Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/d60ac8b0-a3ea-3b60-bae3-500287cc1080.roa
File:                     d60ac8b0-a3ea-3b60-bae3-500287cc1080.roa (raw, json)
Hash identifier:          cwQtTZT2eVxwAIBPINFKSI03WLFvRktwq4eNGiE4y6E=
Subject key identifier:   F2:D1:41:41:27:40:D4:91:5A:03:6C:24:20:0B:06:99:BB:A0:B2:2D
Certificate issuer:       /CN=dca0883a-8938-4c49-ac77-e43c73ab94d0
Certificate serial:       010D0C9F4328584E6A4C13B6F0D9142FA5A94D80
Authority key identifier: 5B:88:F9:64:DE:A3:65:5E:01:C1:A2:EB:D7:1E:85:9D:2E:20:4A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/d60ac8b0-a3ea-3b60-bae3-500287cc1080.roa
Signing time:             Tue 07 Jul 2026 02:37:29 +0000
ROA not before:           Tue 07 Jul 2026 02:37:29 +0000
ROA not after:            Mon 05 Oct 2026 02:37:29 +0000
asID:                     402704
IP address blocks:        2602:f362::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/dca0883a-8938-4c49-ac77-e43c73ab94d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/dca0883a-8938-4c49-ac77-e43c73ab94d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6a:4c:13:b6:f0:d9:14:2f:a5:a9:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca0883a-8938-4c49-ac77-e43c73ab94d0
        Validity
            Not Before: Jul  7 02:37:29 2026 GMT
            Not After : Oct  5 02:37:29 2026 GMT
        Subject: CN=8f29e338-b529-4636-a0eb-40d866667fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:1b:51:05:b6:a1:0e:42:82:4c:3a:51:e3:
                    30:03:4e:ac:35:db:b0:ae:cd:8d:97:ab:d4:f7:cf:
                    58:08:3c:0c:fa:0a:da:1f:84:9d:8f:c5:47:e7:50:
                    c2:9e:60:66:ff:f4:21:b8:1f:68:b7:fc:33:5a:91:
                    1a:28:e6:10:6c:04:40:5a:9a:29:86:54:54:cd:3b:
                    f0:34:d9:39:da:f4:a0:aa:16:c9:d6:35:98:69:ac:
                    d2:be:d3:cd:95:a7:95:7d:61:4d:1a:59:5c:e6:13:
                    dc:c3:91:fd:87:eb:29:c2:5f:56:d9:ca:7f:ac:b9:
                    90:3b:77:7f:9c:ca:dd:b9:8c:09:2b:d0:32:0e:14:
                    20:7b:1b:b0:42:ad:46:fc:79:8f:92:96:b8:15:65:
                    b7:58:6a:56:98:e2:89:ee:eb:a7:83:5d:69:92:76:
                    3d:b5:4b:a7:01:d1:74:f7:12:c6:aa:42:c4:de:d8:
                    89:66:59:c7:21:1b:64:5f:71:a3:b4:52:8a:41:9a:
                    05:99:15:61:c5:8b:30:7b:fe:4e:49:4a:94:89:8b:
                    9a:3d:bc:ab:75:7a:87:7a:1d:49:79:6c:cd:54:e7:
                    a2:58:76:39:36:0e:3f:9b:65:2f:b5:41:c6:b5:c5:
                    5b:07:2d:ea:75:12:b2:aa:11:f9:23:21:fa:78:04:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D1:41:41:27:40:D4:91:5A:03:6C:24:20:0B:06:99:BB:A0:B2:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/d60ac8b0-a3ea-3b60-bae3-500287cc1080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/dca0883a-8938-4c49-ac77-e43c73ab94d0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:88:F9:64:DE:A3:65:5E:01:C1:A2:EB:D7:1E:85:9D:2E:20:4A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f362::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:63:4d:52:b7:61:aa:fd:fd:58:e8:df:68:23:eb:5b:a5:8b:
         cf:05:ab:89:9a:4a:b7:ee:2a:a6:75:df:59:14:74:f7:6f:d6:
         67:39:84:63:fb:f3:21:7c:50:e4:d7:b9:d5:64:12:12:59:e1:
         aa:1a:bf:3e:14:22:fa:e4:f7:63:e6:6e:29:4d:bb:95:c0:e1:
         bb:c0:c1:9f:b9:6c:ce:84:84:de:a5:52:04:af:46:3d:f6:4f:
         17:e6:28:8a:3b:b9:df:34:41:b8:f8:98:d1:4a:fe:fb:0c:b9:
         0a:47:37:64:c6:e8:3e:14:e2:4d:0f:f0:74:fa:4f:47:2a:d9:
         cc:6d:b4:aa:a5:78:27:01:33:b0:3a:bf:dd:5c:b9:98:6f:95:
         7e:92:56:dc:27:04:b9:ba:a5:f9:83:92:12:9a:50:03:b4:53:
         93:62:86:82:e1:7a:38:5e:15:1a:c9:dc:4a:2a:16:02:c6:b0:
         3f:a7:97:8a:d8:8a:62:92:b5:b4:ba:33:84:5a:4e:f8:43:94:
         24:c0:46:b9:5a:f3:7f:5c:73:79:72:94:a7:e0:8c:84:93:59:
         f3:80:41:84:a9:ef:dd:41:e7:8b:1f:d2:60:ce:ed:94:23:25:
         e8:9d:ec:12:02:13:70:b5:ec:9d:fd:cc:d6:c0:39:51:42:d1:
         b4:73:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:11 2026 by rpki-client