Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
File:                     304f07f6-04cc-39ec-8d73-e2fe0365d858.roa (raw, json)
Hash identifier:          bBm2fCssr+cMv5SsWEXHhYfxS6x+YTdNMb7DEiFIrL8=
Subject key identifier:   EA:E0:BB:6C:6C:24:DC:B9:F6:4B:78:A6:76:86:EA:8A:12:97:EE:D4
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584E4C549276D0FC903680CDF5C0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     18450
IP address blocks:        2602:f919:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:92:76:d0:fc:90:36:80:cd:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=fc7147d9-e329-48e4-aa59-18cb1bbd29a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:15:1c:cd:7f:62:1f:b2:1d:b7:41:e5:3f:
                    3c:a6:1f:cb:0a:7a:e5:bb:e4:e6:f5:12:05:6e:6d:
                    16:50:cf:b9:c8:95:92:c6:ae:29:0a:15:a4:cf:55:
                    1a:af:0f:21:ba:c8:29:19:f2:96:5a:d2:74:b6:83:
                    65:d1:8e:cc:18:26:f1:66:2d:49:cc:6b:79:dc:d0:
                    0e:ec:3d:ea:08:a4:22:9e:4d:88:47:13:1f:17:bf:
                    e1:e7:df:2d:5c:0f:f7:c2:8d:0d:e3:fd:fa:a9:32:
                    15:fb:48:2e:d8:55:25:62:cf:db:59:1a:0a:f6:d9:
                    63:d8:62:78:49:b9:5b:a2:fd:48:79:c7:5b:ba:03:
                    73:a0:6b:0d:af:af:f1:f6:ff:af:b6:75:89:37:79:
                    ff:2a:c0:d9:79:b1:17:77:2a:9e:a5:32:a8:0f:f1:
                    b7:d8:47:65:a3:52:86:c3:e4:29:7d:77:36:b0:54:
                    74:66:78:e5:6f:91:ec:dc:2b:0b:04:54:74:ca:84:
                    bc:15:cd:02:43:96:bb:4c:57:b0:d4:97:18:c9:a4:
                    0c:61:7c:b1:2a:22:a7:92:0e:3d:cd:83:5f:8c:44:
                    55:a2:92:ac:3b:17:eb:36:6f:f0:eb:8a:6d:7e:ad:
                    56:a0:2f:a9:27:32:6e:44:f9:30:d1:08:5a:83:3b:
                    06:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:BB:6C:6C:24:DC:B9:F6:4B:78:A6:76:86:EA:8A:12:97:EE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:34:8b:c3:f1:9f:89:a1:fb:e0:e5:2b:79:9f:01:1f:f6:0c:
         09:7e:af:b3:3a:04:c4:d7:2e:04:28:c6:18:72:7d:f0:b5:b8:
         4a:7d:19:d5:26:69:ec:9e:00:e1:f6:65:35:3a:48:10:df:35:
         f5:c9:57:8e:3f:7e:ef:28:d5:a1:ed:96:7b:fc:77:d9:87:75:
         d0:41:19:93:a1:57:4e:ca:6a:25:3d:c5:3d:3a:e9:d2:57:60:
         21:87:1d:37:78:23:42:e8:15:69:90:ce:0c:f1:18:94:ae:9c:
         81:ec:a3:82:1d:a1:3a:37:0d:25:00:65:e7:19:e3:a3:b1:6e:
         e8:2b:f0:d6:a9:67:d3:0a:70:a3:91:ce:43:27:fe:b5:ed:27:
         02:bf:c5:d2:b5:59:23:3a:66:7a:9e:3d:46:98:45:9b:e1:bb:
         68:04:f5:0a:c2:43:9c:07:b2:5b:54:3e:e0:2c:19:df:27:24:
         4a:9c:6f:3b:b6:12:59:11:18:2d:8f:40:b2:a3:00:56:93:7d:
         28:a3:a5:b7:d0:16:3c:36:d8:90:99:a9:8b:ac:74:7f:c0:eb:
         e3:ff:4f:9a:b7:d7:41:7b:55:8b:4b:e7:03:10:8d:89:2a:95:
         96:84:91:96:7c:1a:19:cd:8c:ab:85:fb:72:2e:09:ac:60:ab:
         66:a0:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:52 2026 by rpki-client