Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/c9b0b66c-7be4-3cdb-b316-fe604c337bde.roa
File:                     c9b0b66c-7be4-3cdb-b316-fe604c337bde.roa (raw, json)
Hash identifier:          NAhYgvr4IEXHM/IZzb5fF0HQUBrUsZq5Eq09r04PKyY=
Subject key identifier:   FE:EB:F6:1D:B3:58:3D:14:9F:A8:FC:20:E2:50:D1:99:B0:DD:5C:68
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584EA7950FE064F54FCB0C7BD9D0
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/c9b0b66c-7be4-3cdb-b316-fe604c337bde.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401776
IP address blocks:        2602:f921:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:0f:e0:64:f5:4f:cb:0c:7b:d9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0af10810-6bd9-4bf6-b369-2be85039e7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:94:b7:3d:27:0c:d6:39:dd:d6:a8:84:3a:
                    9f:0a:c3:b3:da:a6:79:25:51:84:c9:10:07:94:1c:
                    86:7c:ee:b8:eb:d5:bc:b5:db:31:c1:48:04:13:b5:
                    34:9f:5c:ce:42:fd:55:76:2e:5a:ef:ab:67:c8:35:
                    e1:17:eb:4c:91:d6:a6:de:e6:6f:8d:45:f4:10:c7:
                    1d:2b:34:1e:d2:0b:d8:b8:ac:b5:ba:ac:5f:93:b9:
                    2b:22:26:76:59:f1:79:0e:5c:c8:be:1e:4e:44:66:
                    f8:db:5c:31:7d:4a:4e:14:31:a5:c7:de:53:ca:8d:
                    28:f8:c0:1a:91:94:13:24:4a:dd:98:96:dc:66:40:
                    a9:cb:80:17:4d:0a:5d:b0:d5:eb:d4:1d:d6:cd:9c:
                    31:2d:31:bc:a5:35:3b:8e:e7:f3:ac:76:2d:67:30:
                    8f:a2:18:82:08:f0:32:f6:ab:58:1f:f5:cc:e4:d3:
                    54:15:7a:c1:a4:e2:44:47:3b:68:85:17:16:41:67:
                    be:95:91:8f:3a:7b:3c:6c:38:be:e5:45:42:20:93:
                    96:b9:2d:49:4b:f8:7e:3f:f0:30:3a:6a:b7:67:bd:
                    ec:8e:7d:ec:9d:71:f3:39:fa:c8:bf:d5:e3:17:af:
                    2c:32:61:b4:78:57:dd:4d:dc:86:c6:79:ba:76:f9:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:F6:1D:B3:58:3D:14:9F:A8:FC:20:E2:50:D1:99:B0:DD:5C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/c9b0b66c-7be4-3cdb-b316-fe604c337bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:4f:a2:2a:81:bb:5b:5f:53:00:cb:ec:e5:20:d0:17:2f:
         7e:6d:6e:b9:9a:40:43:91:dc:59:7b:26:bd:6c:f5:e4:11:07:
         58:fc:33:9b:3b:61:16:32:24:d2:ce:d7:76:fd:a6:a4:bb:0e:
         42:55:02:a2:97:2e:ff:a7:b3:f6:4c:c7:3e:31:84:0b:f6:f9:
         fa:cc:99:1c:a8:e6:32:22:a6:11:af:34:2a:75:b8:a0:75:d0:
         cc:dc:48:05:6c:3d:f9:1a:6c:e4:97:ab:24:88:ee:04:f6:15:
         a2:7c:7b:b9:4d:4f:1f:96:69:e7:94:17:28:ae:20:e1:1a:5f:
         1c:0e:d1:d0:14:57:5e:c8:9c:f7:46:f9:ed:ca:22:3e:cd:40:
         09:46:a5:c6:4f:53:42:7d:84:4b:c3:ae:13:22:6d:b6:ed:f7:
         f6:80:7d:d1:99:c2:73:46:43:e5:f7:1a:87:d7:1b:43:f5:23:
         02:05:d7:7d:04:3e:1d:7f:97:31:09:2c:33:d3:3a:bf:38:f8:
         6c:f9:fa:48:71:88:c0:66:18:c6:f1:a0:b8:ba:5b:89:9f:25:
         ad:c7:55:97:dc:6d:e0:f6:76:cf:05:3e:bf:2e:dd:18:e8:d5:
         e9:09:63:af:4c:12:23:a3:60:59:34:be:27:a4:29:b5:54:88:
         46:c2:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:15:18 2026 by rpki-client