Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
File:                     df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa (raw, json)
Hash identifier:          Hcdhs1HXBBoSIwBMA6RSP2/bU8e+8hfrciTxrgD3kTs=
Subject key identifier:   A1:C6:97:0D:B8:2F:8E:42:27:E2:87:01:44:03:2A:B8:F1:C2:D1:2D
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584E5D14A651D30CED357D1981CC
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     0
IP address blocks:        2602:fd10:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a6:51:d3:0c:ed:35:7d:19:81:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=db217cef-870c-48be-a7ea-2b3cf415200e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:d9:bc:a5:62:9b:15:40:16:fb:9c:ae:43:
                    2d:d6:8f:64:62:5e:38:42:6e:ae:59:c8:6e:cf:1c:
                    62:9f:44:d2:ff:20:62:c4:d1:4f:ae:fc:ce:4a:07:
                    c1:ff:cb:db:22:cc:b4:fe:c9:16:73:3c:65:64:8d:
                    76:98:fe:86:b6:6c:91:57:77:53:ff:26:fb:d7:60:
                    3e:6c:a1:13:df:72:09:af:9a:88:ab:47:39:a0:b0:
                    79:09:75:b0:92:b0:1a:bb:f1:19:98:a1:f1:6e:8d:
                    7e:fe:92:9d:be:1c:87:25:74:8e:71:41:d8:76:39:
                    63:07:26:24:74:f1:3a:09:49:d0:33:b1:2e:bc:3c:
                    bb:c2:f6:e1:0f:6f:a2:8f:a6:46:ba:aa:95:81:6d:
                    04:f9:a2:c5:83:8c:3d:ba:e3:de:00:7f:3c:6a:67:
                    5b:9d:a5:58:dc:80:f1:84:21:55:e9:98:cc:30:67:
                    9f:ad:00:c2:e3:2d:1a:46:59:d9:4b:29:68:59:59:
                    a3:ef:41:50:f2:4a:fa:b2:c4:4c:2a:ef:c2:6a:5c:
                    ac:22:21:79:bf:d2:31:fd:ae:80:12:db:a4:97:39:
                    4a:76:ed:96:d9:08:b1:55:60:d6:ba:cc:12:22:e0:
                    9a:0a:67:e8:16:47:28:ab:fc:e2:6f:bb:41:e9:96:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:97:0D:B8:2F:8E:42:27:E2:87:01:44:03:2A:B8:F1:C2:D1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0b:33:cf:4b:95:5b:a9:25:47:bf:35:62:91:8d:e6:e6:ae:
         9c:d5:17:af:c0:a2:19:81:9f:d2:76:ec:ae:ed:fd:51:48:b4:
         0a:3c:9c:3e:bc:df:e4:fb:7f:25:26:4f:86:5f:fe:69:b3:35:
         dd:f3:82:7a:00:7b:a9:d8:44:cb:23:8c:a9:c7:d4:99:26:8d:
         ec:24:3a:d7:1d:f0:e7:96:72:98:da:21:65:8e:71:6a:64:ab:
         81:00:0a:55:ab:ee:46:2f:9f:b4:bf:83:d4:6f:60:bd:e8:2f:
         ab:2b:e9:5a:61:1b:c3:09:d0:bf:12:6f:bc:5a:50:39:55:1b:
         f7:c0:eb:55:1b:d8:d1:47:f1:16:9d:87:1b:e4:2c:a3:e7:01:
         d6:3b:ca:f8:55:7c:43:eb:85:e1:41:fb:92:bf:90:e9:d0:57:
         5d:c5:e5:1a:8a:f2:94:9c:48:15:70:5f:d1:3b:a6:dd:9d:3d:
         1a:0c:19:0d:e6:2e:71:15:72:76:24:92:55:c0:63:57:3d:8e:
         13:e2:72:c2:c7:fa:ad:8b:d7:e6:75:11:74:26:e3:d7:4f:ec:
         ec:03:83:0c:ae:d4:a2:1f:db:f8:74:28:89:41:6c:a6:97:03:
         53:17:cb:8c:b5:6f:75:18:cf:0d:c1:28:48:03:b6:f0:53:47:
         ca:65:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:48:53 2026 by rpki-client