Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b2bdc7bf-0cc3-389a-92bf-6c5876fa19cd.roa
File:                     b2bdc7bf-0cc3-389a-92bf-6c5876fa19cd.roa (raw, json)
Hash identifier:          ElP7oNx22H8d6ARNAbQ4SzkRIpP8frmYpnsGdqit4+o=
Subject key identifier:   C1:49:0F:BE:71:48:35:A1:84:5D:B5:6D:BC:49:38:17:03:C0:97:01
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584E9A7FD22CAFACD38A416D0680
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b2bdc7bf-0cc3-389a-92bf-6c5876fa19cd.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     395649
IP address blocks:        2602:fd6f:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d2:2c:af:ac:d3:8a:41:6d:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=8f14aec3-7435-458f-a371-7485fb7f822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:72:75:79:57:07:b0:dc:7a:0f:f3:15:2b:
                    82:f8:5b:48:9a:c3:80:f7:41:21:49:d4:e2:bc:72:
                    16:ec:c5:da:97:4e:39:54:cf:35:06:d9:01:45:80:
                    fc:ce:36:93:89:b6:3b:0a:a8:71:e0:ce:b4:8b:4e:
                    69:60:a7:04:b1:e0:8e:82:47:f2:9d:46:88:c4:12:
                    25:63:20:23:70:5f:3d:66:ed:89:ae:32:af:44:f1:
                    34:fa:a1:49:c9:5b:ce:a7:12:cd:8b:d6:5b:0f:36:
                    3a:3f:cd:ea:0c:73:74:84:c3:61:e6:58:93:35:ab:
                    74:61:ab:8f:6d:df:c5:da:fe:c2:29:f0:a6:38:52:
                    4a:c9:10:08:34:ae:94:14:2e:90:89:35:41:10:54:
                    dd:9d:a2:71:2e:fc:75:4c:4a:4c:cd:1e:b0:7a:dc:
                    a1:7b:11:8e:90:da:20:c5:02:e1:43:f0:2a:25:a4:
                    69:e5:1a:cd:21:a4:1d:a0:cb:8e:34:92:9d:44:ba:
                    96:8a:87:1b:2a:fe:95:5e:a0:d6:44:2d:f3:f8:16:
                    37:0d:79:e6:3a:a5:2e:8a:bd:89:e3:d0:c3:b9:c2:
                    48:f7:24:8b:87:12:af:9c:79:ad:57:e8:43:c4:6d:
                    5f:ea:37:01:0d:b2:6e:26:cc:48:cd:1d:41:e0:c5:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:0F:BE:71:48:35:A1:84:5D:B5:6D:BC:49:38:17:03:C0:97:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b2bdc7bf-0cc3-389a-92bf-6c5876fa19cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:46:84:2b:11:4d:8f:8b:f6:28:7b:49:f5:8e:48:48:27:04:
         a0:26:c1:57:f7:6c:ff:5e:b9:19:a5:9f:d0:c2:88:ed:03:7c:
         06:84:fa:1f:65:ed:fa:58:c7:42:9c:af:05:02:c8:45:6f:7f:
         64:e3:5b:a1:3e:07:18:c1:8e:fa:8d:6b:45:1c:72:da:d0:79:
         64:64:c0:49:93:02:c6:93:54:7f:1d:73:35:75:41:2b:5d:60:
         14:4c:c1:ff:24:45:07:4f:4b:9d:95:13:10:7c:51:c7:0d:03:
         7a:54:01:31:7d:2d:9c:88:25:d2:57:ff:6c:25:17:a3:aa:6d:
         2b:33:cf:05:b4:fa:2f:68:e4:6b:23:9b:4b:52:9f:97:ae:1e:
         f0:a9:1a:71:f1:8f:35:8b:a1:bd:da:ff:97:66:60:e8:99:a0:
         5c:9c:ac:1f:34:01:9a:4a:24:3d:7a:6c:b2:de:b5:cb:47:d0:
         5b:2c:33:9d:c4:34:31:ef:8d:5c:dd:44:47:c4:f6:6f:c7:d3:
         fc:6b:4f:5e:6f:fb:c1:59:f3:59:55:e4:6b:89:80:34:7e:4c:
         4e:36:f1:c5:bf:b9:16:03:71:91:f5:f2:82:69:87:69:ac:56:
         c3:23:13:bf:c5:04:e6:9b:59:63:0a:ef:d2:ee:91:78:ff:c4:
         7f:75:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:39:46 2026 by rpki-client