Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/161fafc6-0e07-3606-bb70-4c19f6e30fb6.roa
File:                     161fafc6-0e07-3606-bb70-4c19f6e30fb6.roa (raw, json)
Hash identifier:          VNnFJroEoLZ2PeQ+Q83OU8e7IJYMMl6X6Mww+p8GSfQ=
Subject key identifier:   A3:B8:D4:D8:F3:90:49:B8:26:FF:2C:03:CE:E5:54:A4:52:64:E1:B8
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E709F706F455EF4E0B458A180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/161fafc6-0e07-3606-bb70-4c19f6e30fb6.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c94::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:70:6f:45:5e:f4:e0:b4:58:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=76ed1f33-fa1c-4f56-ba1d-900b6edaa5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:5c:16:9a:0e:89:7d:3c:64:3a:84:44:03:
                    bf:55:bb:32:78:55:cd:2c:42:98:e7:31:bf:b4:d1:
                    34:70:0e:41:2b:cb:30:53:05:07:bf:c6:11:aa:11:
                    d1:e7:ee:e9:69:a3:1b:ee:f1:24:35:13:4d:8d:f1:
                    43:2d:56:25:21:30:c1:7c:c3:cf:50:5d:db:fb:0b:
                    b8:e1:13:66:64:63:18:9b:be:6d:aa:5f:84:7d:ad:
                    5d:c4:ab:df:f2:12:16:73:3a:76:b2:5c:5a:4f:d2:
                    0f:1c:c4:53:95:38:8f:91:5c:43:51:7d:bb:88:48:
                    de:14:dc:41:da:3f:d1:b7:ef:93:8c:b0:65:7b:32:
                    06:89:03:68:f5:0b:2e:23:2a:99:84:9d:6f:f4:14:
                    ff:88:69:1f:ea:24:36:26:7a:b8:6e:39:0f:28:a7:
                    65:06:11:15:d8:c1:d9:ad:02:b2:99:eb:23:e4:34:
                    1f:16:ae:a8:25:80:d6:00:a3:68:00:0e:0f:56:d8:
                    fa:35:0c:3b:20:45:df:8b:8c:61:c3:d8:97:ce:1b:
                    6a:72:42:a2:d4:2d:9b:c9:1c:a5:f6:19:bd:28:d6:
                    03:81:42:9e:c6:0e:50:f7:47:36:10:3a:b0:af:f4:
                    12:d2:49:f8:aa:9f:fc:b2:96:da:9f:23:c2:87:7a:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B8:D4:D8:F3:90:49:B8:26:FF:2C:03:CE:E5:54:A4:52:64:E1:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/161fafc6-0e07-3606-bb70-4c19f6e30fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c94::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:67:77:ed:04:c8:87:7e:db:21:4d:34:38:6c:f2:0d:7d:
         51:59:54:5b:c2:73:6b:95:7d:a8:85:98:ec:67:9d:38:7f:91:
         2f:90:80:db:29:85:38:bc:b9:ff:f8:9d:57:ad:2b:69:5a:e4:
         80:af:57:74:9f:9d:7e:dd:12:26:d1:75:8e:9a:d6:6d:82:6b:
         d9:13:96:39:fb:8f:09:b6:1e:7f:b6:dd:e0:b1:03:e6:52:12:
         81:5c:25:b7:9b:35:90:c7:fa:ba:b4:ce:69:ed:2a:84:c5:4c:
         63:27:b0:22:b6:6a:13:91:b9:41:63:43:f0:67:14:4b:67:2c:
         72:f6:6c:3b:04:c1:5b:95:71:5b:d1:05:29:56:87:0e:4b:37:
         8d:7b:bb:dd:79:75:41:60:2d:c2:06:a2:ba:84:a8:eb:0a:e2:
         03:46:22:81:0b:61:1d:af:1a:33:19:ad:ca:65:3e:61:c0:23:
         4f:cb:b5:1f:2a:4a:d0:5f:ed:b2:c7:51:c8:11:a0:44:ca:33:
         f4:93:9a:bc:c1:e8:79:54:74:33:7c:c3:77:d3:92:a0:93:43:
         65:5f:2c:19:75:39:d5:32:5c:36:1c:1c:3d:28:80:1c:39:a0:
         d3:d1:6e:d7:ad:37:fa:49:0b:d5:ca:b9:03:c1:56:be:11:35:
         33:90:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:58:40 2026 by rpki-client