Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/3509d41f-43dd-3375-95a3-8ee40f15123c.roa
File:                     3509d41f-43dd-3375-95a3-8ee40f15123c.roa (raw, json)
Hash identifier:          zogosfuH4G73+awGQx6CxvAcyATgIU1cy9JYjrt23sk=
Subject key identifier:   FB:60:B9:AF:F9:B1:96:D5:C3:E6:37:09:E4:34:49:F4:3A:E4:78:7E
Certificate issuer:       /CN=6ca48f95-35ec-4aa1-97a3-249116154b70
Certificate serial:       010D0C9F4328584EA788C6117E6A1E972C1E1380
Authority key identifier: 45:59:1C:04:0C:8E:95:18:61:70:D0:88:51:C6:84:C1:F4:38:3E:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/3509d41f-43dd-3375-95a3-8ee40f15123c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12036
IP address blocks:        2602:f4f9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c6:11:7e:6a:1e:97:2c:1e:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca48f95-35ec-4aa1-97a3-249116154b70
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dc4fbe97-64a8-4f15-9278-b9f516360ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:5b:ce:fb:e8:c7:ed:84:82:c9:13:05:05:
                    07:8a:08:1b:7a:c2:a4:71:e5:25:40:99:38:16:65:
                    1d:7d:85:73:5b:3a:7c:d1:12:b6:80:71:46:64:73:
                    f2:7e:b5:c2:1e:3e:7a:70:9a:88:23:ff:c1:ab:db:
                    12:03:db:a6:13:84:68:f0:ce:1a:58:48:ec:66:e2:
                    c6:81:ee:e4:0b:1d:bd:48:ea:ae:3b:7e:ad:c3:dc:
                    80:bd:3d:d5:c1:bd:bc:17:1d:1a:91:53:60:81:63:
                    21:75:b4:d4:90:98:71:58:e2:b6:09:13:de:dd:d6:
                    8c:7b:e6:65:28:95:60:21:ee:08:4f:a7:4c:2c:07:
                    7f:1d:66:87:7f:a7:6d:46:18:d4:95:fd:33:aa:80:
                    b5:39:e6:6a:15:e0:4f:c9:46:d8:c9:4f:6f:55:1e:
                    cd:aa:07:9b:d5:78:9a:fd:dc:36:68:d7:cb:ba:c4:
                    ff:53:76:da:56:59:db:18:cb:91:d8:05:12:53:7d:
                    ad:6c:67:b5:c4:81:39:ed:f2:53:14:91:24:18:cb:
                    d9:15:5c:23:0a:e3:0d:6f:a7:dd:a4:87:9c:c5:1c:
                    1c:f4:2f:5f:2f:a8:b1:30:4b:f6:56:a8:77:ab:e4:
                    4e:40:2c:a5:ff:70:d2:a8:bb:bc:cd:92:c4:60:9b:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:B9:AF:F9:B1:96:D5:C3:E6:37:09:E4:34:49:F4:3A:E4:78:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/3509d41f-43dd-3375-95a3-8ee40f15123c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.crl

            X509v3 Authority Key Identifier:
                keyid:45:59:1C:04:0C:8E:95:18:61:70:D0:88:51:C6:84:C1:F4:38:3E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4f9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ce:22:95:94:81:cc:e3:c3:8f:c7:b6:0e:df:d7:a2:0f:49:
         6b:7c:53:2e:fd:f2:41:cc:65:f7:40:df:4a:6f:6f:60:56:c1:
         e1:8d:56:f9:51:77:8e:4d:e8:71:e9:62:b2:bf:c9:17:02:fc:
         1f:00:3e:c2:90:df:4d:54:18:c0:5a:05:0f:aa:d4:d3:1c:93:
         cc:8d:d6:2f:cb:52:cc:36:71:0d:72:31:10:c2:f8:bc:cd:2a:
         0f:10:2c:fb:13:f5:4e:5f:de:fd:8b:ee:7c:b0:3a:18:a6:6f:
         21:dc:45:f6:31:7d:1e:82:49:3e:b2:26:df:0a:28:81:a4:fb:
         d6:b8:68:70:18:4a:6f:33:e2:10:d4:7f:f5:95:30:d1:cd:d4:
         c1:6b:8e:e9:14:1a:9a:9f:9c:e2:72:7a:0b:e9:29:78:f3:c1:
         be:96:89:f6:b5:e2:e7:2f:46:b7:9b:89:b5:f4:cc:ec:bb:e5:
         b9:ba:a2:6c:9b:f6:5d:69:3c:f8:5e:b2:13:64:c7:e0:da:95:
         bb:ca:1f:f0:0a:d8:6a:03:1e:2b:d5:ad:be:8a:05:3d:83:f6:
         2d:c4:95:43:c9:c4:69:46:96:b0:51:1e:1d:36:86:48:01:22:
         c6:ee:80:8e:b8:10:79:0c:f2:75:6b:71:d8:18:3a:f1:ae:26:
         95:00:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:40:22 2026 by rpki-client