Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
File:                     7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa (raw, json)
Hash identifier:          e1+aqZWCYcYuLX6sYfkqY+OxZ20EvtjxYgBZga+b1I8=
Subject key identifier:   04:BF:04:B8:3B:42:B0:A3:8E:31:FE:46:37:9A:0E:73:93:39:B7:E2
Certificate issuer:       /CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
Certificate serial:       010D0C9F4328584EAD1C5119FA54F154ED28FC00
Authority key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     14217
IP address blocks:        2602:f96f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:51:19:fa:54:f1:54:ed:28:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=23745d65-82df-4d7e-8cbe-0208baa17a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:ce:31:e4:13:13:e8:5a:0d:d0:11:eb:c4:
                    c6:30:c1:17:a0:eb:45:fa:d2:6c:1f:86:89:92:a1:
                    16:9e:91:c4:84:37:07:70:cf:c8:8b:72:8b:ca:dc:
                    8d:80:7a:76:96:9b:3a:77:2d:0f:2d:43:19:5a:b4:
                    18:41:97:9d:31:82:50:36:1a:99:bd:4b:1f:dc:5a:
                    03:aa:07:0c:6d:82:8b:c4:b1:95:9c:5b:1b:2c:7a:
                    d8:97:a4:42:92:55:a7:e1:ea:7e:ce:5b:cb:56:50:
                    c0:97:57:62:a3:da:a6:c4:82:14:4d:2b:b1:30:19:
                    21:1d:ee:d0:13:a5:31:d3:7a:40:19:07:66:29:62:
                    58:e6:a1:7b:49:70:20:19:2b:87:bb:04:5d:ac:cd:
                    71:77:0f:71:f9:d0:d2:57:b9:4a:74:4c:5c:95:19:
                    ff:99:a1:3e:b9:56:c7:cc:b2:50:65:de:2d:d0:70:
                    f8:55:99:67:f7:d9:49:ea:f3:7e:d0:69:a4:14:06:
                    c2:4b:db:ec:1b:f8:a8:64:05:9a:6e:98:bb:19:97:
                    25:87:75:e3:1b:30:f8:51:a6:c2:26:2d:79:26:4c:
                    89:f4:93:2b:56:a7:5b:e4:cb:85:7f:04:aa:e4:7c:
                    51:f1:39:c9:f7:19:8b:2f:c2:45:de:c9:16:fc:5e:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:04:B8:3B:42:B0:A3:8E:31:FE:46:37:9A:0E:73:93:39:B7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:57:3e:5c:fe:29:e1:33:6e:b9:47:5a:e3:ab:ba:91:34:
         3d:3e:1a:1b:f7:f9:e6:52:57:af:49:16:fa:61:b7:bb:66:05:
         5e:ff:7f:c8:4b:ee:ff:2b:4a:ed:3e:9a:08:99:7c:e9:99:e8:
         be:a1:7c:15:03:4e:4c:28:55:2e:8f:a7:47:08:91:d0:09:ee:
         dc:4d:41:e5:17:bb:27:86:ce:7b:97:33:6f:7f:34:3f:0d:29:
         ff:8f:d8:44:48:f2:10:59:a2:7a:78:73:da:a4:5c:e8:29:fe:
         b2:1f:56:3b:7a:a6:55:e3:fa:60:a2:4f:5a:ea:8d:46:39:a1:
         ac:2c:11:5f:67:4b:a7:89:19:23:7a:4b:f5:2e:a5:e5:1e:f4:
         04:99:4c:29:37:98:6a:b9:61:4a:17:1e:93:9b:d4:cc:65:ae:
         b5:d8:a0:a5:20:67:69:fb:25:43:2e:d1:56:11:36:bd:e4:bc:
         a7:68:b7:90:44:34:32:d7:32:13:2a:67:41:49:64:b9:9c:1f:
         6e:21:04:15:1e:15:d6:87:ab:8b:c1:d6:f2:dc:ef:1d:c9:59:
         3a:95:d6:c8:a8:a2:c4:9b:3e:7f:ab:2b:68:2e:3c:01:0a:21:
         4f:84:01:53:dd:80:23:dd:4f:6e:a3:56:15:10:c5:66:70:c9:
         1b:24:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 02:10:00 2026 by rpki-client