Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/11db594d-b0a1-31d6-937f-6786d709a0c3.roa
File:                     11db594d-b0a1-31d6-937f-6786d709a0c3.roa (raw, json)
Hash identifier:          lhUQUON3id7pzQz8rgEawdEiik1NMNOZTbHx67PUy/U=
Subject key identifier:   F5:BD:05:DA:E9:05:46:14:08:65:31:53:2F:37:A4:BC:27:50:DB:7C
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584E9B9828504F1B642620A9E680
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/11db594d-b0a1-31d6-937f-6786d709a0c3.roa
Signing time:             Fri 24 Jul 2026 18:25:23 +0000
ROA not before:           Fri 24 Jul 2026 18:25:23 +0000
ROA not after:            Thu 22 Oct 2026 18:25:23 +0000
asID:                     40934
IP address blocks:        2602:fc4e:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:98:28:50:4f:1b:64:26:20:a9:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul 24 18:25:23 2026 GMT
            Not After : Oct 22 18:25:23 2026 GMT
        Subject: CN=3f9fe989-1538-4c07-9150-d773cff27335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:36:9f:a6:78:86:57:86:36:4b:21:ba:9e:c3:
                    39:30:2a:d5:16:67:01:05:e5:23:5a:26:9a:0a:5e:
                    cd:af:de:4b:56:96:e7:8e:b2:2f:ae:ee:23:5d:c0:
                    c7:30:1e:0b:39:a5:a5:1d:c5:59:ad:2f:fd:4d:82:
                    2a:3e:d9:8d:26:8e:19:ed:f6:98:a9:ea:05:18:e2:
                    40:a0:5b:37:31:1f:b1:d5:9b:14:3c:89:3d:27:6b:
                    01:8c:c8:e3:d0:fc:ba:5e:e1:29:00:48:8b:fd:d6:
                    5b:42:91:1b:2a:dd:1c:ad:7e:6a:c3:db:33:0c:c1:
                    a1:33:55:ca:b0:0e:4d:fb:fe:f3:68:87:7b:83:d9:
                    6e:08:89:84:29:b5:08:0e:fb:49:8c:41:78:2b:65:
                    bf:6b:6e:0c:3d:2f:c6:24:c0:65:7d:64:a0:81:0b:
                    a2:1d:c6:c5:df:96:41:4b:d9:7d:2f:b7:97:3d:ca:
                    fd:4a:eb:38:bd:24:43:c0:bd:c6:a6:1f:fe:b0:37:
                    80:5f:09:e3:30:94:cf:d2:fe:26:36:0b:25:0f:71:
                    e2:5d:11:73:d0:83:52:f7:c8:5c:93:d0:03:6b:06:
                    39:d5:62:a8:fe:96:1e:d6:ea:ba:fb:e9:38:38:38:
                    76:e9:6a:e2:e7:92:7a:06:7e:5c:c2:8b:42:a3:24:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:05:DA:E9:05:46:14:08:65:31:53:2F:37:A4:BC:27:50:DB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/11db594d-b0a1-31d6-937f-6786d709a0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc4e:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b1:e7:5e:9b:f4:43:da:ec:93:cf:50:ec:ba:95:a6:3e:d3:
         66:45:f0:13:1c:a2:d6:1c:22:f4:6a:68:44:4e:2d:58:86:04:
         4e:fb:67:3a:1d:22:4c:6e:30:93:d7:87:4e:9e:11:15:f4:65:
         c7:44:f8:57:fa:5c:1b:c7:a7:34:d9:c5:c6:18:4e:cc:8d:9f:
         24:e7:3d:92:63:76:a3:2d:b8:4b:43:c9:59:20:5d:2e:db:2a:
         64:49:f5:98:d8:62:d5:b8:dc:bd:8e:e4:11:f9:e6:56:fa:d7:
         ce:00:1d:32:fb:36:7b:9a:41:24:07:2a:78:57:94:64:3d:9c:
         17:1e:63:57:48:a6:bd:ad:95:75:32:15:a8:27:00:7f:15:7d:
         c5:90:26:7f:32:a5:42:e3:99:3d:44:b4:c2:cb:b6:10:e4:66:
         e7:c3:ae:43:ce:93:ed:86:3b:c4:bf:b9:7a:94:68:5d:15:39:
         5f:fb:2b:83:ae:94:0d:91:66:85:4f:11:93:82:05:9a:45:ad:
         21:eb:6d:99:6b:59:99:a5:18:93:5b:1e:43:c3:a1:bc:ad:b2:
         1c:8a:60:cd:bb:7c:33:cc:92:fa:ad:ec:c2:97:8b:ef:6d:75:
         59:b9:9f:cb:8c:da:e5:54:95:fa:64:26:21:6e:9a:2f:2f:79:
         95:bb:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 00:14:57 2026 by rpki-client