Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
File:                     0324a99b-635c-375e-af56-954f8fd6c9c6.roa (raw, json)
Hash identifier:          ShQ2G9PyhVAXvabqB8OtRPYZzacY2KGrwl6xCcig0ms=
Subject key identifier:   48:DB:73:51:F6:55:87:13:61:AB:B9:52:EE:75:10:C8:3C:C0:95:43
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F4328584E94EA57DE4F457DE18D393470
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     62467
IP address blocks:        2602:fc05:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:57:de:4f:45:7d:e1:8d:39:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=0fabbd0c-6e6f-4f83-b0f8-0cdaa2ad30e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:00:c2:5e:da:2f:ad:a9:54:18:c8:9d:66:5d:
                    fc:f3:71:a6:ab:e4:fd:d3:8e:36:3d:ba:2a:7a:ae:
                    ea:ce:9a:bf:38:e2:19:a9:8a:69:18:89:e7:ec:0e:
                    65:d1:f4:f9:2e:12:f4:00:52:dc:79:0c:99:a7:69:
                    ec:94:b3:8e:ce:e6:74:c7:b7:df:c0:88:5c:54:db:
                    a6:76:b5:bb:c4:29:39:22:d1:35:d1:58:81:a9:48:
                    86:f4:75:58:f6:ae:ed:77:3b:59:c1:2c:16:b1:46:
                    19:35:5b:d1:08:54:30:ea:1d:da:fc:73:7a:64:03:
                    ff:3a:c9:9e:67:aa:9c:10:d1:4e:0f:dd:d2:05:64:
                    7c:a9:76:d0:ea:a2:cd:8b:bd:3a:0a:0d:14:42:e1:
                    ab:9c:cf:fd:74:ab:6c:41:3c:5d:e4:39:a3:6a:5d:
                    fd:98:95:ab:f6:f5:8c:86:42:d0:a1:70:0e:8e:36:
                    f1:1c:25:36:1d:15:28:8d:20:da:0e:c0:05:c9:cf:
                    ff:37:bd:44:59:c0:f9:44:f2:87:29:a2:03:0a:fd:
                    db:4c:4e:ad:a4:e8:ba:b4:4d:f1:27:61:eb:ce:83:
                    b2:e2:f1:3b:0b:7b:7b:eb:2b:53:31:e9:bb:fa:70:
                    a7:78:b0:b6:08:a5:27:4f:09:7a:0b:09:f5:3c:e6:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:73:51:F6:55:87:13:61:AB:B9:52:EE:75:10:C8:3C:C0:95:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc05:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:96:34:ae:eb:82:25:b3:7d:37:1c:8f:2b:27:5d:2a:f2:56:
         fd:ce:49:51:53:be:f6:94:87:0a:60:dd:f6:af:33:58:ef:2f:
         79:00:38:a9:9e:aa:1c:a2:af:f0:84:44:74:38:54:87:e2:de:
         d2:1c:9f:d5:28:ed:fc:6c:be:b0:73:12:6b:80:70:33:f4:ee:
         f4:f0:32:58:15:de:f3:e7:56:a7:f0:cf:f4:06:ca:00:b9:02:
         1d:2b:9a:c7:87:52:89:c3:36:1f:18:44:47:6c:c4:65:3b:0d:
         5d:22:b8:1f:b7:04:aa:1e:19:47:28:e2:c7:2c:b7:1b:11:54:
         87:f8:b1:f3:3c:92:91:de:74:8c:62:6b:87:17:3d:00:75:90:
         c7:26:9d:68:af:60:65:26:6d:9d:8d:db:44:79:a4:1f:d1:40:
         a8:ed:40:ec:20:9c:15:f0:f2:d2:d6:c7:e4:f1:7e:b1:19:2e:
         3f:59:57:ee:44:61:b1:2e:a6:14:4e:a7:ce:83:08:2d:07:54:
         50:21:03:ea:d9:e2:37:ce:c2:32:e8:df:91:56:eb:58:d4:b1:
         fb:f0:32:b9:6d:04:f6:5e:51:6c:f3:c9:14:97:41:9c:50:58:
         72:2c:b1:3d:bc:d6:e5:9d:45:36:94:4e:ce:35:d9:93:e3:8c:
         59:d9:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 03:32:33 2026 by rpki-client