Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
File:                     714c4c2a-3556-3855-9280-6a26c1102030.roa (raw, json)
Hash identifier:          OLOG0NMvZzQn5NP3Z54ZEuHq5r7nWCEWAnoMIS+yUTE=
Subject key identifier:   85:BB:AC:10:D3:8F:DC:09:6D:96:25:A9:0F:16:71:0F:A7:AB:C8:9B
Certificate issuer:       /CN=0002cb20-026c-453e-a998-7e9db1f7f47f
Certificate serial:       010D0C9F4328584EBDDC60429BEBFBA4AA8F7880
Authority key identifier: DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     19762
IP address blocks:        2602:f9fe::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:60:42:9b:eb:fb:a4:aa:8f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0002cb20-026c-453e-a998-7e9db1f7f47f
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=dfb08622-4157-48cf-8670-fcafb30584b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:51:d9:b0:31:bb:0f:f0:5f:8f:7f:dc:ba:
                    3b:42:1d:ee:4a:06:32:e6:ad:18:4a:14:8a:b1:6b:
                    e9:b9:81:73:ca:d5:d1:ee:61:64:8e:1a:e3:b1:cd:
                    b7:ef:3d:1b:dc:df:a3:6c:aa:7f:db:2d:5f:a0:3f:
                    f5:02:6b:d9:3c:12:84:be:de:83:7d:67:e4:6b:00:
                    58:ae:d2:97:23:86:fd:ed:92:20:be:17:f6:b5:23:
                    c1:a1:08:5e:cb:55:17:9e:01:e7:4e:17:6b:3b:12:
                    0e:c2:25:88:a2:f5:dc:c6:24:c3:51:11:a7:30:fe:
                    64:76:3b:77:1e:4c:c6:7d:08:1b:db:c7:9f:5c:a2:
                    b1:ea:f2:fc:95:a1:44:47:d1:5b:30:5b:f2:30:12:
                    95:a1:4c:cd:7c:e2:0d:d4:5c:45:69:60:0e:3c:18:
                    10:8a:26:10:14:00:c7:98:35:5f:cc:ca:26:35:76:
                    ac:8b:d0:f6:03:e8:77:d6:2c:54:a6:2a:10:d4:c0:
                    74:b2:48:49:ac:c0:2c:2c:bf:14:40:e5:56:ad:16:
                    12:61:5b:45:27:18:ca:24:6d:ae:82:0e:93:1f:42:
                    dc:94:30:59:fd:85:2f:b8:17:b8:8c:ae:41:1a:20:
                    a3:b5:a7:49:ce:cf:5f:f6:3b:1c:49:03:e2:ea:3d:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BB:AC:10:D3:8F:DC:09:6D:96:25:A9:0F:16:71:0F:A7:AB:C8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl

            X509v3 Authority Key Identifier:
                keyid:DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9fe::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:44:c8:56:d6:15:52:2b:0b:92:f6:07:3c:fc:2f:f1:35:d1:
         c5:b5:f8:be:4f:04:2f:7e:f1:44:7b:18:ce:4c:c9:a6:8c:35:
         0c:a1:30:6a:82:80:ea:10:77:5e:96:24:b1:f9:08:ef:e4:17:
         52:bb:5e:d5:c5:19:20:3e:84:8b:1d:72:d0:2d:0a:94:5c:76:
         ce:ed:78:dd:a7:d4:ea:10:28:42:15:3e:0f:59:54:de:c8:54:
         a0:ab:ff:db:1c:75:42:b3:a4:a4:bb:af:d9:48:93:4f:4d:0e:
         a5:80:54:78:1b:52:6e:0f:bc:4e:25:78:00:58:80:0a:ca:1e:
         bc:aa:79:b2:ef:7e:67:2f:9a:c8:f5:3a:fb:78:e9:8e:81:1c:
         6a:62:df:fe:6b:e3:7d:bf:44:51:4c:f5:bf:d9:03:d2:36:7b:
         b2:8d:d9:f8:8d:95:90:ee:28:7a:04:c8:31:08:b8:d2:4e:c6:
         8e:45:cd:a9:5e:9c:0a:b1:47:d0:e1:70:bf:58:ba:e6:c8:ad:
         5e:d1:32:43:f3:ef:80:4f:f0:b1:c8:d5:04:17:f2:b0:df:f1:
         6a:76:ec:d8:ae:e3:bc:99:36:93:26:a5:f1:54:ee:70:6b:05:
         18:26:91:29:9f:a0:18:13:06:b6:01:c4:4c:e1:3f:77:b7:fe:
         5b:1c:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:11 2026 by rpki-client