Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa
File:                     c4e6a5d6-57dc-34dd-b317-934395b218db.roa (raw, json)
Hash identifier:          W9jhNwHRCqoNSVSNCBsAN10xjzMM2/URzUOVaPql1Pw=
Subject key identifier:   E8:CB:4E:FC:83:17:04:3F:C6:A1:7A:3F:5C:18:B6:15:16:F0:E9:12
Certificate issuer:       /CN=4559e616-17ae-4214-9407-2e51c3be0fa4
Certificate serial:       010D0C9F4328584EC20C715B11867CC9B7390100
Authority key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1030
IP address blocks:        2602:f9d4::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:71:5b:11:86:7c:c9:b7:39:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4559e616-17ae-4214-9407-2e51c3be0fa4
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=fc7dbad7-dfe4-42c4-a949-bab5d4e83b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:64:08:02:a9:f1:02:1d:db:07:17:10:a8:
                    70:a3:c3:08:e3:1c:fb:e0:20:0a:cb:21:32:2b:8b:
                    f1:80:24:b0:01:c4:17:6e:19:3f:51:f1:c7:45:71:
                    90:f0:87:45:d9:76:7f:98:f7:6e:cc:c8:33:ca:32:
                    d4:c9:02:c6:e7:d9:c3:1d:84:55:af:cf:fd:9d:de:
                    35:5a:02:6e:fc:6e:4f:1d:1f:f6:2a:de:bd:3f:56:
                    28:74:4b:8b:e6:78:da:7c:b4:f9:80:a1:af:2d:be:
                    99:1f:c8:7a:39:5f:1a:2d:f0:9a:9f:61:12:fb:89:
                    f4:a6:f3:89:3e:28:cc:42:6f:62:81:83:d7:b7:22:
                    cc:6f:e7:e2:eb:83:9d:61:d7:4e:5e:9f:d9:4a:f4:
                    0b:81:94:64:99:21:85:24:48:78:15:28:9a:f8:f2:
                    ab:3d:02:e2:c3:f5:56:fa:6f:b8:8b:ae:32:c3:5c:
                    65:2b:d4:eb:0c:1e:74:f9:74:19:a9:19:f4:b8:83:
                    1e:b6:e4:64:25:d2:3c:7e:81:64:dd:de:d9:f8:58:
                    45:c2:b1:3d:54:7e:59:17:6a:02:6f:98:7e:87:a0:
                    21:68:fb:32:2c:60:9f:22:13:a9:81:1f:7b:d0:8b:
                    1f:42:ba:0f:83:87:ce:a2:5c:69:fa:68:cb:83:7d:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CB:4E:FC:83:17:04:3F:C6:A1:7A:3F:5C:18:B6:15:16:F0:E9:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:c9:03:c6:30:ad:6d:be:3f:7d:89:7b:bd:2c:b2:14:df:
         e8:b6:d6:dd:b9:f3:52:e5:26:03:ca:15:0a:c2:45:79:75:f3:
         73:01:3e:66:07:83:1e:88:58:02:25:24:7f:8f:1f:79:0a:91:
         28:a2:47:63:e2:9a:2f:83:cc:60:23:a5:3c:49:9e:d4:f7:06:
         e8:b5:3e:d4:2d:cf:5f:ec:2c:0b:03:84:2c:7f:9d:1d:e0:93:
         a5:a5:14:11:c5:99:8d:b0:51:44:3f:42:5d:4e:60:de:74:fd:
         59:20:d8:29:29:af:d8:55:c1:14:9b:14:ef:55:71:a0:28:bf:
         67:b2:0a:64:61:cd:c0:49:a0:5f:f1:bb:fb:a0:56:88:71:d1:
         14:48:12:a2:3a:c9:2d:6e:eb:51:02:3c:5b:fd:4c:b9:28:08:
         8f:9a:10:c7:25:6e:c5:a9:25:9e:b2:25:3a:f7:66:18:99:30:
         61:83:a7:48:92:69:99:6a:fd:9d:8b:05:53:11:af:32:45:4e:
         08:32:b4:84:fe:d6:91:25:22:ae:2b:ea:00:bf:84:ae:68:80:
         c3:77:08:ce:97:40:85:25:11:8e:a1:bd:b4:1d:2f:67:2d:a1:
         ac:a0:55:90:6c:e4:1f:d0:ab:49:a9:d9:10:1d:ba:21:93:bb:
         7d:ad:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:47 2026 by rpki-client