Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/37a031f0-ad22-381d-b4bb-147e1abec0e3.roa
File:                     37a031f0-ad22-381d-b4bb-147e1abec0e3.roa (raw, json)
Hash identifier:          IPjYioVZ2ygLj3z89qJljVQf5wMITHgN3U9eqzes0fc=
Subject key identifier:   0E:0C:DD:56:4F:FD:3C:2B:1B:FE:B9:E6:42:3F:88:AE:D4:31:A1:1A
Certificate issuer:       /CN=38f0cd1a-37b5-4e21-a451-606bf424f495
Certificate serial:       010D0C9F4328584EA78756121585C88F4647C400
Authority key identifier: 9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/37a031f0-ad22-381d-b4bb-147e1abec0e3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401190
IP address blocks:        2602:f894::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:56:12:15:85:c8:8f:46:47:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f0cd1a-37b5-4e21-a451-606bf424f495
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=264fc5ff-3f3b-4f0a-9b80-9ef0599d0105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:b0:c8:a6:05:35:83:ae:2d:ef:14:fe:ed:
                    e9:9a:55:b2:8e:d6:8a:ba:96:80:ff:3e:8a:99:ea:
                    19:77:dc:b3:a3:60:fc:bd:01:27:64:7e:83:f0:2d:
                    a7:24:49:04:5e:71:ca:33:5f:1f:9b:c9:83:56:8b:
                    d7:07:3c:27:38:1e:18:c8:11:26:a1:39:6f:a1:fb:
                    f4:da:8b:9e:8c:4d:73:30:fb:62:31:49:df:7f:17:
                    e7:65:44:13:39:8d:ec:de:a4:dd:70:37:85:f0:a5:
                    5d:88:af:dd:62:99:bf:1d:95:e3:6e:cf:f9:ec:fb:
                    cc:cd:b5:cd:d2:01:fc:7f:7b:36:34:cb:03:52:1e:
                    44:a0:2d:59:3a:de:82:24:95:df:a0:9d:74:5e:55:
                    60:34:e0:99:86:5a:19:a5:57:be:21:91:e3:d9:26:
                    a2:39:38:bf:84:b1:22:f8:f4:71:24:54:59:cc:72:
                    b4:bd:29:5d:3a:0b:3e:1f:08:3f:39:16:15:c1:9f:
                    d6:63:9a:6d:68:d2:7f:ec:91:75:61:db:74:7d:a4:
                    e2:07:59:2c:99:45:12:4d:0a:df:ca:46:a1:38:c0:
                    e1:38:24:94:87:48:64:56:b2:bf:da:27:c4:86:fe:
                    73:ad:b3:05:53:42:8a:62:72:66:f8:90:c8:65:36:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0C:DD:56:4F:FD:3C:2B:1B:FE:B9:E6:42:3F:88:AE:D4:31:A1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/37a031f0-ad22-381d-b4bb-147e1abec0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl

            X509v3 Authority Key Identifier:
                keyid:9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f894::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:ae:8a:dc:d2:28:fa:f5:b9:d1:ff:45:b8:2b:e1:61:cc:
         cf:ad:b8:c5:a3:f6:fb:31:b2:3d:59:87:45:0b:28:0b:54:d1:
         37:4e:53:3f:7d:8a:9d:8b:4c:5e:87:be:11:b0:34:f6:03:e7:
         50:8d:5b:78:38:5b:bc:0d:c9:38:4e:f6:ac:da:9b:c6:b2:b3:
         ae:55:7b:7b:e0:05:59:66:67:9b:29:d9:21:3d:fe:36:1b:53:
         38:a7:ba:03:9a:d3:bb:18:30:fa:6a:0b:e4:52:12:02:ea:0e:
         17:45:0a:04:1e:e7:ee:02:cd:65:55:cb:30:08:52:fb:0a:f7:
         ca:aa:a7:12:dd:76:03:ae:fb:44:03:93:d8:82:78:f6:e3:82:
         62:6a:04:a3:a4:97:42:bf:a7:57:aa:54:ea:65:ee:6a:74:d4:
         6a:9b:a2:15:f0:71:53:3d:15:86:d7:cb:b5:a4:96:c0:7c:8d:
         43:24:c6:26:0d:d5:7c:48:81:5a:2a:3a:b6:28:15:27:f6:81:
         20:98:17:73:58:d4:6e:59:c8:52:63:aa:3b:24:64:4c:45:bf:
         32:92:fe:7b:13:f6:ef:03:d2:a7:46:6b:04:c2:b2:7b:7f:ab:
         3f:48:67:f2:ed:25:4e:17:9f:fc:a1:16:b1:73:d5:95:72:e0:
         56:17:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 12:30:29 2026 by rpki-client