Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa
File:                     72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa (raw, json)
Hash identifier:          NWWnmPUNxGaRO2IeSQ/UyWGROLCMf0clRcOlLQ4HCCk=
Subject key identifier:   23:48:D7:5B:CD:D3:E8:70:43:E1:D2:52:BE:76:07:2D:E4:65:81:9D
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584EA79488F1BABE3F7CFEE595C0
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19651
IP address blocks:        2602:f9ec::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:88:f1:ba:be:3f:7c:fe:e5:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=135cc42e-ae86-4e37-ac91-e06cc59c2a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:7c:45:46:bf:f0:34:d0:aa:2c:9f:f3:69:
                    00:c6:0d:32:1e:70:25:aa:f6:35:f3:4f:c6:e8:d6:
                    95:1d:a8:20:50:f3:43:55:03:b3:4f:f7:17:a0:15:
                    ed:10:a1:07:2b:c0:da:e4:30:3c:61:ed:57:78:f7:
                    e5:31:f0:6b:19:99:1a:f0:8a:7c:9d:75:f8:3d:db:
                    9c:8c:22:49:0a:a2:38:a7:a4:0f:98:32:c8:7b:f6:
                    7c:5e:69:28:16:27:35:ea:35:5e:11:e2:17:81:4c:
                    11:c0:86:2f:bc:99:a0:d0:00:71:64:0c:d4:d1:ec:
                    6c:51:7c:14:7b:50:4d:6b:1d:e7:a0:d3:43:bf:33:
                    a7:7b:e1:af:1a:b1:dc:12:37:c2:fa:11:03:2e:7b:
                    23:05:f2:fc:3c:c8:70:f2:db:12:66:de:e0:cd:83:
                    c8:9e:87:5d:d6:71:11:c1:96:a4:f7:1e:f7:a1:cb:
                    de:91:1f:32:8a:a8:f0:51:04:3d:93:01:5c:57:4c:
                    5a:ec:fa:af:5c:fd:c9:f6:df:8c:03:c6:1b:aa:7d:
                    16:de:54:e4:f7:96:17:ab:fc:25:67:23:75:6d:47:
                    05:4a:67:ab:66:61:bb:67:ea:ad:e7:2c:e5:72:af:
                    bf:c4:ef:ec:c2:cf:3d:e4:89:37:12:51:d6:0d:46:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:48:D7:5B:CD:D3:E8:70:43:E1:D2:52:BE:76:07:2D:E4:65:81:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:57:81:61:05:0e:b6:40:90:cc:7b:81:db:7f:08:db:9e:82:
         80:90:17:d1:39:da:b8:0d:bb:90:68:0c:fe:ef:61:0d:97:28:
         33:15:a7:b5:b3:29:cd:85:63:af:d9:69:bd:de:51:12:b9:b1:
         29:a1:d1:18:ea:0c:8d:04:01:1e:b2:e4:df:5f:92:68:e8:7a:
         88:0d:93:39:29:f4:f8:cc:bf:38:10:64:c3:cd:d5:d1:90:e7:
         da:f3:63:e4:ee:9a:61:9b:c9:dd:b3:23:cd:eb:51:ad:34:eb:
         48:91:d7:1d:8d:20:c3:2f:84:24:78:01:7e:fd:ca:6c:77:de:
         6c:c8:d0:92:3d:8f:f9:68:12:d3:1a:d2:83:e9:b1:9d:d9:24:
         e7:02:44:e3:c9:e0:39:ee:ca:79:8d:3d:f7:5f:1b:64:6d:d9:
         dc:24:4f:8d:33:1b:62:85:31:87:35:25:00:8a:be:72:37:be:
         e8:eb:6a:43:3c:61:cf:39:fe:c5:37:be:21:6b:26:51:a4:ed:
         6b:f3:32:bb:69:08:dc:dd:2e:29:28:b7:3f:7a:67:9c:a8:f3:
         cf:49:63:0a:09:d6:75:1c:45:91:bc:a7:21:58:e8:43:a4:4b:
         16:e8:15:10:78:4a:07:34:4e:7a:d5:f3:d8:e1:49:5e:4d:32:
         0c:05:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:48 2026 by rpki-client