Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa
File:                     0952e798-9d39-3263-bdb3-03a59c0c85e4.roa (raw, json)
Hash identifier:          5hWwoGjxj7weD/k9xGeHD+c+n3knN1P0rYu9opgPBWk=
Subject key identifier:   29:05:BB:0C:07:0C:27:10:AA:03:63:E6:2A:7D:14:C4:A8:88:69:AC
Certificate issuer:       /CN=48c4aba6-5e67-450a-b4a4-647523380d01
Certificate serial:       010D0C9F4328584E6C6F766F7CAA32DEF75DA240
Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     14618
IP address blocks:        2602:f5df::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:76:6f:7c:aa:32:de:f7:5d:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=5bac5fdd-c30b-4d39-8c8b-24feb39666c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:9b:bb:3e:85:28:cd:a3:9d:fd:01:f2:94:
                    13:9c:c0:25:87:fd:b6:81:a4:d3:95:70:34:73:ff:
                    07:d8:42:f2:4f:4c:70:a2:7c:ee:43:d1:78:17:34:
                    92:f0:12:bd:2a:a6:71:8c:67:45:27:70:0e:fd:4d:
                    0d:01:46:cf:b3:19:87:df:ea:c5:85:3d:b1:f4:52:
                    bb:ae:20:8a:6f:6b:52:9f:40:ee:cb:0a:40:7c:20:
                    8e:52:28:33:51:80:e4:86:6f:78:6c:fd:67:f0:5e:
                    30:8c:2b:2a:69:11:7b:26:7e:37:a5:a3:d7:85:a3:
                    70:b9:60:6c:19:d5:8d:88:9c:41:27:64:a6:b6:0b:
                    94:db:bc:f4:fd:64:a6:89:b3:17:88:9d:79:27:9f:
                    81:8d:37:72:cc:c7:67:37:ce:e9:fa:87:b0:48:f6:
                    45:7e:f4:37:40:f6:8c:e9:6f:72:40:5a:43:6c:aa:
                    f3:29:d1:a0:da:6f:ec:46:cc:a3:d1:f0:63:fd:ac:
                    af:29:cf:93:fe:9f:f2:5d:9f:46:e2:43:b7:0b:10:
                    e5:6d:fa:db:8d:a7:40:75:59:32:ee:c3:54:4f:0a:
                    50:b2:dc:47:85:b6:75:b0:87:b2:2d:5e:e1:3c:16:
                    20:e2:ea:1c:9a:e6:89:b2:d1:5f:61:85:ff:58:4b:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:05:BB:0C:07:0C:27:10:AA:03:63:E6:2A:7D:14:C4:A8:88:69:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:0d:ef:45:38:62:0e:1e:0e:10:1d:1a:21:9d:55:c2:11:
         70:9c:dd:24:95:3d:23:51:a3:05:a1:17:63:28:90:92:d4:77:
         fa:7b:fe:0d:c1:e4:cd:e2:c1:0e:cd:f3:6a:87:17:0b:8d:f6:
         21:ba:94:1e:c0:53:a7:4c:65:f2:5d:69:fb:d0:e5:44:af:42:
         34:34:1d:b2:7e:a1:5b:a0:c6:31:e3:2f:12:9e:5b:07:b6:de:
         a5:d1:ab:fd:94:e2:5b:cf:a8:52:23:93:cf:82:4d:c1:c3:3a:
         ee:b2:2d:6c:2b:20:00:4f:b7:13:11:77:f6:b4:75:e3:1e:64:
         01:ef:f2:c9:62:ed:e3:8f:45:ec:09:a1:0a:d2:da:5f:de:6d:
         fd:56:7b:ff:7f:38:e9:da:2b:33:0b:95:12:e5:de:3b:b7:0c:
         02:7c:a5:39:5f:71:a5:f2:26:65:09:3d:cb:f5:c7:c8:f0:3b:
         2a:7e:99:1e:5d:27:96:1a:b5:c4:ff:e9:85:fd:c0:7e:43:44:
         83:8f:c0:fa:3e:51:01:97:99:7f:2b:0e:93:35:e1:22:ff:b2:
         98:6f:fe:0b:33:36:98:33:f1:d3:7a:28:de:16:2b:06:69:76:
         ea:e9:fb:b2:48:a3:f8:e1:16:a6:d1:c4:2e:90:df:b3:b3:e8:
         a1:d6:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:57:41 2026 by rpki-client