Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/fb533b30-7d52-3fc2-9865-814bc4c72baf.roa
File:                     fb533b30-7d52-3fc2-9865-814bc4c72baf.roa (raw, json)
Hash identifier:          DbVuETdXm0UuvK3ynu9qjIsqwiI0dv74KxjuL+4Kfrc=
Subject key identifier:   0C:54:A2:07:E7:5F:96:4C:E7:7D:D2:EB:84:68:0C:B9:71:B6:29:9D
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584EB2B1BA6A793EEC59706F2580
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/fb533b30-7d52-3fc2-9865-814bc4c72baf.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     22295
IP address blocks:        2602:fb54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ba:6a:79:3e:ec:59:70:6f:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=a7173be2-aea8-4d2a-8f4d-1a7d9e46d32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:3e:10:55:fc:ff:20:11:c1:30:a0:bf:b2:
                    41:70:b0:30:0a:74:0a:40:66:b0:85:90:af:df:eb:
                    5a:1b:60:c5:c8:2a:71:40:c6:c6:12:be:1f:e5:a2:
                    db:de:0f:6f:5c:87:80:0c:63:8f:be:c1:f4:8f:b7:
                    75:74:27:8e:d7:3f:37:08:bb:18:b8:10:84:99:2d:
                    d3:25:15:3c:96:7d:cf:26:63:82:ce:ac:81:7e:0c:
                    a7:7e:29:48:25:82:fb:d9:44:41:88:f7:ab:d8:3d:
                    de:e5:bd:23:54:83:a1:94:3e:6e:fa:35:82:21:46:
                    c1:1a:b2:b1:ec:da:07:08:7d:86:e2:2f:47:06:9c:
                    84:82:07:70:2a:54:83:8f:3a:1f:db:c9:c9:c7:0b:
                    07:c9:0b:8b:25:6a:28:71:4d:da:2a:7d:94:3d:f1:
                    ac:22:dc:69:a5:c7:8c:0b:73:b3:aa:48:b6:d1:ef:
                    e2:d2:85:af:6d:c3:77:46:a2:e8:24:3d:14:86:33:
                    50:1d:4a:d4:49:c0:fe:7f:c4:af:25:57:12:e4:fd:
                    39:05:52:42:5b:33:71:86:71:19:5c:91:8b:34:d0:
                    8a:3a:f6:8e:56:d1:29:47:74:51:71:df:ec:c2:7c:
                    84:54:23:4f:37:2b:c4:09:c6:5c:80:23:17:4c:53:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:54:A2:07:E7:5F:96:4C:E7:7D:D2:EB:84:68:0C:B9:71:B6:29:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/fb533b30-7d52-3fc2-9865-814bc4c72baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:71:1d:5c:d2:00:79:0b:89:3f:82:d4:93:f4:b2:ad:6e:3b:
         df:e5:b0:b6:ec:f8:d1:dd:4c:37:75:c6:14:94:56:90:90:24:
         6a:04:ad:21:13:ba:b0:f0:61:33:3e:ab:5f:8d:c1:82:6a:dc:
         d8:02:96:f1:72:77:95:53:60:89:bb:c1:38:b4:26:8b:f8:e4:
         e2:f4:b4:0f:91:07:6e:08:ad:94:a6:b4:33:50:84:cf:a9:d5:
         55:74:87:45:df:11:d7:8b:4f:43:62:1b:10:6c:87:ee:33:a7:
         b5:38:3c:9d:30:ee:4c:16:2a:88:0a:a6:00:55:cf:6a:47:c5:
         a9:2f:e0:76:c2:b3:d7:72:98:56:92:08:15:f0:2b:51:61:21:
         1c:9b:ed:bb:78:f7:44:44:93:44:bc:44:91:fa:cd:7c:ad:2a:
         7e:e1:06:df:f5:59:fd:fb:b9:14:c0:d1:50:42:89:10:25:2c:
         46:96:ee:a0:fe:2f:48:9f:8a:5f:3f:b6:9b:5a:35:6a:b6:81:
         5e:c8:59:f5:d2:1f:32:42:16:96:01:a6:64:1e:bb:75:a0:eb:
         cf:2b:86:5a:e4:fc:49:ef:0f:e7:a0:4a:d7:ad:ec:61:78:b2:
         6c:35:a3:e5:ae:bc:60:3a:aa:cd:f0:a0:55:1c:fa:ca:10:00:
         ab:3f:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 04:30:15 2026 by rpki-client