Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa
File:                     fc786f57-8d05-329e-8903-a6e495bd3db1.roa (raw, json)
Hash identifier:          nLS6U5EivW9w/Qc5zxww3JCA15WCvgrfHcJtTSd/Qyo=
Subject key identifier:   77:F5:27:AA:B5:91:B9:36:0F:EF:77:45:48:DC:A0:93:1D:46:06:A3
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F4328584E683F6104158535BFE94B0A80
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     8079
IP address blocks:        2602:f718::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:61:04:15:85:35:bf:e9:4b:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=463aaed3-e47b-40d9-a07c-4271438d1bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:f1:71:7a:32:48:6d:f0:49:e6:3d:96:6c:
                    15:14:a4:2b:83:fd:e4:ea:b2:28:6b:4f:9a:44:10:
                    cb:0c:80:d5:54:92:a9:15:8b:cd:f3:97:f6:7c:01:
                    b4:04:8e:ed:12:6a:42:19:b0:be:3b:61:bf:2c:27:
                    e9:d9:ab:8b:96:9b:66:a9:1c:f1:bb:20:de:90:30:
                    fe:bc:9a:88:3a:e0:36:c7:4a:a1:0b:ae:25:13:1a:
                    79:66:87:cd:ec:0d:9b:78:b4:07:97:cd:c7:22:39:
                    c7:fd:b5:05:e2:f9:06:8a:d5:f6:66:03:0c:28:39:
                    25:45:60:bc:ac:3f:04:0d:76:e5:aa:a8:98:d4:a1:
                    e2:fe:7e:36:38:ae:45:21:2a:4e:28:31:32:47:5e:
                    4f:57:03:fd:45:6f:bd:c2:b2:27:70:f0:4a:99:78:
                    52:94:31:3e:bd:0f:b6:a2:fa:6b:96:ef:c8:b6:93:
                    19:49:91:35:24:b2:87:08:1a:48:a0:df:b4:82:25:
                    21:95:ed:7f:5f:63:e0:11:10:70:b4:b9:51:28:26:
                    ff:db:6e:a3:bf:40:db:a9:b5:c4:bc:5a:2d:8d:a8:
                    05:5a:91:ae:1b:9f:03:6c:11:a7:5a:03:a3:83:d7:
                    bd:23:cf:08:1a:2a:41:95:df:b6:05:b0:cb:8e:22:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F5:27:AA:B5:91:B9:36:0F:EF:77:45:48:DC:A0:93:1D:46:06:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e5:89:9d:a2:9f:17:34:00:86:25:aa:e8:65:3d:54:45:ee:
         84:05:5a:ac:04:d8:7e:c4:aa:ec:8f:ed:bb:f3:2f:3e:53:7d:
         f1:00:99:16:fd:7b:15:da:60:89:4b:72:10:26:de:91:51:23:
         e8:3a:98:98:8c:70:eb:ff:3d:9e:d5:0d:95:74:e0:36:18:08:
         ac:4b:e2:52:dc:6c:e4:9f:bb:c5:96:6f:3d:c4:f0:c5:ca:85:
         1b:97:6d:00:a3:57:c6:8a:f4:03:73:5e:30:f3:0e:67:d5:83:
         f3:f2:3d:76:75:5c:7b:ad:0d:91:94:03:7f:4b:3a:1d:2f:24:
         25:d6:d6:fd:1f:ba:14:be:46:a5:67:4e:f5:db:08:1c:a1:cf:
         ac:23:a5:cf:d0:cb:f7:5b:d2:69:89:73:2a:7f:94:55:68:01:
         c8:a1:75:62:dd:34:db:68:e2:b2:a7:75:dd:76:7b:ba:e2:f8:
         ac:4c:62:1f:f7:f5:71:87:48:6d:98:3f:6e:f2:e9:03:f9:4a:
         1e:f1:9a:ee:72:54:f1:9a:f3:48:9d:24:cf:55:dd:60:cc:c0:
         2d:72:76:a3:7a:b1:14:16:1b:ce:0a:23:e3:e6:d1:f3:0f:5a:
         0b:b2:fc:34:4b:f4:2e:df:81:79:f4:62:cd:64:64:bd:1b:8f:
         60:c2:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:38 2026 by rpki-client