Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b/c27f6727-7f6a-30b5-b614-e8d12de3c1c3.roa
File:                     c27f6727-7f6a-30b5-b614-e8d12de3c1c3.roa (raw, json)
Hash identifier:          DheSTJn9OUD6HfjfOCYb2SijSMKb142f7Y9ilYi0O4I=
Subject key identifier:   CB:5F:E6:A8:0A:47:4B:4C:89:4C:5E:22:63:69:FD:47:50:53:41:97
Certificate issuer:       /CN=9d405a6f-42f2-4866-822c-b31f43adb69b
Certificate serial:       010D0C9F4328584E088112EC626FE7BC7B31AA80
Authority key identifier: 39:28:94:D0:0C:86:79:B3:54:CB:A9:71:42:23:FA:7F:72:78:A3:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b/c27f6727-7f6a-30b5-b614-e8d12de3c1c3.roa
Signing time:             Tue 02 Jun 2026 01:55:03 +0000
ROA not before:           Tue 02 Jun 2026 01:55:03 +0000
ROA not after:            Mon 31 Aug 2026 01:55:03 +0000
asID:                     402555
IP address blocks:        2602:f3a7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b/9d405a6f-42f2-4866-822c-b31f43adb69b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b/9d405a6f-42f2-4866-822c-b31f43adb69b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:81:12:ec:62:6f:e7:bc:7b:31:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d405a6f-42f2-4866-822c-b31f43adb69b
        Validity
            Not Before: Jun  2 01:55:03 2026 GMT
            Not After : Aug 31 01:55:03 2026 GMT
        Subject: CN=94785f61-8afe-4377-b816-8bbd9b67b7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:16:4d:07:9d:19:29:b7:e8:8f:37:ff:d4:8d:
                    ef:32:84:60:23:ed:77:86:e6:97:be:95:5e:cb:0d:
                    64:46:6b:03:a3:a3:6a:f7:4b:bc:d5:fd:50:30:06:
                    66:e0:4b:5f:17:0e:bd:6f:81:3f:98:84:54:16:95:
                    94:41:e9:3b:c6:5a:ef:14:0c:28:9d:a2:50:3f:21:
                    74:0d:5d:5f:6b:a7:8a:39:ee:51:49:22:6d:5e:e9:
                    57:1d:54:61:aa:13:cc:f0:d4:ff:7a:a0:2e:96:51:
                    08:cc:64:b1:8e:36:16:33:8b:51:a6:32:11:34:3b:
                    e2:74:ec:49:e8:17:a2:c7:47:29:fd:88:ec:b5:45:
                    b0:ce:c0:04:02:42:cf:8a:cc:b3:d9:a4:7d:05:ed:
                    09:ab:9b:cd:05:a7:01:16:0f:8d:ad:b6:4c:a9:e2:
                    19:56:8d:d8:21:a6:84:81:e5:52:62:24:50:81:03:
                    09:c9:71:0e:3d:95:49:e8:f5:8a:a2:85:a3:29:1c:
                    a8:2f:a1:b1:a2:98:52:fa:65:7c:59:5a:68:06:5f:
                    7a:78:07:71:48:50:47:d9:64:be:b0:06:df:70:98:
                    ad:bd:82:7e:3d:9d:5a:c7:34:a7:a7:1b:26:d3:21:
                    9b:8e:21:6c:8d:a6:b2:ed:3f:6a:c0:45:8a:6d:58:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5F:E6:A8:0A:47:4B:4C:89:4C:5E:22:63:69:FD:47:50:53:41:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b/c27f6727-7f6a-30b5-b614-e8d12de3c1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b/9d405a6f-42f2-4866-822c-b31f43adb69b.crl

            X509v3 Authority Key Identifier:
                keyid:39:28:94:D0:0C:86:79:B3:54:CB:A9:71:42:23:FA:7F:72:78:A3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d405a6f-42f2-4866-822c-b31f43adb69b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3a7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:12:e0:3d:17:b8:b0:ad:68:77:54:4a:22:f2:a8:4e:ba:
         77:60:13:61:6f:f8:f1:de:3b:84:f7:ae:3b:27:a6:a3:66:22:
         7c:91:38:2c:9f:76:a1:6c:37:d7:2c:50:bc:58:5e:f5:e6:15:
         75:81:92:3e:bc:20:f9:87:b2:5e:2c:55:df:8f:a6:84:79:8b:
         29:9c:b8:1b:1e:6b:95:96:02:9b:86:ee:f8:5c:b1:26:e6:de:
         3f:8c:96:cf:3e:29:c4:f9:4d:d1:64:12:86:18:0b:91:3d:d8:
         c3:d3:5b:22:8d:72:f6:a5:94:ce:57:5e:13:92:90:cb:d5:bb:
         9d:07:ed:55:97:e4:35:c5:a2:60:96:7a:dc:23:fd:60:ec:5f:
         91:a1:60:f8:98:21:e3:02:be:85:4b:06:d6:b2:6d:36:6b:32:
         91:b3:99:8c:90:13:32:91:26:78:e4:6e:c1:6e:66:07:92:22:
         0c:54:6d:cb:b0:77:14:48:ce:a7:9e:f4:e6:16:e8:ff:a8:50:
         c4:17:b7:c1:ba:1f:40:e5:6a:a8:5b:42:87:dc:9f:f7:36:9a:
         41:02:d0:cf:24:f6:02:33:f2:55:11:2f:58:4b:e7:20:25:3f:
         c6:a8:de:80:f8:90:6d:04:a1:f1:64:fb:22:19:bb:c9:1e:13:
         89:85:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:24 2026 by rpki-client