Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          KMwMgob/P8+KLbbtwMkkCa0KvvysChsn3M9MumTu1r0=
Subject key identifier:   59:57:5F:A2:9B:8A:97:58:A1:9E:5F:51:3E:C7:60:9E:34:48:97:B6
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584E54B49235601918333C95F880
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:92:35:60:19:18:33:3c:95:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=7d6827ac-3ab3-447f-b95b-1c8901f0584a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:92:08:85:9b:98:10:ea:10:1c:66:40:95:
                    af:f3:43:88:c5:c1:ac:48:d8:41:cc:72:71:c0:51:
                    b5:b8:fb:eb:fc:91:ad:14:99:9e:86:cd:73:75:62:
                    59:3e:46:7a:0b:a2:14:ae:14:e6:6d:b6:3a:d3:67:
                    5d:40:9c:3c:30:b5:91:a6:89:17:8d:db:0a:bd:34:
                    5b:bd:ee:cb:f8:3e:14:c3:61:b4:ad:19:12:03:b6:
                    bf:13:ac:6b:92:e7:93:8b:35:8d:8e:57:64:cf:a5:
                    ef:69:ee:96:20:11:59:01:ab:bb:c3:79:7f:79:29:
                    3d:3e:51:a1:0b:06:5a:bf:2a:68:0c:98:e6:a8:7d:
                    fb:a0:7b:16:48:e1:ee:a4:f8:81:21:af:1b:e5:f0:
                    a1:3b:17:eb:fc:d7:17:69:8d:bd:7d:e8:e9:b7:9c:
                    dd:91:aa:99:1b:60:91:4f:15:81:c5:5e:b1:e1:c7:
                    d3:72:a0:a0:99:aa:e6:06:ef:d3:3d:c9:da:ea:25:
                    cd:d8:da:62:37:50:8a:95:78:3f:39:a0:95:f8:eb:
                    46:f7:12:d8:55:1d:94:de:af:45:f4:39:4f:c9:8c:
                    1c:cd:83:49:de:12:d7:92:ef:77:d2:0c:5c:68:aa:
                    cf:bc:59:50:46:cd:19:84:79:d3:bd:48:79:d8:e9:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:57:5F:A2:9B:8A:97:58:A1:9E:5F:51:3E:C7:60:9E:34:48:97:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:bd:22:25:35:c5:f9:99:ee:98:eb:f5:b7:ad:9f:5b:bf:
         5f:3c:a5:1b:d7:f3:a7:c6:09:cf:7e:8c:07:12:75:58:92:8d:
         04:ee:36:9a:68:42:93:fe:b8:68:8b:53:0c:8d:48:fc:2d:6c:
         9d:bc:a5:63:b1:c7:5f:58:ae:61:3d:a7:0e:47:e9:3b:b8:b6:
         36:41:21:47:67:31:68:d2:47:3d:ec:e2:56:b9:c9:f8:b7:0c:
         6c:49:a4:f0:c2:33:91:b0:f4:22:78:20:a6:c3:01:83:47:eb:
         20:e6:ff:46:ff:7c:90:26:95:7b:23:a4:71:8d:62:39:b6:99:
         8f:ff:fa:e7:ab:39:d6:93:01:35:07:38:34:8c:a5:1f:2c:cb:
         7b:34:71:3b:3b:bc:e6:e2:65:e9:07:bd:d6:e7:ae:c8:47:84:
         ea:dd:d7:0b:9b:0e:36:ba:b4:e0:45:53:34:aa:c0:a1:78:f7:
         d2:52:24:78:77:48:40:f0:86:4b:02:d1:4c:b4:db:9f:c5:cb:
         b7:a1:c5:63:67:f0:8a:80:be:44:eb:e3:e2:00:d0:d0:29:c4:
         56:fd:5f:0a:2d:76:04:1a:8b:4b:64:eb:69:6b:f5:0e:d6:32:
         f5:55:d6:14:f3:1f:c3:45:d7:95:15:93:32:4d:06:9e:93:0f:
         e7:a3:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:32:09 2026 by rpki-client