Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/da764e57-d371-3aea-a5d0-59b45c1d28c4.roa
File:                     da764e57-d371-3aea-a5d0-59b45c1d28c4.roa (raw, json)
Hash identifier:          rGYE2S+6hRArWRFZd/Klbwyj3TCHNJXgGKqmPqb/dAs=
Subject key identifier:   B1:D3:C4:50:0E:D5:75:09:B1:DC:7B:14:9E:EB:AE:C5:FE:D6:5C:A9
Certificate issuer:       /CN=8f9ed5df-dc06-4b74-8864-d26d2a6a0abc
Certificate serial:       010D0C9F4328584EEEB74B120B19723AF2BA6800
Authority key identifier: 34:6D:4C:E1:C0:5C:EF:BD:26:69:2B:FC:62:28:CD:B6:A8:AA:2C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/da764e57-d371-3aea-a5d0-59b45c1d28c4.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     9304
IP address blocks:        2602:f67e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:4b:12:0b:19:72:3a:f2:ba:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ed5df-dc06-4b74-8864-d26d2a6a0abc
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=8c3af25b-6020-417a-b8ee-f66f2905755f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:88:50:1b:34:d5:61:bb:7e:93:7c:65:60:
                    d6:9c:af:46:3c:2a:b2:f4:6f:13:73:86:79:d6:e9:
                    83:89:88:6b:f1:af:f9:6e:f5:5f:90:1b:ff:3d:17:
                    59:62:65:60:f1:88:6a:fa:77:41:43:b2:20:67:fe:
                    2c:ef:e9:3d:92:1a:fc:42:fb:eb:05:6c:73:21:40:
                    34:0e:91:f4:51:1c:2b:fb:d6:a4:40:6e:51:c9:16:
                    27:8b:78:b7:1f:50:54:6d:53:37:ce:a9:21:3b:a6:
                    00:17:ae:c5:38:03:93:1b:13:9a:b2:93:c5:64:05:
                    5d:c8:f6:ec:57:6f:41:71:74:66:95:10:dd:cf:fe:
                    1a:90:76:4d:41:0d:63:72:54:b8:ea:6b:6d:75:47:
                    e8:90:e9:24:09:5e:f7:84:0f:32:3c:ab:67:74:15:
                    01:45:ed:bb:00:90:77:20:ec:21:82:4e:92:11:28:
                    c8:7c:7a:55:2e:4d:2d:ad:90:ea:52:4a:31:96:ad:
                    62:d3:cc:c4:cb:29:03:c2:54:f4:bf:ee:34:3d:fd:
                    83:4d:66:25:25:39:91:b1:3e:f1:42:f1:1b:35:74:
                    2d:a2:e3:e7:5f:2a:d5:5a:48:de:72:56:1b:ce:26:
                    ad:e7:6d:9c:49:a6:18:61:17:bb:19:1e:72:38:c9:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:C4:50:0E:D5:75:09:B1:DC:7B:14:9E:EB:AE:C5:FE:D6:5C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/da764e57-d371-3aea-a5d0-59b45c1d28c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.crl

            X509v3 Authority Key Identifier:
                keyid:34:6D:4C:E1:C0:5C:EF:BD:26:69:2B:FC:62:28:CD:B6:A8:AA:2C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f9ed5df-dc06-4b74-8864-d26d2a6a0abc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f67e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:7b:47:3e:14:10:88:70:48:5c:7f:26:f9:8e:4b:c6:18:
         d8:1b:7c:a3:ef:74:c6:20:5b:11:dd:11:25:cb:8f:bb:2e:06:
         00:ec:c1:03:14:5e:b0:18:5a:b4:f1:2e:d9:0e:61:a4:8a:b6:
         34:f6:a4:80:0a:62:a7:01:4a:8a:02:ad:fb:43:c9:03:cc:99:
         f2:d1:4e:a8:f3:37:e0:04:41:68:4a:81:23:24:dc:0c:14:ec:
         5d:98:d0:31:9d:c6:f1:e8:c5:f4:68:f7:05:7f:72:f3:9b:30:
         88:eb:84:a9:e1:f6:df:02:c5:9e:3d:32:4f:ea:d6:0b:4e:5f:
         73:31:94:d1:49:00:c9:94:27:f3:61:f7:49:6e:5c:1a:24:ff:
         75:65:60:ac:cf:c2:18:0a:ae:ce:69:29:cb:94:a7:33:3a:0b:
         2d:69:69:67:ad:a5:f2:6f:7c:04:5a:7b:71:d5:3a:f1:f6:9e:
         ec:13:a1:35:9f:cc:87:8d:c7:3a:88:00:78:11:2e:84:ac:01:
         27:94:40:f5:d4:b6:ab:4c:40:67:da:59:4b:ba:f4:ae:f0:b9:
         de:7c:00:81:5d:df:ff:ef:ad:b7:38:54:85:aa:23:34:3d:e4:
         2c:cb:ab:15:61:05:9e:61:96:b7:1d:3d:bd:be:fb:0b:15:78:
         09:3e:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:44:45 2026 by rpki-client