Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/d35c5af2-9b72-34a8-a145-3daf59137b24.roa
File:                     d35c5af2-9b72-34a8-a145-3daf59137b24.roa (raw, json)
Hash identifier:          ppq6ytCv/X1Ks6Gse0ILp3oVGjUcQZB/elVwyIY1vyo=
Subject key identifier:   51:A4:B1:BC:D9:21:D4:00:80:CC:BC:6C:FB:58:0E:FF:8D:40:39:03
Certificate issuer:       /CN=315c2a9b-1d80-464d-8934-f128fe82ab8f
Certificate serial:       010D0C9F4328584E5BD7A72DA954002E0BEEEB00
Authority key identifier: C2:4E:C8:25:7D:B6:06:28:EB:54:AC:17:02:43:00:A2:3C:2B:8B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/d35c5af2-9b72-34a8-a145-3daf59137b24.roa
Signing time:             Wed 01 Jul 2026 22:21:35 +0000
ROA not before:           Wed 01 Jul 2026 22:21:35 +0000
ROA not after:            Tue 29 Sep 2026 22:21:35 +0000
asID:                     401919
IP address blocks:        2602:f56d:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/315c2a9b-1d80-464d-8934-f128fe82ab8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/315c2a9b-1d80-464d-8934-f128fe82ab8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:d7:a7:2d:a9:54:00:2e:0b:ee:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315c2a9b-1d80-464d-8934-f128fe82ab8f
        Validity
            Not Before: Jul  1 22:21:35 2026 GMT
            Not After : Sep 29 22:21:35 2026 GMT
        Subject: CN=cbcc4ae9-69d1-4246-9b58-ede19b963bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:09:40:d7:ad:ee:96:9a:f9:5c:6a:53:ad:
                    55:90:be:3f:65:f3:0a:2d:7c:63:3e:47:86:f6:2d:
                    13:6c:92:28:80:b4:80:5e:0d:fa:5e:ad:f6:dd:1b:
                    f9:0f:fe:fe:e5:3e:16:22:3e:64:db:ea:fa:0b:50:
                    cf:f6:8a:d7:e6:e7:7b:00:19:29:8b:52:e4:d4:d9:
                    ff:bb:c4:29:0c:63:0d:b9:0f:eb:f1:ff:cd:61:56:
                    04:92:12:37:28:e3:bf:33:3e:44:5f:88:2d:05:1c:
                    29:a4:49:da:31:c7:60:71:e6:92:5a:dc:20:10:8d:
                    c5:c1:07:71:48:4a:dc:fb:ae:be:3d:d2:2d:1d:34:
                    26:29:76:f3:43:79:ee:75:8e:68:6a:a9:4b:64:9e:
                    17:f7:b2:3f:7b:a6:1c:99:8b:48:30:f0:ff:b7:9c:
                    ba:cc:43:c5:72:74:80:0f:21:92:17:80:72:7f:77:
                    00:9d:69:b4:fe:28:37:28:b9:6a:86:39:4d:ea:1f:
                    59:4c:22:45:e4:fb:60:cb:cc:70:b2:a5:c1:42:a7:
                    7c:2d:3d:5e:4d:47:93:c5:33:30:92:09:5a:91:90:
                    36:60:b4:22:bd:1e:e6:94:9e:c3:ee:cc:08:f5:04:
                    c7:ce:0a:a4:6d:2c:35:49:39:56:3d:6e:64:65:e0:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A4:B1:BC:D9:21:D4:00:80:CC:BC:6C:FB:58:0E:FF:8D:40:39:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/d35c5af2-9b72-34a8-a145-3daf59137b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/315c2a9b-1d80-464d-8934-f128fe82ab8f.crl

            X509v3 Authority Key Identifier:
                keyid:C2:4E:C8:25:7D:B6:06:28:EB:54:AC:17:02:43:00:A2:3C:2B:8B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f56d:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:18:90:b5:25:f6:de:ad:dc:c5:81:81:9b:9d:d0:5c:ba:
         b0:41:af:12:b4:d1:0f:51:ad:f1:c9:f5:c8:f7:2a:1a:f4:14:
         de:90:bc:00:31:cb:0d:a5:05:50:80:4b:ac:c7:32:b8:a3:ab:
         3f:95:aa:92:d8:86:ad:ac:a2:0f:f9:4f:3c:a5:29:ca:28:85:
         0c:a8:3f:8c:80:97:73:4b:36:6d:8d:5c:b7:6c:05:e1:8b:e8:
         0d:2e:dd:ca:82:64:51:4a:18:b3:c7:a5:3d:07:85:86:6b:b3:
         3f:b9:4a:d3:88:b3:94:32:c7:2d:cd:d2:cc:57:1d:aa:94:9d:
         0a:0e:ce:5d:bc:ea:47:e8:c0:3f:f6:6d:d4:04:c5:e2:36:54:
         23:f7:bf:c6:c5:9b:94:56:65:32:12:d2:04:12:c1:20:bf:42:
         ca:89:a9:d0:20:16:45:fe:80:ca:df:74:4c:ad:1f:6c:2e:f7:
         4a:66:97:cb:1f:48:b7:26:70:1d:0b:97:c0:57:73:a8:58:f5:
         ee:58:56:b7:b4:43:7c:1c:32:6a:57:bb:af:65:5d:67:78:d7:
         67:14:12:64:8e:c0:15:ce:b9:ba:09:77:b7:6f:9c:54:94:93:
         d4:1b:d9:8b:45:72:d3:75:29:62:46:c3:cb:60:1d:62:b4:57:
         03:b0:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:45:33 2026 by rpki-client