Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/b386c0ef-a657-3e9f-b599-f301eb291560.roa
File:                     b386c0ef-a657-3e9f-b599-f301eb291560.roa (raw, json)
Hash identifier:          lyBbzEL3lW3ME9lc+SaSKnlGw+B6epyZrSmTQI3ceNw=
Subject key identifier:   9C:B2:B5:DA:D9:A2:56:79:B1:4E:D3:EC:A0:52:00:45:01:85:63:EB
Certificate issuer:       /CN=a0ac972f-89d5-4709-bd00-5907e762ff2b
Certificate serial:       010D0C9F4328584E9EAFE5DFEB9FE34DF75C1100
Authority key identifier: 0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/b386c0ef-a657-3e9f-b599-f301eb291560.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     401264
IP address blocks:        2602:f856::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e5:df:eb:9f:e3:4d:f7:5c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ac972f-89d5-4709-bd00-5907e762ff2b
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=099fa6fc-9122-4951-85b0-fbb5c857669a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:9c:4e:61:55:fd:d6:4b:4e:bb:5b:81:35:
                    38:09:93:70:0d:42:96:96:af:70:97:eb:bc:1e:3a:
                    7e:4f:3d:9b:77:19:a0:e1:9b:49:86:eb:7d:db:8e:
                    6c:22:02:a9:34:8c:d0:67:49:1b:7b:99:a4:ce:f5:
                    a2:a1:f1:c4:0d:49:1e:36:60:7c:4a:4c:e2:9e:62:
                    01:7b:85:6e:a7:fe:94:38:a3:24:e7:38:9a:5d:c6:
                    7f:e3:ac:7a:27:fd:4a:84:b4:18:66:93:05:d1:64:
                    d3:0b:99:7d:d6:70:5a:9c:dd:c6:a8:67:a8:2a:8b:
                    94:89:99:27:89:25:85:5b:86:1b:07:bf:4a:81:16:
                    47:22:5b:51:be:36:78:b6:c1:88:5e:82:93:0c:93:
                    10:bb:30:a2:95:79:fd:f2:28:ef:bc:d0:bb:bf:4a:
                    28:2a:23:e5:8b:32:16:42:3f:c7:c4:6f:3e:a3:9a:
                    71:48:e7:c5:bd:3e:30:37:3f:75:9b:aa:0b:da:a6:
                    e8:87:d7:65:47:80:3a:bc:77:2f:75:3e:08:3d:47:
                    92:8d:f1:1f:dc:be:67:f6:35:44:58:32:06:93:df:
                    6a:d7:a2:88:72:6b:b7:b2:ee:c6:a7:8e:54:85:4f:
                    49:99:5a:94:e3:b7:3b:ec:24:f2:56:94:41:06:ed:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B2:B5:DA:D9:A2:56:79:B1:4E:D3:EC:A0:52:00:45:01:85:63:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/b386c0ef-a657-3e9f-b599-f301eb291560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.crl

            X509v3 Authority Key Identifier:
                keyid:0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f856::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:f1:34:f7:da:68:68:b3:de:03:e4:97:83:33:89:04:13:
         db:00:63:a5:82:61:cd:61:24:23:36:66:25:8b:6d:dc:55:30:
         d8:f5:57:0b:c6:ef:c1:8c:45:af:a0:0a:33:38:a0:7e:d2:1a:
         15:93:96:3f:d5:74:cd:f0:05:b2:e3:55:db:cc:29:77:d7:f2:
         47:3e:f2:85:87:a7:36:f9:f5:dd:10:94:a7:4b:2a:66:0e:5e:
         81:7c:34:f0:9b:bd:31:36:e1:57:06:2e:67:be:a6:0d:eb:91:
         da:58:a5:54:b9:03:ea:b9:4d:2a:34:6d:fa:c5:a8:c1:47:db:
         23:07:64:a9:e1:18:d5:35:d7:de:ea:e2:9e:86:48:7e:06:a8:
         b5:e9:05:16:67:71:56:ee:52:5a:92:be:01:fb:79:d4:e4:b7:
         b1:15:af:76:93:eb:c3:2b:b0:32:c0:4e:1c:a7:3e:7f:22:ac:
         44:19:c5:5b:d7:c2:8a:a8:2c:fb:65:e4:83:73:2e:1c:e9:d0:
         cc:9f:80:85:2b:e5:1f:24:45:f5:81:6a:42:c3:2a:73:37:c1:
         fb:a4:1f:4a:59:4d:c3:4c:fc:62:d0:eb:b7:b6:06:a0:b2:df:
         15:26:7d:f8:78:87:e0:2f:30:78:ea:7d:79:bd:8b:d8:6f:39:
         25:b6:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:41:04 2026 by rpki-client