Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/2078c601-4345-360c-ae2c-51e3bfbf4e97.roa
File:                     2078c601-4345-360c-ae2c-51e3bfbf4e97.roa (raw, json)
Hash identifier:          LPa/+iIMbS55t67KQx99EErvTtHn680xuLKRw7yY/n8=
Subject key identifier:   1A:D7:38:1D:04:D9:E8:1C:A7:9C:0D:37:EE:E3:0B:8B:5E:D0:5D:2F
Certificate issuer:       /CN=13387421-5611-48dd-8b16-4f308be22a1f
Certificate serial:       010D0C9F4328584EC20C7E618BC88C4999E2EA00
Authority key identifier: E7:A1:A0:1D:AA:E5:45:80:F1:81:B2:90:A0:EC:CA:1C:51:26:69:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/2078c601-4345-360c-ae2c-51e3bfbf4e97.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     402101
IP address blocks:        2602:f485::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7e:61:8b:c8:8c:49:99:e2:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13387421-5611-48dd-8b16-4f308be22a1f
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=4440a8ab-885f-4185-8daa-bbf9d92eb338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:fb:24:89:d1:05:2c:f2:98:b3:00:53:ef:
                    1c:59:a2:a2:1f:15:ce:3d:64:46:1e:2d:df:bf:a4:
                    4b:86:2e:19:b2:2a:d7:6a:99:ec:af:3c:38:b3:16:
                    57:4c:69:8c:0b:24:01:8a:4e:f6:e7:82:92:ca:50:
                    10:f0:7d:a4:6a:3c:db:5f:cb:66:7e:67:99:b4:fa:
                    96:f3:75:93:4e:23:97:c2:72:2e:20:12:fa:97:97:
                    50:e5:1d:56:e7:f0:d9:b8:56:16:9c:2d:63:e0:0f:
                    1c:d0:f1:86:bd:d9:fd:10:cc:63:08:5b:4e:3e:05:
                    59:44:df:d1:24:99:3c:2f:ec:4f:67:fc:5d:99:a2:
                    bf:34:80:d8:5d:a1:53:3f:ec:4c:3d:73:c5:8d:2f:
                    fc:7f:a0:c2:f3:57:fc:40:7f:67:76:19:23:27:9f:
                    ec:bd:f3:8f:8a:09:23:83:ff:57:e0:ea:0b:9d:19:
                    76:ef:35:a2:56:70:ae:cc:3b:e3:32:c3:8a:69:11:
                    d4:5e:00:9c:13:ce:0d:70:87:7d:56:11:b4:0b:fc:
                    9c:7e:d7:ed:27:3f:24:e9:0f:c1:44:c4:3c:a3:68:
                    1c:87:25:33:fb:81:80:75:a4:1d:a6:7b:e4:ef:67:
                    e7:bc:e5:cd:15:65:a4:fe:a4:63:9f:73:ee:84:f2:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D7:38:1D:04:D9:E8:1C:A7:9C:0D:37:EE:E3:0B:8B:5E:D0:5D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/2078c601-4345-360c-ae2c-51e3bfbf4e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f/13387421-5611-48dd-8b16-4f308be22a1f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:A0:1D:AA:E5:45:80:F1:81:B2:90:A0:EC:CA:1C:51:26:69:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13387421-5611-48dd-8b16-4f308be22a1f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f485::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:a8:67:7c:57:d2:7f:50:ee:a1:3f:84:0f:41:ad:86:67:
         d7:0d:5e:a5:9b:ce:e0:27:fc:a0:b5:aa:e8:92:d3:9e:b0:01:
         7a:14:3f:9f:56:1a:71:4e:3e:8f:ce:ec:b3:ec:58:5b:77:63:
         6a:ab:19:d2:4d:bc:22:2d:02:6a:f4:6c:04:da:fe:2a:ee:a9:
         a9:0b:c2:da:98:6b:1e:1c:3c:ad:95:ad:5e:cf:ce:de:b2:25:
         12:d1:06:e5:f7:35:af:f1:91:92:7c:40:e5:89:b6:a8:3f:44:
         04:ae:96:76:f1:4b:f0:c4:31:1c:fc:d0:e1:43:68:95:b4:a2:
         57:84:64:04:ff:1c:c5:e0:e6:99:21:3f:e6:68:17:6e:cb:58:
         aa:61:1f:9a:8d:51:0e:4e:4c:b9:1b:90:1d:7f:99:72:f6:88:
         3f:e8:99:c7:54:64:d5:b1:27:a5:cd:ca:59:99:c0:ba:fc:e3:
         f6:ab:c7:dc:70:cd:b7:af:96:a0:13:f4:8c:48:9d:20:d1:46:
         79:5c:9c:fb:f8:c8:64:8d:e1:5c:a4:ea:00:2b:dd:ea:15:eb:
         03:35:27:a0:e1:af:28:e8:98:13:f1:6b:53:78:7e:0b:a7:00:
         20:04:8a:8f:09:c8:52:87:8b:30:ac:0f:64:7a:57:eb:91:26:
         57:9c:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:06 2026 by rpki-client