Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/6469f245-f029-3856-8a63-35951fe49b6e.roa
File:                     6469f245-f029-3856-8a63-35951fe49b6e.roa (raw, json)
Hash identifier:          7/saTP3r52ht85lvJTRvMZ74WQvLlzdY8nXsEtNKnDs=
Subject key identifier:   40:D9:73:6D:8B:72:5A:31:78:18:15:24:5C:1D:82:91:A1:2B:B6:63
Certificate issuer:       /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Certificate serial:       010D0C9F4328584E58E4962643F46CF4DEC5E257
Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/6469f245-f029-3856-8a63-35951fe49b6e.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     401143
IP address blocks:        2602:f8b3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:96:26:43:f4:6c:f4:de:c5:e2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=6646649f-e078-4f8d-b7db-d2bb76b2ede7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:80:9d:df:10:6b:0f:5a:21:d6:fc:76:16:
                    0c:04:0e:f8:97:3f:e6:d0:d5:df:85:84:85:57:a4:
                    f1:e7:e8:09:77:96:2c:ce:54:f7:83:87:90:58:42:
                    a8:f2:e6:bc:9d:e5:f5:44:2b:29:b7:59:21:41:2d:
                    b0:40:c8:5b:47:c8:b8:3f:96:0e:8c:76:33:93:22:
                    58:80:3a:1a:c0:dc:93:c3:f8:60:82:9c:04:24:c0:
                    4f:7d:ed:fd:e5:98:5a:d0:84:7e:01:2d:a3:28:fa:
                    59:d2:4d:58:f2:9c:37:c7:f3:94:81:08:25:42:21:
                    f4:ac:74:11:ab:a0:96:5c:fd:b0:41:d8:8f:77:26:
                    43:7d:b9:a2:04:0f:ed:bd:ec:46:e8:91:b9:cd:4d:
                    ae:00:2b:76:68:5d:09:07:7f:e3:2d:d6:d2:f5:8a:
                    84:ac:10:ae:b0:6d:d2:88:b1:11:09:fd:72:99:de:
                    69:a5:c5:89:72:78:e3:7c:be:6c:61:cf:36:15:df:
                    1b:64:00:42:92:d5:0e:f0:bc:56:14:9a:d2:f3:31:
                    81:f6:6d:fb:cc:5b:0a:f7:48:d8:89:12:89:7b:bf:
                    23:87:a4:51:ea:8d:2c:99:86:d9:4a:6a:7c:e3:04:
                    b1:7b:6a:be:49:28:c2:ee:f1:17:a8:0f:7d:c7:76:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D9:73:6D:8B:72:5A:31:78:18:15:24:5C:1D:82:91:A1:2B:B6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/6469f245-f029-3856-8a63-35951fe49b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl

            X509v3 Authority Key Identifier:
                keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:78:df:97:87:d0:c3:ba:78:de:e7:d2:34:e0:36:74:80:
         c7:20:dd:ed:1e:12:02:4a:79:71:76:5c:cf:ce:a9:bc:13:5f:
         68:88:10:b3:89:b7:b3:a4:24:cc:f5:f2:b2:c2:b2:13:3b:13:
         40:73:be:cb:a3:43:4a:4e:08:5b:50:27:5f:58:dd:a7:91:54:
         fb:75:95:f1:8a:f6:25:66:f7:4f:48:2a:e6:0b:cb:54:92:f7:
         ef:6e:c7:68:cd:8e:c9:09:b8:02:f3:c6:d2:13:79:57:b7:93:
         ae:70:d9:f0:9c:41:f1:3d:fe:de:da:75:01:57:ad:fc:e4:9f:
         48:d9:6b:0a:4d:8f:f4:95:87:8c:9c:27:f6:e2:b9:aa:64:02:
         06:0e:6f:36:73:21:ea:5e:8f:ff:90:10:54:b0:0a:4e:6f:11:
         f4:01:5b:92:58:a2:ef:92:dc:d0:ed:32:ed:b0:ce:20:ff:84:
         15:00:58:30:b2:16:be:a9:d9:ab:8d:fb:a3:94:05:d0:86:70:
         f9:0c:28:a3:b0:82:7b:d0:34:4e:fd:92:ec:77:a1:a2:74:1c:
         7a:5e:e6:16:3b:e3:9a:28:54:35:2d:0d:8a:ab:cd:5e:fe:d7:
         59:bf:a1:6a:f4:10:ef:2f:4f:09:64:75:57:ce:ce:1a:48:d0:
         f8:0c:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:53:51 2026 by rpki-client