Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/949365e6-0c09-38ae-b739-55f01f48f723.roa
File:                     949365e6-0c09-38ae-b739-55f01f48f723.roa (raw, json)
Hash identifier:          MVt+thDfgIu+zATuZzGfIbbZDTdsHnmJTSQ3rKG7Pc4=
Subject key identifier:   97:4F:0C:7D:66:0E:5A:F1:E9:FD:63:68:4B:8B:0B:EF:9D:3D:CA:3A
Certificate issuer:       /CN=0cee6afc-a72f-490d-85d1-9417465106f5
Certificate serial:       010D0C9F4328584E8A2E36C68437A4E388DF7C00
Authority key identifier: 4B:D9:BC:BE:74:19:6F:0F:FB:3F:47:13:A4:CC:38:55:57:25:35:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/949365e6-0c09-38ae-b739-55f01f48f723.roa
Signing time:             Sat 18 Jul 2026 12:43:11 +0000
ROA not before:           Sat 18 Jul 2026 12:43:11 +0000
ROA not after:            Fri 16 Oct 2026 12:43:11 +0000
asID:                     402567
IP address blocks:        2602:f38b::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8a:2e:36:c6:84:37:a4:e3:88:df:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cee6afc-a72f-490d-85d1-9417465106f5
        Validity
            Not Before: Jul 18 12:43:11 2026 GMT
            Not After : Oct 16 12:43:11 2026 GMT
        Subject: CN=ecb25a89-cb14-4b59-a6f1-25cffd29324f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:2c:c6:c2:b6:88:4d:ad:df:31:d7:20:f6:
                    21:4b:33:f9:5a:d5:f9:98:4d:26:e5:18:28:2a:9a:
                    d0:7e:0a:f7:24:64:52:20:e6:1a:3d:05:a6:c5:cf:
                    77:a3:a7:bc:6c:c1:b6:7f:13:61:8e:61:e9:da:a0:
                    96:74:1f:ab:8d:4f:71:88:9c:b3:a7:f5:7d:16:b6:
                    17:70:b5:7e:4b:f1:7e:38:b1:b5:1e:a6:e2:61:3d:
                    63:f0:12:e2:94:26:51:b8:48:e2:60:69:09:80:f5:
                    9a:d2:4c:8c:41:64:21:bf:d0:5d:2d:bf:e4:32:0a:
                    ad:9e:16:31:44:cc:c2:6f:28:e5:63:be:0e:1c:e5:
                    18:93:fc:54:61:10:10:df:4f:70:3b:c6:f9:74:67:
                    09:e6:2b:c7:6d:b0:46:15:7e:5b:f6:09:c1:d0:0e:
                    45:20:07:bc:64:c9:f0:53:33:52:a4:f5:78:5f:7d:
                    c6:b7:0c:08:f0:a2:16:c1:21:f8:01:b8:1c:59:11:
                    e1:50:79:2d:80:a7:c1:03:b0:8c:cf:90:dc:e1:d7:
                    0c:d8:b9:39:a4:20:ae:57:d9:4d:b2:91:5b:cd:4a:
                    20:ae:f1:95:07:87:4a:7c:9d:1c:e0:cc:68:ad:a3:
                    9a:af:16:99:f3:68:f0:0e:42:55:91:a0:75:02:6c:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4F:0C:7D:66:0E:5A:F1:E9:FD:63:68:4B:8B:0B:EF:9D:3D:CA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/949365e6-0c09-38ae-b739-55f01f48f723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.crl

            X509v3 Authority Key Identifier:
                keyid:4B:D9:BC:BE:74:19:6F:0F:FB:3F:47:13:A4:CC:38:55:57:25:35:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f38b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:95:93:94:90:95:47:49:be:4b:96:5d:e2:b2:4b:25:4d:
         a5:ea:ae:35:21:46:87:e7:56:09:f9:81:7c:e0:fc:f8:20:52:
         98:1a:e1:bb:ac:00:7c:f5:46:94:7d:13:c7:2f:b6:c5:30:21:
         9a:b8:4d:43:84:16:3f:e0:bf:7e:1b:df:dc:c7:c7:38:53:2d:
         96:97:74:67:a3:b0:1a:a9:f7:9a:17:7b:85:80:ab:28:4b:8e:
         4e:06:85:ce:01:3f:5e:32:a3:26:87:4d:ea:ba:c4:e5:0d:22:
         b0:d3:89:19:1e:c3:b1:a5:04:58:ac:df:77:d1:8d:8f:f9:c9:
         cf:eb:0c:cb:e5:08:ef:85:c9:a2:35:97:59:19:73:1b:96:3a:
         2e:ce:14:86:bb:e4:d1:b3:4b:c9:f2:6c:88:2d:4f:d8:10:9b:
         05:e6:a2:69:84:38:0c:85:02:1a:95:5f:18:2b:b4:63:47:6d:
         06:b0:05:f7:da:b5:c1:64:33:64:f8:25:0c:5b:cb:5b:54:2a:
         82:60:91:06:24:db:31:fc:12:7c:3d:5a:04:23:3b:26:f6:40:
         bc:ec:78:c2:e0:bd:89:78:52:4f:15:03:d2:33:3f:67:07:90:
         3b:58:f8:1b:95:6f:77:12:b1:d8:93:dd:c0:2c:27:bf:dd:8c:
         52:49:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:50 2026 by rpki-client