Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/fb39095e-1908-3c95-8570-5a1380eb247d.roa
File:                     fb39095e-1908-3c95-8570-5a1380eb247d.roa (raw, json)
Hash identifier:          EOFu1ry3Ex4Q3pjTCcdZPKuvvLEpQEWrY7NyOrWo2ek=
Subject key identifier:   62:1B:0E:FC:68:17:66:9F:42:54:28:15:A1:AD:3C:F2:FE:04:3E:1A
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584EFCACEDDBDA3AE374A8E22380
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/fb39095e-1908-3c95-8570-5a1380eb247d.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     140666
IP address blocks:        2602:fa80:49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ed:db:da:3a:e3:74:a8:e2:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=289f4a6f-7c5e-4530-a90a-c1a9de9012a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:7c:70:00:87:12:a4:bd:9e:ef:42:cb:2e:
                    e6:a5:5e:fa:49:73:41:f9:06:86:d8:6f:00:d0:6a:
                    e6:fa:66:0e:59:d8:4d:67:45:2c:20:21:c3:80:26:
                    0f:09:ca:80:ee:e2:43:3a:4c:9a:c1:e8:02:89:fe:
                    b6:84:85:54:db:8d:d7:53:8e:5f:46:10:0b:93:51:
                    45:65:4b:3d:ea:41:95:ec:6f:48:cd:44:8e:8b:58:
                    24:c8:f9:e5:4e:0d:70:54:2c:ef:5e:6d:0a:86:4b:
                    2a:2e:56:07:44:49:86:c1:7f:64:e3:92:75:8a:5d:
                    e4:3c:f4:94:cb:b3:69:d6:dd:d2:b2:cd:2f:11:47:
                    9c:81:43:a0:4d:df:d8:66:d1:0e:13:28:8a:42:f3:
                    8b:33:39:40:e3:a3:e0:c0:3f:60:3f:95:5b:84:85:
                    bd:b7:13:56:f5:a8:3f:d5:ca:84:64:a8:e1:f4:f5:
                    13:fc:92:13:98:4e:f1:ed:2d:1d:b3:de:33:3c:96:
                    12:42:af:e8:4e:74:50:ba:ff:5e:40:37:52:5b:2d:
                    84:11:19:10:21:7e:ed:83:1f:38:2c:af:0f:95:68:
                    0d:5f:be:e4:22:da:a4:85:d5:c2:fa:cb:e6:cf:bf:
                    cd:f0:96:44:16:a0:1e:99:1e:0a:c6:3e:c7:54:d0:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:0E:FC:68:17:66:9F:42:54:28:15:A1:AD:3C:F2:FE:04:3E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/fb39095e-1908-3c95-8570-5a1380eb247d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:49::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:a0:d4:c3:0f:20:67:e8:19:a1:7f:ce:52:4c:1c:51:7d:
         5b:1e:8f:e1:ff:91:a4:0f:b4:c2:be:1d:1a:f0:8f:07:a4:ed:
         4e:7a:d0:e5:50:b9:67:8a:2b:25:90:c6:66:89:a5:4b:55:3b:
         28:b9:77:62:ca:90:29:95:cf:ee:34:09:9b:01:0c:04:5e:b5:
         b9:c6:dc:95:28:56:6e:d3:9c:49:04:c1:18:50:d9:89:b9:3f:
         06:30:b6:12:c9:71:51:cc:dd:11:d9:51:f8:92:c2:4a:59:82:
         ca:a7:83:c7:a3:59:1c:56:2d:89:86:3c:9a:da:dc:0d:40:0f:
         3e:04:b7:e9:96:44:5a:2c:b3:5f:06:14:96:1f:a1:99:c3:4f:
         8d:25:d9:57:f8:73:cf:c4:64:ce:dc:24:ef:c1:59:31:64:63:
         30:50:3e:1d:e0:18:03:f5:42:1b:34:fa:e5:d9:56:e6:8a:34:
         d9:d0:53:93:ee:89:65:ef:af:1c:4a:f2:3f:a2:e2:5e:ff:da:
         0f:b8:b3:fe:cd:2c:2e:72:e0:d2:94:ee:df:0e:99:eb:bf:3d:
         68:5e:03:5a:e3:fa:86:03:bb:27:34:11:b5:cb:ed:72:3a:f5:
         04:7e:d1:b4:9d:42:2d:6f:80:a0:7e:b9:06:1e:61:0b:a5:84:
         5f:ef:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:29:18 2026 by rpki-client