:df:67:97:ff:11:74:76:1d:75:5d:24:9e:55:
         47:f2:0b:43:ab:29:74:9d:51:7b:e8:99:5a:26:93:f3:d3:e4:
         3b:f0:81:bd:05:c9:44:30:d5:63:6c:5d:50:da:de:85:30:be:
         e5:99:77:67:fd:a5:3e:cd:ac:81:c0:b5:79:27:9c:d6:4d:11:
         4c:a8:e0:b8:e4:e9:70:e8:4e:bf:c6:51:2e:0d:73:66:30:4f:
         9b:7d:ec:79:58:98:eb:f6:59:cf:d0:06:eb:55:68:8e:c5:f2:
         d4:66:83:26:86:ab:0e:51:e1:58:01:31:cd:21:59:06:86:47:
         ae:e4:a6:22:3e:95:fc:a6:e2:b8:a1:97:b1:b2:40:a1:22:49:
         fd:08:65:7f:19:2c:ca:d6:68:d3:3e:32:e3:97:16:cd:c0:6f:
         33:a1:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:48 2026 by rpki-client