Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa
File:                     3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa (raw, json)
Hash identifier:          c2Mwj8pzw51OQiUbN+1MSYanmK7CIgELC1ZNbOEbXuI=
Subject key identifier:   20:B5:AE:98:37:BB:75:DA:D5:C1:97:61:25:FC:D9:DA:F5:05:1C:B2
Certificate issuer:       /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial:       010D0C9F4328584E921FA5EB23956F4E72C93D40
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     63150
IP address blocks:        2602:f840:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a5:eb:23:95:6f:4e:72:c9:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=131fc43b-0151-4a30-b8aa-e497dd522633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:fa:2d:4b:ac:5b:9a:07:c9:1d:bb:2d:b8:
                    0e:89:e0:82:7b:2f:42:27:a5:4e:38:59:73:0d:ec:
                    12:ab:b3:b4:cb:39:cf:b0:74:f6:1a:4c:84:69:6e:
                    5f:90:f3:e9:38:9b:99:b5:35:74:15:1e:8f:b2:b8:
                    c8:da:53:15:1e:4b:66:f1:92:ac:5c:c6:d5:ef:1c:
                    5b:b9:14:37:90:c2:7b:f9:4c:4b:12:95:14:02:f4:
                    c8:a5:d6:05:0c:db:9c:f6:ae:e5:e9:9b:f0:d5:83:
                    14:66:e1:39:e1:a0:ac:19:32:c7:f4:b2:d8:7a:bf:
                    c6:f7:b4:4d:2b:e8:25:95:34:19:6d:9e:5c:c0:8d:
                    1c:e7:d9:81:55:9c:68:e3:8f:72:95:fd:ab:9a:ea:
                    51:6f:40:88:50:c8:57:b6:cf:85:b8:c3:98:02:d0:
                    f3:4a:d0:0f:03:c3:93:9d:79:aa:61:90:8b:d8:ae:
                    3d:22:39:47:fc:b0:28:91:0a:b5:75:b0:2d:77:e2:
                    22:a9:66:45:8e:46:07:b0:40:f5:1f:7d:d4:61:f3:
                    9c:e5:db:4c:6e:34:39:da:8d:72:78:7d:7f:6b:ee:
                    f9:02:e1:54:21:1b:6e:3d:bf:c8:40:58:80:b9:96:
                    24:01:63:f2:a0:18:c5:b8:78:16:f5:38:17:96:a5:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B5:AE:98:37:BB:75:DA:D5:C1:97:61:25:FC:D9:DA:F5:05:1C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl

            X509v3 Authority Key Identifier:
                keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f840:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:54:c3:18:a5:74:d1:2c:4c:24:ce:15:7c:2b:82:b0:57:57:
         45:67:b0:92:c4:c8:c9:0a:21:5c:bb:a4:0c:8e:31:06:f1:be:
         1e:61:f5:36:6a:f3:80:34:26:e2:0e:a2:3f:75:b1:c2:e8:27:
         d0:bd:df:fc:85:05:ca:e6:82:8c:b8:20:5b:36:3d:a9:81:77:
         06:34:7c:b4:a1:0f:4c:d2:51:a4:24:4c:15:de:f1:17:20:e1:
         9a:4f:26:9e:5c:d3:8f:9a:9e:01:59:3f:54:fe:04:24:78:32:
         d3:21:82:60:de:10:98:03:3a:80:5a:64:05:1b:21:4e:6e:4a:
         e3:4d:92:ad:7f:73:25:9a:09:e5:af:68:e0:cd:14:17:92:f9:
         91:81:8a:35:df:52:5d:50:7e:59:5f:09:e6:19:f7:2b:a1:8c:
         fd:8d:07:24:1e:fb:0d:9f:f4:94:e2:f2:a6:2b:e8:c9:a6:98:
         ed:ea:76:e4:bd:2a:fd:15:8b:67:bf:82:8f:09:5d:c6:5b:bf:
         82:60:f5:b9:61:2f:f0:3a:9b:f1:d9:3b:6e:12:fe:9a:fa:93:
         19:57:b0:3a:e7:a1:45:65:76:34:94:6e:f7:3b:6b:84:b4:5d:
         e2:12:b1:4e:87:d5:a6:48:bd:68:e0:f5:ba:68:a0:ff:24:0a:
         58:a2:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:23 2026 by rpki-client