Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
File:                     c8350e69-c682-3045-a668-12659de11f07.roa (raw, json)
Hash identifier:          rYnmLLdIUH4NkSV1u1lPBaL7ASTHwXurdb6/A7Cddr8=
Subject key identifier:   AE:7E:AF:F8:D1:7C:AC:65:F5:98:93:13:9A:D6:1E:A3:2A:79:33:8E
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584E2AD46343E45F6C667D387880
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     400861
IP address blocks:        2602:2da::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:63:43:e4:5f:6c:66:7d:38:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=b0cad37a-0d81-49ce-9e55-3e7fb17ebea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:d2:ce:04:f6:4f:af:32:7a:00:ee:57:c2:
                    18:89:0a:08:b4:1f:68:41:00:e8:a6:78:9a:ad:b8:
                    dd:8f:fc:ca:80:3b:9f:ec:f8:3a:3e:72:7b:b8:98:
                    5b:37:f9:ce:07:81:b4:9e:6d:39:4a:75:b3:33:51:
                    1c:ec:f9:a6:14:2f:9c:78:2d:76:42:e9:a7:f2:65:
                    fc:05:1c:1e:1f:e6:76:69:58:bf:9e:47:2c:e7:fd:
                    56:f3:68:dc:9a:0f:cb:2a:d8:9c:86:17:c5:22:03:
                    e5:5b:fb:00:64:1e:b9:9a:73:2b:bb:56:bd:d7:bf:
                    e2:4e:98:51:b8:6a:10:79:bf:33:ef:d0:95:a4:95:
                    98:57:4c:a5:f7:ba:60:5c:74:cc:48:5b:fe:5a:67:
                    63:71:de:82:a9:16:cd:69:1d:44:52:af:a6:38:0c:
                    cf:4d:19:43:3d:be:7f:7c:4e:9e:69:e6:f4:db:0b:
                    53:63:87:e8:c6:d3:c0:df:43:04:a1:20:2a:f6:ec:
                    69:d0:1b:a4:7d:36:3f:c2:3c:19:a7:8d:e3:6b:61:
                    7d:72:7c:63:f2:37:0c:ae:4c:1d:b1:b3:1e:cb:28:
                    7b:5c:01:e9:80:7d:2a:1c:fe:6d:5f:ed:a5:46:e3:
                    66:3d:08:ac:da:cf:99:c1:e5:93:33:07:69:d8:bc:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:AF:F8:D1:7C:AC:65:F5:98:93:13:9A:D6:1E:A3:2A:79:33:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:65:be:ad:76:b3:14:aa:ee:24:3e:d8:45:2a:dd:86:12:3c:
         54:ff:cd:58:6f:2b:dd:32:fd:af:71:6a:a5:2d:a1:3e:2c:57:
         ed:20:9d:fb:c9:25:25:9f:2e:52:e9:4c:c5:37:c2:08:f5:28:
         fb:42:d3:66:5d:98:7e:62:b5:b7:16:d6:46:e3:eb:a6:a3:d6:
         03:07:6e:bf:33:e4:77:6f:41:f5:17:03:05:55:53:04:95:ea:
         2f:2a:cc:48:0a:8e:80:c7:33:ce:23:51:07:f6:ee:30:3c:ff:
         36:29:75:db:b6:0a:1f:2d:d2:e2:4f:68:d7:23:20:02:56:13:
         cd:5d:d7:f4:4c:ee:e9:c0:0a:5a:98:40:ad:7d:a5:79:6b:ee:
         78:f3:1f:4f:fa:bc:8e:ee:ff:5d:d1:27:6e:0b:1d:0b:69:27:
         61:99:76:32:ff:27:b4:04:f7:c2:39:43:37:b7:ab:e6:1e:cf:
         e8:07:0b:82:99:08:9e:f3:24:d7:cd:4b:dc:cd:0b:5c:0d:8e:
         f1:79:b0:f3:fe:be:c8:a8:70:ac:14:fd:0e:13:4e:11:bb:0f:
         72:3c:ab:23:d4:a5:08:11:f2:2a:fb:56:51:7f:f5:6a:8d:39:
         b4:07:30:6f:94:49:2a:c6:e8:96:f4:89:8c:bf:e1:9a:80:99:
         cc:34:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:39:19 2026 by rpki-client