Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e/fe6fdebb-eb27-3699-b76e-74e1ae9d606b.roa
File:                     fe6fdebb-eb27-3699-b76e-74e1ae9d606b.roa (raw, json)
Hash identifier:          QNEgoVtWgPUWfiITW5BfxyKoD0+CpYGSpoR3E02/xWY=
Subject key identifier:   3F:57:81:A9:72:44:2A:39:03:7E:18:1B:80:B1:05:E9:C3:D5:0E:7E
Certificate issuer:       /CN=bd35da82-6dd3-454d-a76e-fee9f80ecd7e
Certificate serial:       010D0C9F4328584EBC65F80F42941939065F0E00
Authority key identifier: 03:2F:4E:13:34:1F:12:14:44:BE:1E:3D:26:92:84:FE:E4:C7:CD:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e/fe6fdebb-eb27-3699-b76e-74e1ae9d606b.roa
Signing time:             Wed 05 Aug 2026 12:25:56 +0000
ROA not before:           Wed 05 Aug 2026 12:25:56 +0000
ROA not after:            Tue 03 Nov 2026 13:25:56 +0000
asID:                     63927
IP address blocks:        2620:131:c002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e/bd35da82-6dd3-454d-a76e-fee9f80ecd7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e/bd35da82-6dd3-454d-a76e-fee9f80ecd7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:65:f8:0f:42:94:19:39:06:5f:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd35da82-6dd3-454d-a76e-fee9f80ecd7e
        Validity
            Not Before: Aug  5 12:25:56 2026 GMT
            Not After : Nov  3 13:25:56 2026 GMT
        Subject: CN=28fd0e28-1090-4735-a038-a30ff491284a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:47:99:e8:72:71:63:f2:b1:73:9b:fd:81:
                    1d:4f:ff:c1:3c:f6:90:00:cb:bf:f9:12:e4:6e:8c:
                    8d:e8:86:c0:54:5c:4c:12:8d:06:b8:21:10:c5:ac:
                    06:05:2c:32:b5:09:0f:c8:6c:3e:af:91:a0:4a:31:
                    bd:85:25:30:24:10:32:62:35:08:2d:7e:58:64:39:
                    07:c8:ab:4c:95:32:ce:60:68:cc:c4:a6:83:f8:78:
                    a9:57:2d:5c:4f:27:d0:07:8c:78:cd:7b:ad:00:5b:
                    96:bf:d1:20:2b:6b:a0:eb:ba:f4:31:b1:45:97:fd:
                    01:40:fe:00:ef:a4:58:c5:7f:ac:d3:bb:44:0c:2d:
                    ee:d4:cc:8a:9d:ed:60:0e:73:bf:c0:6b:8f:b5:92:
                    02:07:39:e0:81:da:2b:66:ab:10:05:b1:e9:65:99:
                    0c:7a:1d:e8:3e:e6:13:3a:8d:ae:71:8b:8e:63:1d:
                    b3:7d:e3:28:f8:2f:61:35:e0:a9:c6:16:aa:67:9d:
                    23:33:a8:58:19:8f:41:e5:74:fc:83:9e:65:62:b9:
                    a4:be:9f:32:8f:94:f0:f7:65:26:06:0e:76:e6:af:
                    9f:bd:5e:0e:4b:e0:13:55:ef:7f:2a:c4:e0:05:fb:
                    e4:41:d7:81:ec:1b:39:05:21:bf:c0:5e:08:6f:da:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:81:A9:72:44:2A:39:03:7E:18:1B:80:B1:05:E9:C3:D5:0E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e/fe6fdebb-eb27-3699-b76e-74e1ae9d606b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e/bd35da82-6dd3-454d-a76e-fee9f80ecd7e.crl

            X509v3 Authority Key Identifier:
                keyid:03:2F:4E:13:34:1F:12:14:44:BE:1E:3D:26:92:84:FE:E4:C7:CD:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bd35da82-6dd3-454d-a76e-fee9f80ecd7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:c002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:58:6f:bd:71:09:e9:fd:1a:02:86:8e:ef:37:5f:87:60:
         36:31:47:6e:fa:b5:db:c4:88:d6:d4:b8:46:29:01:f9:af:db:
         dc:ea:6b:70:98:8d:1c:2f:f6:7a:76:4e:91:90:ae:ab:dc:e3:
         e0:23:e1:cc:60:ca:49:47:73:07:b3:69:39:01:d2:49:97:dc:
         5b:f1:40:a5:4f:f0:8d:f3:52:18:79:77:d9:a1:74:62:75:45:
         bf:77:24:cb:a7:e9:ed:91:26:4e:a6:21:e1:57:61:94:0c:44:
         96:98:25:4d:31:63:0c:d9:75:da:a1:b7:d8:68:c9:72:bc:ae:
         80:aa:c0:61:13:cd:45:0f:b0:95:37:8d:ec:b0:8a:7c:16:27:
         75:48:6e:5e:8a:29:a0:f4:25:e8:a6:da:a8:63:5b:ee:ee:8a:
         52:29:39:93:41:42:1c:6f:81:7f:7e:60:e8:ff:d7:20:88:f7:
         79:a2:fd:4a:b2:99:f9:f4:67:1f:ef:81:fa:e6:5b:d9:fc:2a:
         ac:b8:c8:1a:7d:b1:fb:b6:e4:5b:4d:50:48:0b:e2:ff:d2:89:
         06:55:4b:d2:67:74:dd:14:01:36:0d:93:72:99:3e:a0:00:ae:
         30:92:48:d5:09:63:39:f5:30:26:41:08:65:ad:08:db:a4:23:
         0d:dd:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:53:16 2026 by rpki-client