Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/3883250c-fad2-34cd-850f-3a82a5023d92.roa
File:                     3883250c-fad2-34cd-850f-3a82a5023d92.roa (raw, json)
Hash identifier:          2z7A+3ENx2NfsAkBDV/0mH1yGy9l+WWmgw1f5OEpz/8=
Subject key identifier:   0F:D3:1E:C9:48:4F:4C:0E:3C:D4:63:06:3D:2D:78:F3:AC:E3:69:C3
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F4328584EA797CD5029D3A39D8ECEC980
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/3883250c-fad2-34cd-850f-3a82a5023d92.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2602:f8b4:2::/48 maxlen: 48
                          2602:f8b4:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:cd:50:29:d3:a3:9d:8e:ce:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2335b444-43e7-4112-b982-b00f1eac1a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:26:06:30:e3:80:0d:fd:31:7e:c3:58:34:
                    8c:15:04:4b:7c:70:77:ac:f7:71:28:0b:9d:39:4b:
                    0a:c3:d2:03:9f:fe:20:a3:67:99:3c:3e:2b:05:ba:
                    26:8b:32:73:e7:24:e8:48:2a:62:4d:c9:67:a2:dc:
                    e1:4e:c2:1c:27:fa:a2:c5:0b:ee:a9:d7:2e:82:ed:
                    73:f8:89:ba:c3:46:89:d1:0e:cf:ac:df:ef:22:a1:
                    ca:18:89:d7:57:41:12:04:40:46:44:30:da:e3:d9:
                    d8:30:e5:1e:1c:dd:e9:c7:10:d2:10:fc:db:9a:e6:
                    66:86:f0:f2:0d:79:ed:fd:6c:53:05:48:68:39:51:
                    63:ed:6b:fc:50:3f:6f:fa:57:27:f2:72:53:33:55:
                    87:1d:8a:07:6c:d0:94:4a:d0:8f:89:0e:32:6e:c7:
                    d7:e7:33:92:85:8a:68:44:61:5c:38:dd:6a:eb:f8:
                    31:40:68:fe:fa:cd:a9:9b:96:3f:aa:bf:66:20:c0:
                    8f:2b:21:91:62:46:95:a6:a9:ce:be:b9:f8:a3:60:
                    d9:34:61:09:79:7d:29:4f:a6:86:4e:20:fd:cf:c1:
                    9a:4d:ac:2f:ff:7d:fb:2c:1c:56:2c:96:1b:40:c2:
                    54:ca:88:09:04:cd:df:f8:74:e6:0a:b6:f5:b4:7d:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:1E:C9:48:4F:4C:0E:3C:D4:63:06:3D:2D:78:F3:AC:E3:69:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/3883250c-fad2-34cd-850f-3a82a5023d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:47:2c:db:13:15:6d:ce:d7:7e:47:3f:23:ed:43:57:da:
         02:12:76:75:63:d1:34:a6:a7:43:e6:a5:35:c7:7a:40:45:74:
         85:48:ef:7d:15:93:cb:44:e8:d2:91:f5:14:2b:8b:0c:7a:c5:
         db:51:24:a9:d7:aa:90:5b:05:2d:33:c1:f6:13:db:45:50:26:
         dd:13:19:be:9a:1f:50:76:20:6e:75:62:7f:80:54:21:eb:f4:
         42:1a:ad:55:19:da:86:d2:82:50:f5:9b:fa:e1:f3:35:ef:5d:
         8d:02:28:0a:ea:f4:40:fb:96:3b:ab:a8:a7:7e:9e:6e:5c:c9:
         1a:79:52:7f:77:f5:6d:ee:f2:5e:ca:e3:41:a7:3f:a3:4f:63:
         0e:e5:2b:2a:66:27:9e:1d:29:70:af:12:29:b4:a7:52:a2:8e:
         fe:8a:45:2e:a6:fb:41:64:cb:68:2a:e9:fc:fb:92:b0:5a:d2:
         4d:fa:92:58:aa:29:c4:77:aa:30:60:40:2d:62:3c:26:f7:ce:
         cb:5c:52:07:63:bd:1c:bc:41:9d:e9:16:16:98:a4:c0:9c:48:
         17:cd:32:49:5e:bc:74:67:00:a4:b7:d9:c5:d4:6c:9e:5f:15:
         14:8c:e1:2d:af:81:bf:b3:7b:46:37:e7:29:70:82:24:26:5d:
         eb:ee:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:41:04 2026 by rpki-client