Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
File:                     fa0b4834-eb01-397d-b065-c91c0aff8fba.roa (raw, json)
Hash identifier:          CRXO4uCYvOWnnAKZvxWb5xQVaQGh9rcPTyv/8PpsSok=
Subject key identifier:   95:E6:45:FE:DB:03:7F:62:FE:F3:91:0A:34:C9:34:CF:72:8F:91:B3
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584E2D9F14F005DFE519985E9500
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     32590
IP address blocks:        2602:801:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:14:f0:05:df:e5:19:98:5e:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=f3520e52-318e-4523-871d-164105ca5e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:9d:6e:aa:d6:38:06:04:60:cd:39:e6:65:
                    b8:bb:37:4a:42:15:b3:b3:45:db:a5:10:3e:9a:5c:
                    a1:bc:64:a1:cd:1b:6f:2f:15:cc:9f:ba:c8:17:84:
                    b7:71:28:91:b7:35:3e:80:3d:8a:88:7b:93:90:21:
                    16:fc:29:72:48:f6:8d:0b:39:dd:2b:1f:38:d9:8e:
                    c5:99:66:e6:cd:1b:4f:96:00:a5:d5:f2:29:1c:c0:
                    d6:2f:f1:a6:35:a9:49:3e:8f:bd:a5:ea:1e:bf:af:
                    28:eb:f8:d2:d6:29:d5:de:a6:9c:65:78:c7:88:0e:
                    1f:d7:07:43:f2:cf:36:31:93:22:24:60:ec:16:62:
                    74:0e:12:37:db:96:76:2f:7d:e0:64:a5:6a:92:b7:
                    e7:29:60:c3:be:a3:57:4d:bc:d9:3c:9c:93:fd:4c:
                    ee:b3:63:65:c8:76:6b:80:20:4c:2c:9d:e2:65:35:
                    81:84:6a:19:3a:42:de:6b:ee:86:76:de:be:72:5c:
                    40:b2:92:76:af:e9:db:40:2c:08:7c:29:28:49:c6:
                    70:34:72:c1:9e:6d:18:f7:d9:d8:d0:e2:7d:de:17:
                    2e:d4:de:c7:13:1f:22:60:a5:e4:65:a4:4a:54:77:
                    b1:40:aa:2a:86:df:85:e5:73:62:e8:ba:ea:25:a2:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E6:45:FE:DB:03:7F:62:FE:F3:91:0A:34:C9:34:CF:72:8F:91:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:36:9d:65:38:fc:1b:bd:0f:9c:4b:ba:b1:e2:91:6b:aa:1b:
         83:80:0f:27:02:fe:28:d3:89:27:cf:7a:36:45:84:d3:f3:e6:
         fa:54:c8:f0:3d:9d:63:20:ed:28:54:2b:0d:c4:09:ad:44:cf:
         e1:7e:85:4b:f5:7b:2b:51:6d:04:7a:3b:a5:08:97:87:53:db:
         6d:3e:26:14:0b:b6:3e:54:0f:37:78:ab:7c:f8:21:41:0a:a8:
         9d:97:01:45:d9:82:ea:d2:f2:38:c3:2a:8d:02:17:5d:63:2f:
         cb:a7:b4:99:8a:db:2a:89:9a:fa:f4:6f:40:98:d4:84:c7:54:
         8c:2d:b4:c1:46:bd:fd:78:52:20:76:78:b2:67:16:ec:b1:7f:
         07:22:5d:e1:85:e2:a4:6f:c9:63:b6:a8:dc:78:1e:de:33:43:
         47:41:40:28:3b:a8:20:c1:ca:e9:2a:ce:ca:b8:e8:bc:58:86:
         af:d3:7e:ed:3d:8a:b1:c5:10:26:17:3e:6d:88:08:4d:40:15:
         b7:a0:de:d7:ad:29:84:bc:1f:19:0c:3f:40:1a:3e:61:57:09:
         06:f1:df:17:b2:7f:dc:5f:ae:a8:8a:83:91:25:fb:24:73:0a:
         7f:72:d8:78:70:26:07:4d:ab:38:42:eb:c9:ad:f6:27:7f:bf:
         bb:10:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:46:41 2026 by rpki-client