Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
File:                     48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa (raw, json)
Hash identifier:          5YwS8NZhVkRvBtCugTJ1vkZiv8Yrnajzu8AWpytqQ8g=
Subject key identifier:   A8:3D:81:07:88:8E:F1:CA:6B:D3:53:3C:2C:F1:DF:BD:2F:C8:F4:22
Certificate issuer:       /CN=38d6b993-a8bd-44a2-8e04-89483e698a23
Certificate serial:       010D0C9F4328584EB847195F0E833CC6B8981D80
Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     57406
IP address blocks:        2602:29c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:19:5f:0e:83:3c:c6:b8:98:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=9535ef27-7052-47f4-8563-0a001dc94b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:ed:00:70:1c:31:87:da:f9:3b:01:ac:87:
                    f5:49:9f:27:a4:4a:51:ac:88:28:ef:a4:1e:53:7b:
                    2e:09:93:7b:32:c8:4d:d6:ba:32:18:af:41:d1:df:
                    d7:77:85:c6:96:25:f0:fb:28:64:09:b0:ce:81:f8:
                    65:7d:39:a1:3a:8f:37:21:9c:e9:cb:79:5c:42:0d:
                    ce:4f:67:b4:80:2c:2d:5b:a1:3c:4e:86:be:8c:2c:
                    99:6c:39:63:50:51:29:1e:ed:0e:f2:45:80:76:38:
                    ea:32:db:76:d2:87:95:52:ce:8f:9f:ab:02:bc:40:
                    f2:fb:17:55:53:4f:c4:60:e8:95:8b:e3:39:fe:99:
                    66:69:e7:5b:72:98:2e:ea:f0:9f:63:61:4f:ce:5e:
                    b4:dd:e3:68:9c:8d:df:bf:07:a3:c8:3c:30:9b:f5:
                    f5:46:72:82:f5:29:ef:16:cf:be:ae:93:fd:93:af:
                    86:a6:4c:81:e0:84:00:95:a4:3e:86:4d:ef:39:fd:
                    14:1b:4a:eb:e7:e0:f9:61:fd:b1:21:68:83:61:3b:
                    30:79:c0:e6:a2:b7:20:df:cb:af:29:dd:70:07:6e:
                    75:a5:8f:57:84:22:f8:81:e5:cf:5b:57:81:80:57:
                    d5:5e:e8:71:a8:1a:e2:5d:22:27:c6:0c:97:02:f7:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:81:07:88:8E:F1:CA:6B:D3:53:3C:2C:F1:DF:BD:2F:C8:F4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/48d3af15-5056-3cb1-90e5-db2495aa1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl

            X509v3 Authority Key Identifier:
                keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:a1:56:21:e5:b9:a6:11:ea:3f:ac:dc:12:50:aa:07:66:
         5f:b1:14:15:c2:8f:d4:5e:ed:a4:94:db:91:77:2f:c4:f3:69:
         a4:48:8c:f3:e6:85:12:04:c1:4d:89:ce:de:4b:04:8a:d8:f3:
         a4:1c:99:34:77:67:4c:fa:25:0b:27:d5:82:15:52:ad:52:76:
         af:c1:2c:44:a8:74:e1:cd:82:ea:74:89:e7:5c:43:ad:33:ba:
         e0:53:27:4b:57:55:8a:04:83:a9:aa:59:2c:e0:28:1e:c1:85:
         19:3f:fd:6f:08:d7:91:6c:4c:be:31:30:9f:4a:8d:89:4d:20:
         7c:47:35:76:a3:76:20:39:77:7b:a7:78:b3:ac:61:9d:9d:4b:
         25:a5:5f:df:54:7f:a2:f6:b9:81:d2:79:91:19:3b:21:c0:55:
         3b:09:f1:27:2d:cc:3a:bb:a5:53:e0:e0:06:2e:70:4b:4a:b3:
         fe:dc:36:4f:3d:23:d3:d2:2a:37:84:10:87:88:5a:c2:ce:95:
         9c:be:6c:b3:ab:ac:9a:72:40:ff:3b:09:4a:cb:97:c8:17:e5:
         ca:ea:c5:ac:6a:91:0f:17:1c:04:91:09:9b:47:b9:d7:3a:0d:
         6c:be:2e:10:2a:e4:24:17:1a:ab:69:ea:7c:94:38:cf:62:7b:
         fc:d8:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 14:14:31 2026 by rpki-client