Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/70e56076-63e9-33d3-adbf-59ea8c937fe4.roa
File:                     70e56076-63e9-33d3-adbf-59ea8c937fe4.roa (raw, json)
Hash identifier:          l+sqcq4iRGQdjHvcBioMh+BpEJ0aBEJn9YCnoKVfplk=
Subject key identifier:   47:19:F6:D1:31:B3:03:07:48:F8:37:82:30:B4:F3:E2:1A:43:46:12
Certificate issuer:       /CN=52902e09-5b36-4abe-835d-b0750f2ec293
Certificate serial:       010D0C9F4328584EA787A829AAF068A1C8A2EBA4
Authority key identifier: 66:AC:2E:2B:C3:2A:75:B8:FD:BF:31:EF:59:64:15:7E:75:F3:B0:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/70e56076-63e9-33d3-adbf-59ea8c937fe4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32434
IP address blocks:        2602:f6a8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a8:29:aa:f0:68:a1:c8:a2:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52902e09-5b36-4abe-835d-b0750f2ec293
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0f717be0-20c6-4712-9376-7b0fd6e721df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:8f:59:e5:94:18:e5:b6:63:d8:ff:87:46:
                    a7:53:1d:2f:1b:5e:31:f5:64:41:5b:b0:a8:87:d3:
                    14:73:77:af:d7:8b:4c:59:83:ae:92:83:2e:ac:0f:
                    9e:46:61:17:e5:c3:02:77:ed:cb:3d:b6:f4:fc:f1:
                    2f:93:a6:27:bc:34:df:b6:bb:64:eb:c7:95:e4:53:
                    38:77:87:96:e8:69:24:49:7d:13:ea:06:15:70:44:
                    bd:ff:c8:77:8a:06:4f:38:de:ee:f2:2c:5a:d1:79:
                    55:8a:e0:7b:7f:08:ff:5c:14:da:94:1f:60:eb:25:
                    6a:c7:8a:ec:27:47:ae:fb:08:85:c2:7b:7d:8a:5c:
                    24:01:ef:f6:fd:48:09:0a:69:b0:a6:39:db:4e:8f:
                    36:1c:9d:0d:3b:29:96:3f:79:d2:a6:4f:8c:63:8f:
                    c5:77:77:80:82:81:52:91:12:c0:08:17:52:ff:e0:
                    e9:c3:3c:6d:bb:61:a9:a9:5e:99:85:02:e9:3f:25:
                    42:ab:6e:0e:39:b4:38:bb:c6:96:eb:8e:fc:49:7f:
                    7b:86:4f:88:bf:0a:56:56:bd:b0:b7:ea:c5:9b:14:
                    e5:f4:2e:59:72:75:97:eb:31:59:42:47:79:33:a5:
                    aa:c9:41:39:69:f8:70:a9:9d:f8:de:2f:f5:12:fa:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:19:F6:D1:31:B3:03:07:48:F8:37:82:30:B4:F3:E2:1A:43:46:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/70e56076-63e9-33d3-adbf-59ea8c937fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.crl

            X509v3 Authority Key Identifier:
                keyid:66:AC:2E:2B:C3:2A:75:B8:FD:BF:31:EF:59:64:15:7E:75:F3:B0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:66:b3:5d:b1:f4:bf:e4:51:68:50:5e:71:c7:e3:f7:2d:bc:
         e9:0e:04:24:34:07:71:60:37:c4:60:ae:70:77:26:b7:ca:3f:
         29:88:1f:ea:10:04:79:73:6a:41:7f:9f:4c:14:4b:2a:05:90:
         16:4d:0f:4a:61:cf:0d:c0:67:29:49:d6:c6:ea:14:37:26:53:
         54:c1:2f:ad:22:fe:d5:c5:fc:16:55:28:00:e5:e6:4c:bc:2c:
         6a:eb:28:a0:c1:3d:c8:4e:d4:43:27:0e:e7:fe:9d:47:5e:50:
         24:4a:5f:f8:3f:26:75:88:0b:a8:5e:cf:cc:9c:a9:b5:8b:bf:
         67:61:21:f9:ae:fa:ad:b8:a1:1a:7e:e7:c9:1f:85:41:43:92:
         cc:b3:a4:48:33:60:ea:d8:a7:a1:34:78:0e:1d:9a:14:33:10:
         18:c3:55:a4:94:a7:a0:a9:f5:1f:14:18:da:85:54:03:6d:78:
         c6:50:6a:79:33:1b:99:cd:20:18:e7:46:11:73:fb:1e:1b:a9:
         28:7a:b8:12:9a:69:8c:0a:99:c3:2f:5c:9b:60:e6:72:72:fd:
         f5:a6:85:b7:90:15:6c:ef:ea:91:89:81:95:42:00:73:a3:3c:
         65:aa:a7:eb:e8:53:a0:58:25:6b:51:4d:14:82:12:49:ab:ef:
         00:17:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:05:28 2026 by rpki-client