Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/da764e57-d371-3aea-a5d0-59b45c1d28c4.roa
File:                     da764e57-d371-3aea-a5d0-59b45c1d28c4.roa (raw, json)
Hash identifier:          lyr/27120xZzS5rcCi/9CnS2W5g0eL2cKwpxcMcLLzk=
Subject key identifier:   28:1F:21:F1:F1:4C:FC:DE:A9:79:1E:FA:75:B5:BD:B8:D2:EA:79:57
Certificate issuer:       /CN=8f9ed5df-dc06-4b74-8864-d26d2a6a0abc
Certificate serial:       010D0C9F4328584E4BD819A1853B242587449940
Authority key identifier: 34:6D:4C:E1:C0:5C:EF:BD:26:69:2B:FC:62:28:CD:B6:A8:AA:2C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/da764e57-d371-3aea-a5d0-59b45c1d28c4.roa
Signing time:             Fri 26 Jun 2026 04:49:33 +0000
ROA not before:           Fri 26 Jun 2026 04:49:33 +0000
ROA not after:            Thu 24 Sep 2026 04:49:33 +0000
asID:                     9304
IP address blocks:        2602:f67e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4b:d8:19:a1:85:3b:24:25:87:44:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ed5df-dc06-4b74-8864-d26d2a6a0abc
        Validity
            Not Before: Jun 26 04:49:33 2026 GMT
            Not After : Sep 24 04:49:33 2026 GMT
        Subject: CN=e28660e2-c7ba-423c-a9f3-482eda8cb62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:65:51:5f:74:a5:58:b5:57:87:48:f1:98:
                    42:c5:90:50:17:32:49:5e:7d:18:df:0c:3b:88:15:
                    78:03:0d:b8:e8:0d:16:49:b1:3c:6a:59:94:6b:26:
                    5a:c6:a3:71:91:ea:30:68:b0:e7:44:55:03:61:7a:
                    16:13:23:1c:79:47:fb:ba:5e:4c:b4:b9:65:b3:63:
                    ed:1a:c4:2e:aa:44:51:5a:bc:96:c1:28:be:3f:d3:
                    ee:77:78:35:f0:74:9a:26:b6:9a:ea:9f:75:fc:c9:
                    06:b3:3c:c2:2a:e0:4e:81:26:c5:64:b2:b0:95:06:
                    8c:0b:35:80:58:44:30:0c:4b:ae:87:89:59:eb:ff:
                    af:e7:ac:a4:25:75:a0:db:a4:5f:c9:c2:70:c1:9c:
                    87:c5:21:b4:88:b1:6f:7f:4e:76:2b:99:5e:1f:e7:
                    bd:af:2b:56:6c:5f:a0:ec:f3:93:f6:99:7d:50:56:
                    f1:5b:5b:16:66:51:20:9e:7b:32:27:38:14:70:6d:
                    2a:a4:6e:b6:1d:c2:56:88:7c:8f:fd:b9:63:6b:50:
                    52:39:de:39:01:1b:8e:bb:36:36:6c:54:e7:a6:36:
                    64:38:13:97:dd:2b:4c:91:2e:b6:5f:e7:84:36:f5:
                    5b:2a:d8:23:ce:07:ec:81:74:fc:85:99:52:ac:70:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1F:21:F1:F1:4C:FC:DE:A9:79:1E:FA:75:B5:BD:B8:D2:EA:79:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/da764e57-d371-3aea-a5d0-59b45c1d28c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.crl

            X509v3 Authority Key Identifier:
                keyid:34:6D:4C:E1:C0:5C:EF:BD:26:69:2B:FC:62:28:CD:B6:A8:AA:2C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f67e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:5f:04:8b:d5:aa:88:12:c5:3c:fc:0c:2c:98:cb:46:2f:
         29:8c:7e:91:f5:7c:af:76:10:aa:ea:0c:fd:3f:5d:fc:63:99:
         5a:60:e0:6c:f7:94:e1:85:31:d9:10:25:ea:e2:bf:91:59:5c:
         18:1b:ee:fa:18:aa:c0:4a:8a:9e:0d:b2:8b:b8:dc:19:d0:42:
         aa:49:1b:20:f7:2e:88:bd:d4:59:27:b1:95:00:3b:15:13:ad:
         f9:56:33:f1:1c:f8:c7:a2:07:b4:3a:1d:84:40:fc:51:a6:16:
         62:04:6b:da:be:0c:c3:ca:36:75:72:ee:c4:77:44:86:cb:ad:
         41:87:e4:45:34:72:65:6f:68:0b:08:3e:2f:be:b2:15:de:dc:
         de:c8:22:9d:a5:d9:c7:bc:f9:26:d0:8a:ab:d5:5a:25:02:e4:
         03:5e:f0:7b:ec:99:9f:d2:38:ae:49:e6:eb:c0:eb:1e:f6:6f:
         0c:3b:83:6a:ee:7f:b1:1d:33:13:0f:ab:af:37:ba:a1:ed:b5:
         a3:e7:2e:1d:f0:d0:1d:d5:58:42:60:7e:c4:a9:1c:3a:3a:b2:
         b5:d3:56:62:22:b8:9b:2f:f6:c4:bd:c1:4e:d7:e6:2f:89:fb:
         24:12:de:ee:6e:05:7d:80:ed:60:1f:4a:c0:17:0b:c3:b0:48:
         f7:a0:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:22 2026 by rpki-client