Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa
File:                     abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa (raw, json)
Hash identifier:          WFLj7Rb8qL2ZyZcIX9BNTrxiH7gBMuegZsutVh9hwHM=
Subject key identifier:   75:DD:F5:1B:55:D1:62:37:3A:E2:FC:50:42:8A:70:7A:C4:14:20:2C
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584E4AEF4A8FA8C65E77F9D14600
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     63183
IP address blocks:        2602:f7fc:400::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4a:8f:a8:c6:5e:77:f9:d1:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=23f9252f-84e0-487c-a2d5-f5575ad0541a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c4:b5:53:26:6f:36:23:b9:23:93:d6:9a:bd:
                    53:19:0e:7d:bf:32:3f:a7:7e:1d:57:68:0e:da:40:
                    b5:90:c2:70:0b:ed:2c:9a:77:f7:8b:3a:c2:5c:78:
                    f3:0e:0a:f0:e8:60:0b:84:24:23:7d:46:4c:3b:c1:
                    a3:30:92:6c:c2:4a:9d:98:0f:97:00:21:c3:a6:a1:
                    98:c5:43:c8:0c:13:d4:38:4d:55:ec:1b:b0:dc:02:
                    3d:df:f7:03:56:39:e8:f7:d7:32:ed:5d:93:34:7f:
                    92:39:f2:0b:3d:6d:b3:a0:d8:d2:f5:a7:a0:9c:4a:
                    e8:8f:3f:fa:b0:4b:82:3a:79:6a:1d:dc:08:8d:f7:
                    6f:dc:dd:3d:28:33:47:af:f8:32:37:a2:a4:15:0f:
                    62:0d:8c:18:ef:e1:f1:43:00:3e:85:3c:5c:8c:b1:
                    72:22:ec:89:63:f7:cc:59:f9:e1:62:0c:7e:79:f2:
                    3a:84:e4:31:75:be:55:99:d0:1c:f7:a5:91:44:0c:
                    6e:fb:f8:37:e4:3b:da:f8:32:bf:79:38:f6:e9:b1:
                    14:b4:2a:20:63:df:e9:3b:5c:33:36:83:8f:97:07:
                    e4:4d:24:c6:28:64:41:cd:70:32:8a:b0:93:91:5b:
                    b2:31:f8:6e:54:3a:76:a4:5e:98:b9:e9:99:e3:d6:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DD:F5:1B:55:D1:62:37:3A:E2:FC:50:42:8A:70:7A:C4:14:20:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7fc:400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:4e:f9:1e:d1:a9:ce:9d:2f:6e:09:e6:e5:11:2c:f1:ea:
         bb:be:41:a4:9c:98:06:2a:d6:96:d2:65:ac:77:ac:23:d4:35:
         b3:94:93:62:f3:3b:81:8a:11:6e:30:66:74:df:a6:08:0c:f4:
         e9:60:72:bd:68:2a:9e:f2:9f:6b:bf:14:2b:38:0b:a0:e4:40:
         97:47:30:0e:1b:04:12:25:ae:08:c8:99:45:16:d4:5c:5d:12:
         11:1c:04:12:cc:d5:74:49:d1:bf:2f:80:08:64:16:f9:25:7e:
         64:24:52:81:d0:79:16:6e:d8:80:e9:81:a5:cc:d7:08:48:d4:
         a4:4e:87:21:3d:fa:c7:2f:c6:ed:b6:89:8e:66:b7:36:61:e4:
         c5:82:9c:d3:ba:34:a4:4c:5e:ff:7d:c9:91:3a:1f:05:53:32:
         81:84:42:3b:bb:7c:64:16:77:e4:d1:7c:27:0a:20:39:9f:f1:
         77:32:54:6f:56:8c:55:7e:97:29:e9:9f:21:1c:bc:f6:ec:c1:
         25:a8:9c:a1:e9:47:1f:4a:82:ce:39:25:be:8b:d6:6e:09:5e:
         95:e3:d6:82:2d:b6:64:9f:b9:62:85:87:f9:58:a8:e9:d4:6d:
         13:2c:01:9f:80:54:51:fe:32:7d:10:36:43:b4:eb:98:d2:2f:
         79:a6:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:21:07 2026 by rpki-client