Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d/70277e8e-d479-33bc-949a-65778448b64b.roa
File:                     70277e8e-d479-33bc-949a-65778448b64b.roa (raw, json)
Hash identifier:          9WqeFNX0a8cf6lNf/rPpLl6ThJGk4CfkVYfB3F0hxWk=
Subject key identifier:   D1:08:70:EF:65:A1:3F:1E:81:9F:A7:D1:C9:B9:1B:D7:D8:DC:00:42
Certificate issuer:       /CN=4264fccf-037a-4fac-87f6-463d0a92117d
Certificate serial:       010D0C9F4328584ECE335DDDD46C3B3FF5253270
Authority key identifier: 42:E9:27:3B:F8:97:4F:27:B7:E0:9A:D5:4F:31:5E:F8:B4:A7:09:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d/70277e8e-d479-33bc-949a-65778448b64b.roa
Signing time:             Tue 11 Aug 2026 21:28:32 +0000
ROA not before:           Tue 11 Aug 2026 21:28:32 +0000
ROA not after:            Mon 09 Nov 2026 22:28:03 +0000
asID:                     402864
IP address blocks:        2602:f325::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d/4264fccf-037a-4fac-87f6-463d0a92117d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d/4264fccf-037a-4fac-87f6-463d0a92117d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:33:5d:dd:d4:6c:3b:3f:f5:25:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4264fccf-037a-4fac-87f6-463d0a92117d
        Validity
            Not Before: Aug 11 21:28:32 2026 GMT
            Not After : Nov  9 22:28:03 2026 GMT
        Subject: CN=06de81b3-a650-42ab-a97e-a2257004a6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:d4:67:0f:b7:e4:24:2c:ed:36:09:76:b4:
                    5c:32:02:ac:40:03:df:af:a7:af:12:ac:42:f1:7c:
                    70:99:05:9d:f5:7a:a5:4b:d1:fa:44:ed:47:03:41:
                    c1:ca:30:76:da:05:ba:35:91:55:86:bd:41:9d:14:
                    9d:9e:4c:ca:93:00:59:0c:87:5a:9d:6e:70:1d:db:
                    b0:7b:18:e4:90:db:70:cb:50:03:5d:6f:7c:3a:b1:
                    f1:9b:52:20:b7:1e:23:48:1b:5d:8a:46:74:d9:68:
                    d8:60:73:51:3c:6a:90:cc:16:0c:f0:9e:9c:49:a7:
                    30:a4:7a:0a:0f:94:95:43:f6:be:2c:9d:2f:4a:d4:
                    85:6a:db:b5:e7:ef:07:8e:16:25:26:70:a3:e3:d9:
                    3c:92:90:27:0f:ef:fa:a9:8e:1e:8d:41:2f:c7:f2:
                    cb:30:9d:60:6b:4a:b5:03:52:76:38:6b:bd:7a:62:
                    6a:1e:a8:e0:8a:5f:99:aa:07:b6:73:65:10:ad:14:
                    71:d5:b9:60:4a:21:30:2e:89:32:5d:2e:47:5b:0b:
                    f0:6b:7a:8b:5d:5c:b7:04:7e:3b:44:8a:12:2d:71:
                    79:27:48:d5:a3:3d:de:85:0c:21:15:eb:0d:17:65:
                    50:fd:78:4d:2b:6c:64:bf:87:26:cc:00:c1:c1:d4:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:08:70:EF:65:A1:3F:1E:81:9F:A7:D1:C9:B9:1B:D7:D8:DC:00:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d/70277e8e-d479-33bc-949a-65778448b64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d/4264fccf-037a-4fac-87f6-463d0a92117d.crl

            X509v3 Authority Key Identifier:
                keyid:42:E9:27:3B:F8:97:4F:27:B7:E0:9A:D5:4F:31:5E:F8:B4:A7:09:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4264fccf-037a-4fac-87f6-463d0a92117d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f325::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:60:3a:9d:8f:11:2a:af:d5:e5:cf:c5:f6:7d:59:c2:d4:
         e2:b5:d0:f3:ad:36:12:7a:5b:d1:e5:9b:c3:e3:d6:c6:7b:3b:
         67:f0:b3:ee:f0:56:9c:54:0c:21:73:93:23:f5:fa:84:b2:26:
         ae:ba:44:90:0b:d3:57:22:b4:1f:00:eb:45:82:2f:90:65:7c:
         a5:32:50:7e:9e:de:89:d3:37:da:19:46:02:0d:88:ea:2f:7d:
         4e:4b:67:91:e4:87:7b:d2:0d:38:82:b8:c7:9f:14:13:12:a9:
         6c:e7:72:0f:cc:f5:55:4f:d2:d3:7e:28:02:92:aa:b9:b2:90:
         7a:6d:f1:e1:5c:d7:ff:58:6a:fe:f5:1d:a1:a5:34:00:b6:ee:
         54:8b:1f:98:ec:a4:1f:6d:90:d1:d4:a0:67:75:4b:42:8b:76:
         8e:9a:5d:cd:63:b8:b7:16:89:27:62:41:07:0c:df:8b:13:0c:
         32:1c:94:a5:2e:08:08:c0:55:16:5d:04:b0:78:e4:d9:f0:f7:
         45:55:11:36:a2:9d:12:69:a0:9c:39:4d:ee:83:89:e1:77:fc:
         03:25:1c:ea:73:b4:1b:9d:9c:8a:cc:2e:0b:3a:49:a4:ec:6c:
         b4:15:ae:bc:61:da:7b:d4:77:2c:23:19:fd:70:2d:f8:d4:d6:
         9b:55:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 06:48:19 2026 by rpki-client