Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa
File:                     678c9af5-e375-344d-99f6-39e192dcba5d.roa (raw, json)
Hash identifier:          2ZhTx54J91dXzhLYViuXTqtZ1OdAIRaLpSHfxWE5ijY=
Subject key identifier:   05:1C:5F:D2:DE:7B:A8:BD:89:3E:09:E5:73:C7:D1:47:97:44:70:FF
Certificate issuer:       /CN=e95630a3-5da1-408c-891c-268d2b4791c7
Certificate serial:       010D0C9F4328584EC0A72002AB5ED15351365780
Authority key identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     401380
IP address blocks:        2602:f7e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:20:02:ab:5e:d1:53:51:36:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95630a3-5da1-408c-891c-268d2b4791c7
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=cb459b57-dcad-4823-9313-e8bb7565edf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:8c:75:97:8e:d1:4c:c2:2a:fd:92:4c:cf:
                    d0:5d:94:e2:e0:b3:85:96:a4:ac:32:91:e7:a6:54:
                    3e:ff:73:ca:cc:d5:57:da:01:8c:94:84:84:4b:ce:
                    da:31:bf:a7:95:1d:69:48:a4:3a:36:8b:c4:d9:64:
                    0d:9c:3d:46:94:e0:bd:5d:f3:21:f2:a4:ad:f3:40:
                    a7:1e:3a:5a:bc:2d:ff:87:fb:fe:c1:56:21:da:74:
                    22:9c:a8:d5:35:fe:2d:79:19:b1:7f:04:39:6c:21:
                    89:cf:fa:14:2e:24:49:b5:d9:d1:01:4e:39:24:76:
                    95:cf:4a:a7:c2:af:1d:44:c4:18:ce:07:d3:f5:68:
                    47:a5:77:f0:77:3a:ac:0c:2f:d9:39:81:b8:a3:70:
                    ee:d3:c9:9e:de:6c:c4:c3:23:d5:90:fc:bc:dd:f9:
                    12:bc:06:0a:32:24:d0:33:68:d5:15:e5:88:f0:71:
                    30:38:b1:9a:d6:fe:cc:d4:a3:22:aa:06:ef:cb:3a:
                    d7:41:2d:af:06:0a:84:32:e1:ef:2e:71:4d:e2:92:
                    b6:c0:d7:7c:92:42:99:06:c9:23:03:aa:c1:87:76:
                    5a:ba:7f:40:a0:ef:20:6a:5b:74:12:00:ca:f9:33:
                    e0:dd:40:d2:72:05:fd:a5:50:45:4a:27:02:7d:03:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:5F:D2:DE:7B:A8:BD:89:3E:09:E5:73:C7:D1:47:97:44:70:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl

            X509v3 Authority Key Identifier:
                keyid:16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:60:15:25:e9:f1:60:78:4b:d9:d6:5f:47:44:77:fa:c1:
         37:35:da:22:a0:c4:7b:11:d1:6e:d7:32:f2:ad:2d:58:3f:d7:
         04:92:70:22:2f:4c:9e:4b:96:a5:64:51:6c:d0:bd:19:79:d4:
         80:86:30:2a:82:2f:d0:37:23:3f:4e:f2:e9:12:6c:6c:ab:3c:
         89:fa:1f:cd:84:0e:60:cf:32:5c:df:90:72:92:02:f3:24:36:
         a6:ba:f7:8b:64:9c:92:da:2b:72:35:bb:2d:9d:36:26:72:c2:
         e5:e2:78:be:bd:e9:49:77:61:94:39:f0:c7:74:97:6e:6d:ec:
         60:ba:25:e2:c6:63:54:31:6c:1e:8e:11:af:43:83:2d:b1:2b:
         32:10:b1:f7:e2:4c:5e:8b:39:37:3a:44:5b:4c:7a:a8:0a:90:
         bf:5e:de:35:41:13:84:b0:a1:dc:51:ef:39:12:cc:4e:b8:90:
         93:a5:4b:e6:2a:9e:20:d3:14:f2:9c:46:c3:f3:bb:fd:2f:94:
         85:d3:cd:a7:d9:19:08:e7:60:b2:78:ed:3d:9a:6c:3c:48:6b:
         19:fd:79:de:0e:ef:9b:09:dd:00:ec:de:af:37:58:a0:a7:3c:
         ff:08:9a:0b:13:80:70:8c:c5:d6:aa:b7:7c:b6:80:7d:88:c0:
         bd:de:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:47:40 2026 by rpki-client