Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
File:                     4a1e23e9-0d4a-3576-945b-33f4492039a8.roa (raw, json)
Hash identifier:          cFE7oJGDbdYOnyCssAbXsRhueHVJ0QVre/uRhVfh3dU=
Subject key identifier:   A2:DE:91:08:7A:42:F8:5D:E4:4A:14:41:5B:94:2D:99:14:7A:9F:FE
Certificate issuer:       /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial:       010D0C9F4328584EA7932F72AA179B169F755470
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:f4a8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:2f:72:aa:17:9b:16:9f:75:54:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6140af8b-37fb-447e-88b5-34f7e61e7098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:96:2c:16:c1:45:41:dc:0d:1a:03:1e:8b:
                    08:0c:48:6b:90:9a:05:2f:63:f9:65:4d:3d:ee:56:
                    ba:b4:cd:47:2c:c3:51:8a:17:f2:b6:f6:98:dd:f7:
                    50:b5:4b:bc:a9:90:88:c2:32:f7:e4:e6:57:94:5c:
                    59:54:28:88:67:7a:8c:0c:5b:be:2b:fb:3b:e5:85:
                    94:0e:a9:a6:d1:a8:28:ba:e9:ca:53:7a:4a:fd:d3:
                    94:b9:2b:d6:5f:b7:2f:72:0d:02:56:22:ce:be:70:
                    38:43:27:24:8a:d5:ea:41:92:de:b9:fd:e1:6b:6a:
                    48:1a:a1:1b:74:0c:f0:97:e8:65:1a:3a:17:35:6e:
                    76:cc:ff:96:64:85:1a:7b:f4:4d:6b:43:c1:c0:4f:
                    cd:fc:5a:4f:c9:e0:00:d2:aa:6e:10:4f:6a:63:75:
                    65:6a:3c:e8:0a:df:7c:35:76:e7:1a:8c:61:5d:e6:
                    c5:dd:4b:73:bc:83:75:f4:99:a8:7c:49:8d:1b:b3:
                    1b:47:7f:d7:1e:c5:02:b2:6c:a3:1f:43:fb:3c:ef:
                    c3:14:4b:06:1a:40:fe:01:c8:46:32:04:50:09:0a:
                    fd:96:39:0f:e1:01:8d:37:df:b0:77:6b:f3:c5:60:
                    75:cf:0c:19:77:5c:38:ae:89:15:85:ec:a9:0c:9e:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DE:91:08:7A:42:F8:5D:E4:4A:14:41:5B:94:2D:99:14:7A:9F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/4a1e23e9-0d4a-3576-945b-33f4492039a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl

            X509v3 Authority Key Identifier:
                keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:89:7f:e7:37:9c:d0:34:2f:6f:c8:ab:13:70:c0:ca:89:cf:
         91:e9:fb:55:4f:1f:36:c5:b1:7a:63:e3:47:88:aa:d6:f8:8c:
         cb:05:9d:dc:d5:a3:cc:69:b2:3c:63:58:64:f8:d9:e1:5b:d8:
         d5:72:1d:42:54:71:d0:4d:18:5e:a6:f5:f8:39:3d:a3:e7:6e:
         66:31:b6:2e:54:2f:59:26:65:f2:2b:43:c5:e9:c2:a6:85:e6:
         56:a3:d5:97:3f:ef:74:3f:77:43:0e:d7:c2:2b:90:e3:68:c2:
         8c:58:b3:95:9c:43:bb:1a:9e:44:63:0e:3a:90:91:20:b8:33:
         7e:26:54:03:6f:74:eb:34:80:44:92:9c:bb:0e:ba:bb:16:71:
         a2:f0:04:f4:03:09:df:29:66:b0:93:79:42:4e:34:96:ed:78:
         a8:7f:61:14:64:75:ab:6e:04:7d:b1:89:0c:97:da:03:eb:a3:
         58:20:9a:75:14:12:6d:ea:3c:49:9b:b4:16:eb:e4:b9:7c:40:
         d3:2b:ec:8b:f2:08:5c:6f:62:7d:76:25:f8:58:af:69:4f:7a:
         b0:db:1c:f7:e4:ca:bb:73:93:55:e0:1d:ad:48:81:a1:6f:9e:
         e2:c8:23:7f:9a:1d:40:28:34:9b:b6:46:55:43:89:c9:cf:aa:
         9d:3b:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:32 2026 by rpki-client