Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          HKRYlYZ0SUW4LABT1nZmqo2lN9z0NjbGWQLrPciimVE=
Subject key identifier:   6B:8D:3C:A3:95:A6:B2:B7:F5:E6:39:8A:FC:EE:93:2D:5E:81:5C:BE
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584EAFE6F6939E21CB6191C7D980
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f6:93:9e:21:cb:61:91:c7:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=09456ad2-2e0a-4ead-8ab9-65702d00f960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:54:ee:03:f6:44:81:c8:c4:0e:9c:31:31:
                    cc:27:17:92:f0:4a:22:44:f5:c2:ef:fe:c6:52:37:
                    25:b6:98:56:47:6d:11:be:6e:96:fa:26:23:77:8c:
                    ff:a5:a4:bc:e0:8e:63:1d:5b:7d:a6:d8:f3:ac:dd:
                    ab:b5:66:c5:0b:da:64:d0:41:ee:40:95:1e:c1:8c:
                    2f:72:14:7d:fa:40:16:6c:48:3b:92:dd:14:2b:82:
                    b2:8f:00:eb:89:d8:ef:21:07:b4:96:9e:e5:be:22:
                    e2:7e:7b:78:60:a3:5b:c9:24:ac:19:30:38:9e:9a:
                    bb:d2:44:23:e4:1e:eb:4e:e3:71:a3:23:e1:34:25:
                    f1:c9:ca:a4:5a:c3:b6:45:04:68:c5:9f:41:9b:6d:
                    d6:e4:05:42:f9:09:a6:be:4c:43:6f:fe:47:84:9a:
                    6d:be:fe:4d:2b:3f:35:ec:4e:f1:c4:1a:e6:50:81:
                    f3:d7:dd:11:a0:9c:f4:b1:ee:a6:3d:a4:09:7d:06:
                    cd:b9:9e:45:be:7a:bc:cb:a3:94:9a:ee:42:12:36:
                    59:c5:a3:79:d0:b8:82:6c:a4:d7:34:66:fe:67:8d:
                    4b:a2:8b:9d:71:e0:a3:48:5c:74:79:bb:cc:e7:90:
                    1f:04:7a:4b:b6:39:92:fb:75:ef:63:20:9b:8b:31:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8D:3C:A3:95:A6:B2:B7:F5:E6:39:8A:FC:EE:93:2D:5E:81:5C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:c1:2b:c0:93:3f:77:fb:37:97:04:2f:f3:f9:f9:af:e5:
         22:be:40:c2:bf:3f:c5:99:04:45:89:d0:11:6e:f9:da:98:15:
         b8:32:41:fb:f6:e1:1e:1f:90:c2:2a:3a:4a:97:59:e5:5b:ae:
         9d:4b:91:8e:08:e5:c9:2e:48:53:d1:01:d2:7b:98:91:7f:cf:
         f5:00:a2:05:22:5b:b0:0c:0a:8f:47:98:66:6a:01:97:0d:b9:
         a2:26:14:38:5f:32:12:24:26:5d:67:2f:37:be:fd:cb:15:95:
         57:24:38:3d:fc:52:a9:07:a3:4a:58:29:91:84:67:d0:3a:5c:
         05:35:02:e4:d3:eb:36:1c:1f:0c:37:ce:8b:8a:c2:6a:23:c6:
         2e:8e:50:fd:97:d2:fa:21:4b:27:88:12:6c:c4:e7:78:28:8b:
         95:15:25:8d:ea:13:df:2e:6e:7e:ad:2b:1a:dc:53:d1:1a:8c:
         cb:79:5e:fb:68:b3:c1:49:e6:4d:57:5b:2a:fc:46:22:10:78:
         f0:f0:1e:ce:0d:3a:a1:f2:80:70:9d:cd:89:26:c6:77:1a:61:
         cd:72:fb:7b:de:13:1b:25:bf:4d:a2:1d:8c:37:b0:fc:db:93:
         ee:01:75:3f:d3:bf:ab:a7:e9:90:b7:b6:6b:eb:4c:39:a5:b4:
         3a:ff:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:21:52 2026 by rpki-client