Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa
File:                     dfadf87e-0496-385c-917c-9e5b4e76da6d.roa (raw, json)
Hash identifier:          SVYCEu5+BzXMN593Sh4lvV1duEj7lfUX5vb0aBnvIwI=
Subject key identifier:   E2:F7:82:BB:54:6C:EC:90:49:8E:D3:C5:F5:7A:80:89:2F:F2:75:F0
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F4328584E104EEB7339AC6D29FAC0D380
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     401133
IP address blocks:        2602:f8a3:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:eb:73:39:ac:6d:29:fa:c0:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=ae9d6bed-e0af-4ad4-984f-19d9191a1f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:2e:66:3a:5c:db:d0:79:07:a7:7b:9f:f7:
                    0a:e4:8c:5a:34:85:09:db:9c:b7:85:6e:46:f3:e1:
                    a8:5c:01:ca:49:97:4c:3a:b3:40:f9:4c:09:f3:33:
                    8b:e7:db:29:d4:d4:f8:eb:13:8b:48:88:8b:7c:d7:
                    9e:47:12:5b:1d:e3:d8:f4:5c:07:e8:7c:62:2a:16:
                    14:01:e6:45:d4:12:b4:65:37:17:cf:38:3a:94:ac:
                    db:ae:5e:ac:d2:fd:e2:ff:e0:d8:24:a0:83:56:2b:
                    f2:73:06:03:d7:7c:bb:98:a5:51:05:9e:da:8d:30:
                    4a:9b:d5:28:ea:62:a9:bb:76:8f:8b:01:61:d8:42:
                    fd:19:41:1c:90:55:27:b8:07:94:14:00:f9:f6:92:
                    e2:3b:85:2b:7a:5a:21:6c:34:88:25:3e:6c:45:f9:
                    c0:17:2b:08:78:b9:f8:51:4b:9a:0b:29:55:db:15:
                    21:22:a4:29:f5:41:85:31:67:57:3d:06:c7:d8:4d:
                    16:e4:9f:f3:52:f7:84:dd:9a:95:54:37:19:53:6b:
                    2a:09:12:5d:3b:a6:6c:e9:70:1d:45:0c:ac:51:91:
                    44:b4:17:0c:dc:2f:a1:ef:52:d6:3f:c3:07:77:17:
                    8f:8d:ec:f2:25:68:28:95:c3:a6:59:b8:52:b8:67:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:82:BB:54:6C:EC:90:49:8E:D3:C5:F5:7A:80:89:2F:F2:75:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a3:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:40:45:cb:48:2f:5d:2b:21:7e:61:98:2b:ae:19:2a:13:3d:
         e0:79:a2:51:52:20:47:b9:25:a6:18:1b:10:81:3f:57:f6:fc:
         d8:b9:b6:c4:a6:37:17:8f:df:a0:53:3c:7a:63:4a:54:db:a3:
         b8:3d:0e:72:dc:52:99:4b:eb:59:f5:23:60:68:c6:e5:ac:1f:
         86:4e:f4:ca:55:de:78:ad:ab:9b:26:20:18:a3:2e:5c:9f:0b:
         48:7b:81:36:37:28:d7:e5:f8:32:1f:f5:de:cb:9c:77:ab:cb:
         73:cf:d6:fd:3b:7e:a1:7b:e2:a9:62:31:51:36:d2:69:11:05:
         35:fb:8e:e6:84:07:34:35:06:88:d4:b2:f2:d1:c3:0c:63:bc:
         9e:95:6e:50:cb:60:24:6d:52:fb:f8:5d:cf:fc:60:a5:94:f6:
         0a:de:35:34:8a:73:8b:22:34:f1:5a:e5:70:4f:59:fa:53:9d:
         84:69:f2:29:67:95:36:57:8d:df:fb:7a:79:4b:ba:43:e8:b3:
         a6:12:7b:e2:58:09:d8:74:11:bd:30:ce:0b:1f:00:a4:7d:cf:
         42:ed:5b:37:06:4b:ac:03:5a:ca:c8:28:7b:24:d6:b1:f4:f0:
         ee:85:53:38:c1:1e:cf:5b:ae:dc:bc:ce:d4:58:9e:d2:c2:9a:
         b1:31:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:49:25 2026 by rpki-client