Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/713c3450-710f-35c6-a63e-150728816e19.roa
File:                     713c3450-710f-35c6-a63e-150728816e19.roa (raw, json)
Hash identifier:          S6dWVrOj6EqjhC47VWIfNQG1j95FS24Ug4TDk66iwcg=
Subject key identifier:   31:11:88:1D:49:F0:7E:06:0E:17:32:EE:FB:43:45:8B:B1:1D:45:6E
Certificate issuer:       /CN=7834df4e-1d40-4a3e-b949-220f86329057
Certificate serial:       010D0C9F4328584F682817BB88FAA73BDAF51C80
Authority key identifier: F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/713c3450-710f-35c6-a63e-150728816e19.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     402102
IP address blocks:        2602:f47f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:17:bb:88:fa:a7:3b:da:f5:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834df4e-1d40-4a3e-b949-220f86329057
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=2bfa085a-604c-4270-9603-54aa2d0a47cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:85:e7:bd:6f:a4:9c:72:24:ec:39:b1:bf:
                    82:2c:ca:4a:4b:4b:d3:e9:ab:e2:b5:d3:3c:3e:37:
                    39:e4:6f:49:7c:c0:77:ef:7a:75:07:85:51:ff:68:
                    16:cd:23:5f:67:fd:af:fc:50:f1:6a:01:b0:59:9f:
                    2c:1c:b2:5f:f3:04:71:ca:e0:e6:1a:d7:46:f1:a0:
                    a9:49:f7:e1:11:35:0d:d2:e5:c8:2a:84:f6:51:28:
                    44:83:16:22:c3:82:e9:1d:e1:3e:57:98:f0:77:d4:
                    f2:d0:83:6e:15:49:f6:38:f4:3c:10:cb:36:7a:15:
                    0a:ce:4f:18:1e:d9:99:06:ab:4c:d5:49:b4:a4:bd:
                    69:80:f5:41:fb:31:5f:dc:59:eb:89:e4:99:0b:62:
                    59:2f:6d:f2:fa:4e:04:80:95:78:2a:1e:6e:9f:03:
                    8f:ab:53:86:fe:62:51:9e:56:c8:eb:5b:39:5c:57:
                    aa:16:a1:22:78:89:d5:1c:f6:03:1c:22:44:3c:42:
                    df:37:82:ab:91:8b:a8:64:b8:36:3a:55:21:ab:e9:
                    56:44:5f:ba:68:9e:85:28:94:08:99:9e:11:41:79:
                    eb:a9:82:07:22:80:8c:b5:b3:74:f0:11:bd:cc:68:
                    59:17:fd:92:f8:c4:56:74:76:8b:03:d0:9e:c6:27:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:11:88:1D:49:F0:7E:06:0E:17:32:EE:FB:43:45:8B:B1:1D:45:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/713c3450-710f-35c6-a63e-150728816e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f47f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:44:41:5e:6f:3d:85:fd:8c:87:b3:46:07:c8:ed:44:c2:
         1b:5a:40:48:9b:25:ad:62:31:18:79:ea:82:ef:6e:9b:43:0c:
         4b:89:1f:00:8a:d1:c6:4b:8c:55:91:d7:73:fb:f4:44:c9:5d:
         b6:65:ef:9e:a6:0e:97:77:4a:c4:e9:ce:18:1f:2c:1f:fa:7d:
         14:ce:92:c8:2c:fe:dd:60:0d:a4:a6:48:30:a5:cc:c1:bd:9a:
         19:d5:c5:b8:51:b4:4e:e3:6b:3d:5d:a0:b7:96:2a:86:52:a5:
         a9:f0:a0:75:0c:cb:87:ef:07:52:4b:a6:47:80:ea:8e:9f:5d:
         36:fa:77:8d:5c:c3:36:a6:87:57:c4:a8:10:fa:f5:be:90:dc:
         93:a1:f7:e5:f4:d0:52:6e:3d:3c:33:78:25:b8:98:d5:9d:32:
         0d:93:fa:07:36:b0:d1:14:9e:b4:e4:c9:fe:eb:90:ed:ca:5c:
         27:b2:42:0f:44:32:64:68:5a:ce:df:ec:9f:cb:0b:33:1c:d7:
         5c:31:33:ec:a2:19:a7:8d:17:1d:d5:5f:e7:3f:10:24:26:0d:
         f6:fd:09:99:8e:28:c8:10:35:08:c9:1c:34:42:3f:4b:47:93:
         67:54:75:41:1d:58:4d:f3:34:d2:1d:e2:73:9c:ee:ed:6d:a2:
         a6:03:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:06:54 2026 by rpki-client