Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/713c3450-710f-35c6-a63e-150728816e19.roa
File:                     713c3450-710f-35c6-a63e-150728816e19.roa (raw, json)
Hash identifier:          70798AttjNEGOBUgkMJdyF6YxeqRH4z4FTmS5jY09MY=
Subject key identifier:   04:BE:A8:21:04:BE:4B:21:EA:1C:D6:AD:90:DD:C8:77:04:77:19:09
Certificate issuer:       /CN=7834df4e-1d40-4a3e-b949-220f86329057
Certificate serial:       010D0C9F4328584EC63C72843045F97F28304B90
Authority key identifier: F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/713c3450-710f-35c6-a63e-150728816e19.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     402102
IP address blocks:        2602:f47f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:72:84:30:45:f9:7f:28:30:4b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834df4e-1d40-4a3e-b949-220f86329057
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=d7c7e8ab-c2ce-4327-a622-c799fc965883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:95:cd:a4:bf:ce:93:2e:79:3e:aa:16:75:
                    e5:6d:4d:f6:ec:bf:b1:d7:59:92:6b:34:f8:4f:d6:
                    fc:1d:2f:29:01:55:a8:99:0b:83:e0:9b:6b:ef:95:
                    90:c0:35:fa:f1:47:d4:b9:14:d8:e5:1c:f1:f7:07:
                    f4:8b:8a:ad:c7:1e:9a:25:d4:4c:3e:3e:24:49:b3:
                    f6:b3:09:74:87:a9:25:a9:b3:71:43:2f:ce:cd:c3:
                    08:fc:21:3c:24:96:68:db:16:95:04:65:17:79:f1:
                    1e:83:5e:2a:49:c1:99:6c:84:5e:cb:b6:d0:26:0b:
                    35:51:c0:d3:d4:42:cb:d1:3f:51:47:de:90:4d:a7:
                    5e:8e:7f:da:63:5a:9e:dc:4e:dc:19:cb:30:1e:78:
                    7a:cd:62:5e:6b:ab:f9:86:0d:d2:a9:8e:8c:9e:a5:
                    01:6c:7f:44:b0:1b:f0:b1:2f:11:ad:20:f8:04:83:
                    19:39:3f:4e:4a:55:39:61:6f:d5:36:18:33:96:c6:
                    b8:10:8e:00:4c:6c:6a:fd:b8:0c:5b:c6:39:a7:8b:
                    89:39:69:80:4c:6b:03:ae:09:65:21:b8:49:5d:40:
                    7e:00:c4:b8:19:71:62:ce:1f:0f:b0:0b:62:92:1a:
                    15:f0:b8:fc:cd:1a:bd:49:43:a2:7e:8e:1e:62:67:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BE:A8:21:04:BE:4B:21:EA:1C:D6:AD:90:DD:C8:77:04:77:19:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/713c3450-710f-35c6-a63e-150728816e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057/7834df4e-1d40-4a3e-b949-220f86329057.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:A0:44:6F:BF:CF:F3:72:1A:77:F0:58:71:CB:B0:03:CA:F9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7834df4e-1d40-4a3e-b949-220f86329057.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f47f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:44:c6:27:e1:d2:85:cb:17:74:cf:bf:e3:d5:5f:35:ba:
         d1:31:3e:b7:e8:4b:cc:20:6d:61:15:c5:b6:ed:d7:21:9e:f8:
         ce:28:d9:2e:64:49:c9:7f:4b:37:8b:a5:36:ff:57:9c:87:62:
         69:54:09:37:90:5c:99:83:e9:be:cc:15:eb:bd:6e:85:41:e9:
         02:54:f8:93:9e:29:5e:96:af:72:2b:d9:a0:c5:6c:91:af:df:
         16:ec:e6:52:d7:72:b3:ea:8b:7a:3f:d3:a8:ad:af:ee:35:2f:
         b1:68:0e:2a:00:33:35:d9:e4:07:44:54:e3:de:9c:89:a7:32:
         d8:d0:26:70:c7:71:80:20:76:20:ae:f1:ac:9f:f7:a2:f8:93:
         34:4e:cd:ee:24:51:5e:17:36:d1:9d:f8:99:a3:11:02:52:c3:
         16:a7:b2:8e:50:fa:77:6b:4f:88:1d:21:63:05:0b:aa:e1:f6:
         7c:8d:96:3f:21:52:b9:c7:9d:d0:9f:cc:55:e4:a4:78:2f:fd:
         00:61:10:b3:24:ea:ef:73:5a:cb:9e:d5:a6:4b:58:8f:52:47:
         be:8e:94:5d:a7:b1:dd:34:fd:78:d5:a5:7a:7d:99:2d:5d:65:
         d7:c5:1e:59:7b:96:e7:d0:6e:eb:01:c5:bd:00:2f:78:0f:f5:
         69:8e:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:04 2026 by rpki-client