Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/726a36e0-6bff-392f-a7a8-06f3d311e602.roa
File:                     726a36e0-6bff-392f-a7a8-06f3d311e602.roa (raw, json)
Hash identifier:          J+C1OsisH6BCwp4ECGCOJHJUA3rTQH+4zfNdmXDV0kA=
Subject key identifier:   BE:0C:55:23:06:63:11:A0:6D:FA:F3:6B:CB:49:42:6F:ED:98:DC:D6
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584EA79251608C0F766C04B01A00
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/726a36e0-6bff-392f-a7a8-06f3d311e602.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63008
IP address blocks:        2602:f9a9:201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:51:60:8c:0f:76:6c:04:b0:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=559084f3-26e6-495e-8cd9-2621528dd82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:52:65:32:72:d2:58:7a:6c:d6:49:ea:1a:
                    3a:dd:a5:34:d6:c8:ef:9e:29:57:f9:42:59:46:80:
                    35:42:49:a7:5f:24:33:88:61:c4:a4:11:ba:62:70:
                    39:e8:71:c5:fb:31:03:ba:cf:9f:dc:3c:12:3f:d6:
                    e6:53:e2:70:49:68:c7:89:04:40:81:4e:4a:3f:14:
                    2c:a0:32:f2:6e:83:fc:cf:f9:cf:9d:01:d0:40:07:
                    24:d7:a8:53:f7:d9:35:da:fb:b6:c2:8e:d9:78:a2:
                    8e:f4:43:ff:34:e9:5e:2a:9a:75:67:7d:c6:80:e5:
                    f5:3e:0d:91:2c:24:00:96:2b:e2:f5:9f:74:f0:ab:
                    aa:6c:9d:15:ce:c8:c7:6a:9b:8f:0f:bd:0c:57:ac:
                    9b:1f:b0:c5:c8:57:d7:53:8d:1f:40:47:82:15:16:
                    39:9f:07:92:04:06:af:84:ae:9d:14:69:3a:26:70:
                    95:8c:6f:82:23:59:34:a2:ac:5d:37:ae:26:0c:13:
                    b8:bb:1c:c0:e7:6f:bf:7e:c9:26:e5:c9:53:46:e4:
                    48:fe:75:13:c6:06:e0:02:f8:fc:54:85:a2:90:99:
                    3e:8a:9d:00:2a:ba:53:d6:49:f5:b0:48:df:7e:b2:
                    4a:90:12:bb:06:88:68:bf:42:f9:f6:18:46:a1:1f:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0C:55:23:06:63:11:A0:6D:FA:F3:6B:CB:49:42:6F:ED:98:DC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/726a36e0-6bff-392f-a7a8-06f3d311e602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:05:fa:3f:cb:f5:ef:2a:27:3a:1b:68:50:77:02:fe:91:
         1e:35:80:6e:a1:e2:91:77:f1:04:8a:42:2f:d0:b9:a0:01:f5:
         79:cc:12:c0:eb:4c:be:83:06:4b:67:33:eb:d4:13:f5:fd:07:
         88:60:ca:11:6b:ce:b1:f1:df:67:f5:0f:7b:ca:3e:49:f5:a0:
         52:cf:a4:12:ae:7a:97:8f:61:f3:b8:35:a0:57:f5:58:df:24:
         ce:fd:ac:c7:1b:17:ec:ab:13:dd:cb:95:80:b7:4d:65:ba:e9:
         97:ef:c3:bd:2e:22:18:ad:a6:f1:8f:a2:24:25:83:b3:5f:8f:
         f1:20:b6:e2:89:f0:3c:da:48:2d:c4:07:6a:4c:6f:df:9f:47:
         be:9b:77:f3:d8:8e:27:6b:d3:5e:b3:d9:82:1d:d5:61:2b:dc:
         75:b0:89:2b:81:c3:0c:6b:27:fc:f6:89:e7:87:ca:54:2c:72:
         9f:73:85:9d:ff:fd:83:ea:80:9c:1e:3f:3e:6e:dd:ca:c3:bd:
         4f:ae:36:35:0c:79:b9:8b:e5:10:54:1c:92:51:f1:33:21:75:
         f5:e2:d9:d5:54:92:da:15:82:08:89:86:12:c1:76:6b:28:da:
         b3:b4:06:a7:47:d7:38:77:44:40:06:af:39:17:0d:c5:4c:d3:
         d0:2b:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 21:40:15 2026 by rpki-client