Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/6404afdd-fca4-31c4-997f-52caba5af345.roa
File:                     6404afdd-fca4-31c4-997f-52caba5af345.roa (raw, json)
Hash identifier:          Iez65eh+X7VlmUsFFJlBeVWZ9fWxlg1HsgykDLdXTPs=
Subject key identifier:   B7:5A:44:02:6E:DA:5F:49:3A:0D:E9:87:98:DC:EA:89:0E:14:AB:72
Certificate issuer:       /CN=a08a8360-966b-4e4f-9006-479f72f36651
Certificate serial:       010D0C9F4328584EAE81B69DE2B032C8755F4D00
Authority key identifier: 3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/6404afdd-fca4-31c4-997f-52caba5af345.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     400642
IP address blocks:        2602:f488::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:b6:9d:e2:b0:32:c8:75:5f:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08a8360-966b-4e4f-9006-479f72f36651
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=ee771cd7-e68a-4c27-866e-3b03c3acfe33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:05:19:ac:80:19:cb:51:5d:30:b2:79:bc:
                    36:60:7d:b9:af:e2:a1:c3:4c:65:a1:6e:6d:d6:d3:
                    10:ea:9b:b5:01:86:07:af:d3:fb:98:ec:63:a1:a0:
                    f5:7d:20:21:73:d2:72:47:98:c4:8d:b0:8f:10:9e:
                    9e:eb:16:fe:0f:d7:aa:eb:a4:ed:a2:c2:bb:c2:62:
                    d8:71:66:46:95:d1:a3:6d:aa:ad:8c:3b:63:35:12:
                    71:36:f3:8b:7a:4f:22:3a:a9:a3:49:cc:50:40:f0:
                    23:85:86:69:18:07:66:8c:e3:1a:11:85:c5:db:d8:
                    70:71:5c:b6:93:3a:1a:68:3a:cc:63:cf:cc:2b:2e:
                    5e:cb:ca:1e:48:d5:5d:eb:b2:55:af:41:dc:ff:4f:
                    fc:2a:ee:5e:97:b2:cf:25:0f:6f:17:ac:e4:53:bf:
                    bf:d9:b6:42:53:f8:51:b4:b3:50:d4:4d:d2:07:61:
                    4b:11:07:14:18:97:84:94:05:bd:b4:65:d7:07:29:
                    b0:5b:03:2a:d9:fb:f4:94:e4:8d:8f:6b:bb:91:25:
                    4c:44:e9:f1:05:e3:92:d1:26:22:20:69:a5:7e:23:
                    1d:59:17:5b:6f:82:f0:b8:93:2f:7c:2f:fa:e0:0a:
                    c3:7f:99:b2:bf:2b:62:6c:bf:cc:5c:e3:02:d3:eb:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:44:02:6E:DA:5F:49:3A:0D:E9:87:98:DC:EA:89:0E:14:AB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/6404afdd-fca4-31c4-997f-52caba5af345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl

            X509v3 Authority Key Identifier:
                keyid:3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f488::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:c3:27:24:c2:ca:39:17:89:fa:ff:92:79:d5:70:dd:1f:
         12:b7:ac:2b:19:f3:4e:06:ff:94:a2:f9:9a:08:e4:da:e3:24:
         b6:a5:39:ae:92:db:b5:69:29:c3:0d:bb:dd:eb:2b:49:27:6a:
         d9:f5:e5:18:a1:ce:c9:d7:d3:2a:75:b2:ad:45:b2:8e:73:5a:
         b2:e2:d9:da:fc:e6:a4:ba:cd:04:31:06:0e:17:40:ce:fe:94:
         86:5a:e1:97:ae:4d:ba:e5:92:25:9d:e0:b6:62:55:12:af:8d:
         07:25:c2:49:2d:0b:d9:ab:75:9f:6f:6a:91:8b:90:5e:34:77:
         85:25:22:c6:75:0d:03:32:d2:f4:9e:31:a0:e0:7c:f5:57:d6:
         7c:b0:6f:0c:8c:1a:77:95:7d:65:a6:b3:28:34:6f:3e:c2:ec:
         57:8d:48:7d:f7:d1:c6:37:f4:a1:87:e9:cf:24:f2:59:ff:22:
         2a:cd:d5:04:30:ed:e1:7c:de:01:95:54:01:7a:ab:db:05:5e:
         1d:27:7e:59:cc:04:ee:96:1c:06:15:92:cd:ca:43:67:00:f4:
         64:f4:f7:fe:37:ce:00:d5:72:60:e2:37:b2:e1:25:ce:24:07:
         24:57:26:4d:1b:28:97:51:c7:00:f2:21:6a:6c:8b:51:91:12:
         c9:9b:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:58 2026 by rpki-client