Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
File:                     dfef8664-2552-32ef-ab49-09e987678f7f.roa (raw, json)
Hash identifier:          LTdQi7qqBzpwdSdkBohKyjRNQGXtDaN5X0r6ectb8ZA=
Subject key identifier:   B0:92:29:C2:92:DB:8E:03:D2:9F:51:15:26:F1:15:4F:AE:68:73:67
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584EA78758AAACC6441C3F7A6200
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:58:aa:ac:c6:44:1c:3f:7a:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=233db9ab-3374-41f4-a9a4-e6cf4b815c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:90:77:a6:cd:10:cb:b8:7c:ec:43:13:0d:
                    9a:03:56:52:97:04:e5:ff:06:c2:a5:12:8d:26:19:
                    fe:02:45:dd:f8:5d:05:13:6d:ba:8f:79:13:e1:e1:
                    dc:44:78:0b:83:66:80:b8:91:3e:7b:ad:e9:a6:17:
                    2e:19:3b:a6:b8:f3:85:15:69:55:1f:7d:aa:de:52:
                    1f:70:11:92:ae:8c:13:0b:61:50:bc:1e:67:fd:b5:
                    22:fd:42:cc:65:53:77:62:dc:16:24:61:db:07:be:
                    04:69:38:c5:10:35:5d:1f:ba:9e:12:28:72:78:35:
                    80:ed:18:d7:8a:11:5d:a7:42:c8:7f:90:c5:3e:94:
                    0c:85:34:e1:68:c1:67:9d:86:ea:47:1c:6e:36:d3:
                    17:32:81:ce:c7:d7:9f:2e:f1:78:12:34:88:c9:92:
                    a6:8e:2e:c8:07:b1:85:47:bc:b7:67:c6:85:e3:02:
                    2b:f5:e7:a7:aa:34:e9:f2:75:8c:bb:6c:10:5f:d5:
                    43:f6:31:32:e9:b5:e6:eb:35:40:2b:f4:9c:73:43:
                    3e:c2:12:0c:e2:7e:67:cf:01:fc:6c:56:37:08:d1:
                    2c:32:68:8d:de:53:4a:6f:c9:36:26:b2:f5:85:de:
                    50:58:57:42:2c:2d:b1:f4:ad:48:28:46:1f:45:f1:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:92:29:C2:92:DB:8E:03:D2:9F:51:15:26:F1:15:4F:AE:68:73:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/dfef8664-2552-32ef-ab49-09e987678f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:8c:ba:33:f5:79:ec:a9:0b:84:80:72:83:7b:da:3b:bd:
         d6:de:ae:07:a8:3e:cd:41:0a:1c:0d:df:5f:52:9b:35:8b:b6:
         8c:40:90:69:85:58:1b:48:bd:a2:44:fc:ea:05:66:17:28:3f:
         f2:57:81:ca:71:aa:13:51:5a:ed:5d:57:24:4e:2e:a6:7e:ae:
         bf:78:a3:34:0c:95:47:bc:70:bb:5a:ba:17:fd:0b:7d:62:9e:
         2e:87:38:2f:c7:a1:d6:99:61:97:ce:63:d9:a0:22:39:c6:dd:
         9e:82:ce:5c:35:f9:17:10:a7:e8:6e:d4:d2:c9:48:47:fa:d8:
         83:d5:7b:74:1e:3f:8d:20:83:0d:89:f2:ed:8c:cc:3e:13:9a:
         32:f6:80:3b:fb:5c:f6:74:01:de:9c:fe:9c:74:25:58:2d:75:
         9e:df:b6:bc:46:23:8d:90:40:e4:ee:b2:34:91:25:1b:5c:30:
         1c:58:38:fe:00:12:14:bf:a0:f3:d6:2a:ba:49:fd:24:55:ac:
         42:28:37:72:2a:c8:a9:3b:12:41:c7:31:55:37:f5:a9:f8:80:
         00:78:9e:54:38:1a:ea:23:5a:bc:38:69:84:33:c1:5c:fb:4d:
         01:7b:b5:6f:e6:d5:bb:61:1a:91:af:59:98:48:4d:03:fb:4d:
         04:40:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:29 2026 by rpki-client