Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3ab2e189-6bf7-3acd-97f1-82c76e90a03d.roa
File:                     3ab2e189-6bf7-3acd-97f1-82c76e90a03d.roa (raw, json)
Hash identifier:          fiu6SyEq1o7gGm6rYUrpQMvjOFbgBToH4acJ6dX4f/I=
Subject key identifier:   A4:33:9F:BD:22:D5:34:62:D1:A2:34:5B:1C:9E:65:DC:82:8F:F2:37
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584E4E78677778A66243FF671784
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3ab2e189-6bf7-3acd-97f1-82c76e90a03d.roa
Signing time:             Sat 27 Jun 2026 03:24:10 +0000
ROA not before:           Sat 27 Jun 2026 03:24:10 +0000
ROA not after:            Fri 25 Sep 2026 03:24:10 +0000
asID:                     22295
IP address blocks:        2602:fb54:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4e:78:67:77:78:a6:62:43:ff:67:17:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jun 27 03:24:10 2026 GMT
            Not After : Sep 25 03:24:10 2026 GMT
        Subject: CN=8decb0f7-d121-43ee-9753-611d2d275cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:85:8a:a0:b6:42:9d:e7:2d:7c:ca:ae:17:
                    af:69:ec:55:9f:ba:56:f3:dc:7e:30:fd:1c:2f:1e:
                    1e:b7:e0:11:f1:2e:1f:19:ca:0d:d3:fd:b2:9d:12:
                    c5:40:3f:fe:b0:b4:e9:99:c0:c4:80:62:aa:a6:be:
                    22:52:95:d2:bb:3b:18:ce:01:10:ae:99:c5:d7:13:
                    ab:3f:08:3a:a1:65:6a:58:59:1d:7e:bb:d6:b6:09:
                    64:3d:6b:c5:4d:c1:5f:62:92:cb:19:77:2f:76:a6:
                    44:cc:39:cb:84:4f:d4:de:a9:f5:49:aa:b2:07:29:
                    ba:83:cd:7c:51:98:98:65:cd:57:56:82:1f:4f:0c:
                    06:bd:3c:61:28:76:26:00:79:94:99:7c:80:80:a2:
                    a1:ae:f6:25:1b:94:ad:07:80:bb:d3:c9:99:c1:2e:
                    7e:99:82:2d:08:52:54:9f:b0:7d:50:71:9a:50:61:
                    a1:83:fd:b1:bb:57:42:8e:94:e9:95:d1:16:c9:09:
                    50:54:e9:f5:5d:a3:ce:bd:e7:6b:f4:5e:53:95:e6:
                    b1:12:1d:5f:71:50:5c:b8:c4:fa:af:a7:33:0a:bf:
                    47:58:27:92:d5:bc:b5:ca:23:9d:5b:db:fa:e9:39:
                    be:48:7c:b5:1a:89:6f:41:2b:f5:80:21:08:6e:9f:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:9F:BD:22:D5:34:62:D1:A2:34:5B:1C:9E:65:DC:82:8F:F2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3ab2e189-6bf7-3acd-97f1-82c76e90a03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f3:b2:b9:47:a1:bb:3e:74:a4:61:69:83:c4:e0:d3:17:6f:
         fc:30:f2:bb:65:19:b4:82:e0:3f:7e:bf:0a:60:fc:b5:d8:2c:
         33:ce:07:cf:60:8d:e9:ca:e2:59:f6:62:f3:f8:33:f6:67:00:
         0d:03:21:85:99:6b:8e:5e:2b:a4:c0:80:ba:4c:f3:01:a6:79:
         db:1b:09:84:32:47:63:f0:86:c1:bf:5e:74:74:b8:5a:9f:cd:
         ee:2b:2c:3b:f2:f2:84:f4:f2:2e:36:ad:d8:7d:96:70:3e:8c:
         c5:f7:e2:97:3c:f5:95:26:ff:f5:a2:44:91:66:7e:28:37:8f:
         38:f8:ef:a7:bf:e2:5d:d1:74:54:db:d7:e8:9e:70:a4:9f:92:
         18:7b:59:a6:35:3a:ec:16:b3:76:0d:85:cf:3f:db:05:8a:e0:
         44:98:1e:f7:20:44:c8:57:08:47:f1:b5:44:9e:fb:ae:6f:dc:
         14:70:9c:2f:ea:6a:97:36:39:0f:80:c0:86:5d:e8:c1:3f:87:
         67:d9:50:7a:dc:79:e2:44:1d:05:b5:1a:0c:3f:70:25:0e:ef:
         1a:6e:e0:07:19:9a:a2:85:f8:68:91:95:e2:8e:a8:e5:b2:2e:
         e0:ac:5c:94:93:ef:12:32:30:0a:73:aa:a1:13:dc:fe:cd:0e:
         54:01:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 13:10:38 2026 by rpki-client