Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa
File:                     2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa (raw, json)
Hash identifier:          +7QYsPQZu5walMHkuS/B/jW30kyALvh6RI6ZNHpLkmc=
Subject key identifier:   05:4D:9A:0A:14:11:4B:22:48:C8:E9:5F:6D:02:02:66:66:BB:C3:C6
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584EBC77021CAEE744335B7F4E80
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     40448
IP address blocks:        2602:fa83:b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:02:1c:ae:e7:44:33:5b:7f:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=96621619-6f4c-4cc4-ad7d-2463d7dd473a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:3a:29:8d:46:74:f8:36:06:e8:4c:a7:37:
                    bd:68:56:b9:8a:47:d8:2e:bc:79:3d:ad:b0:5e:fc:
                    f1:f2:18:00:02:0c:46:2c:1c:cb:c5:24:1a:29:ab:
                    b4:64:ee:91:82:53:d9:f2:22:98:17:e7:e2:bb:27:
                    c8:04:2c:c5:f2:b9:15:e1:fe:0b:f3:10:3c:b6:ad:
                    99:22:8f:fd:66:6c:9d:8c:53:47:d0:98:4c:72:41:
                    64:98:dd:6a:c8:24:1a:fe:eb:c1:09:76:0d:07:a7:
                    20:07:02:6e:5a:4d:0e:ce:9f:a1:50:8d:95:6e:96:
                    a0:77:5d:07:9b:09:12:71:e2:9e:c3:86:18:ee:ca:
                    c7:22:6d:7f:4c:10:cc:f3:ce:2e:07:9b:24:fd:23:
                    d4:99:4f:29:bb:82:13:66:8d:49:a8:03:93:ca:54:
                    11:84:42:2a:84:b5:54:81:e2:31:c1:8a:a7:2b:19:
                    65:5f:5d:73:b7:fc:00:a4:86:b1:e9:ce:77:25:4e:
                    b5:ad:df:e1:82:a0:7f:4c:d8:bf:03:a0:cd:6f:50:
                    ed:53:f2:0c:91:22:b5:32:29:0d:dd:8e:6f:93:6e:
                    7e:97:c7:e7:23:20:c3:a9:5d:da:86:a3:c9:6a:bf:
                    da:41:74:cc:96:b6:f2:5d:44:52:c5:c8:21:bd:a9:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4D:9A:0A:14:11:4B:22:48:C8:E9:5F:6D:02:02:66:66:BB:C3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa83:b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:c5:15:90:5f:a8:f9:c8:aa:9b:4e:68:1a:c1:5c:6d:35:
         eb:53:1c:bb:34:45:db:21:2d:d4:44:87:56:b7:16:d0:77:23:
         32:bd:cc:71:bf:c0:bf:65:fa:1c:39:51:c0:4a:5a:75:57:f8:
         84:c3:f5:ae:6c:f1:2e:c9:9a:fb:b8:2d:a5:1f:bc:2a:35:9c:
         2a:c6:3f:52:cb:9c:e5:7d:72:b6:d2:16:31:d1:c2:e4:52:85:
         f2:2a:c5:a7:22:69:d7:9b:e0:60:5a:60:bd:6e:32:4f:61:72:
         c3:26:7d:5e:ce:90:7d:19:73:6a:c3:7f:da:3d:68:d6:85:40:
         53:32:cc:d1:42:94:1d:d9:c6:aa:d1:aa:90:07:8c:f5:98:89:
         23:9a:36:44:e4:06:38:16:ea:58:bf:15:d7:c8:0d:21:20:39:
         b6:fc:53:94:2a:20:d1:44:97:81:e6:1c:0a:1c:ef:d7:86:ee:
         ac:d7:7a:28:6e:44:0d:c0:44:21:da:c0:5b:9b:d8:f8:eb:41:
         9f:9d:13:da:2e:2e:40:65:51:fc:dd:48:7a:d9:05:f3:13:45:
         d6:7d:8a:41:52:bc:3c:f9:4c:2e:e6:c6:38:24:27:c0:a0:e9:
         2c:ee:07:45:8c:20:fa:df:4c:40:f4:e8:3b:3a:d4:6f:e1:04:
         a4:42:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:51 2026 by rpki-client