Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/a2be95b3-1a83-3528-a958-0c7fc1baab34.roa
File:                     a2be95b3-1a83-3528-a958-0c7fc1baab34.roa (raw, json)
Hash identifier:          La9k+8TUTWwrEkWHpyQ7lOC43dZ5k9QtHes06Fq0yf4=
Subject key identifier:   D7:2D:12:31:60:BB:7D:A8:BB:80:98:92:7C:A0:58:BF:84:D2:3F:6A
Certificate issuer:       /CN=70a36240-104b-454c-b230-bf415e356e88
Certificate serial:       010D0C9F4328584F067238EC04F71F8DD4C66080
Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/a2be95b3-1a83-3528-a958-0c7fc1baab34.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     206439
IP address blocks:        2602:f7bc:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:38:ec:04:f7:1f:8d:d4:c6:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a36240-104b-454c-b230-bf415e356e88
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=08f7f108-bf9a-4c63-9b77-c2c6e0c9252a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:0d:ef:50:dd:d1:d5:f6:bd:55:eb:52:fe:
                    03:35:ce:0e:e2:94:59:99:9a:6e:f1:68:16:8a:0d:
                    5c:f3:ee:f7:2c:62:57:2a:4f:ac:22:9a:93:81:cc:
                    86:a1:8f:86:9a:07:06:ef:66:ac:31:80:c1:80:4f:
                    5f:41:5b:bd:a2:08:4d:a8:d6:c4:9a:7a:51:1c:be:
                    dd:e8:fa:95:ab:77:a0:38:ec:5a:41:ec:0c:e6:bc:
                    bb:f7:88:df:65:50:8a:84:1d:7b:18:71:cd:10:31:
                    01:40:46:bb:58:20:45:d9:ce:91:b0:0a:71:1f:d6:
                    9f:54:36:f0:b7:2b:e5:4d:ce:8b:5f:07:22:85:36:
                    10:69:a6:e9:77:96:05:54:13:16:3f:5c:7e:f6:72:
                    ce:c4:f3:e7:cb:d8:38:ea:0b:10:3f:34:6e:20:64:
                    ab:0d:5b:33:1d:6b:34:8f:e7:0d:78:37:6d:5e:ce:
                    93:f6:2c:9f:b4:c1:48:78:b2:d8:b5:b4:97:01:ee:
                    f6:01:f1:0e:2d:70:df:f5:a7:d9:1a:d6:e5:bd:bb:
                    e9:9b:3e:32:77:5b:17:73:8b:61:8a:c7:2e:a7:0d:
                    14:c0:d0:92:b3:e8:03:f5:10:b3:b5:ee:59:43:ba:
                    c6:88:42:b2:7d:38:1a:92:06:04:5a:00:90:8e:75:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2D:12:31:60:BB:7D:A8:BB:80:98:92:7C:A0:58:BF:84:D2:3F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/a2be95b3-1a83-3528-a958-0c7fc1baab34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl

            X509v3 Authority Key Identifier:
                keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bc:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:be:28:d7:f7:1b:fa:d9:4f:9c:77:ad:62:aa:61:a0:28:a7:
         d1:57:8a:ae:bd:9a:0b:2d:73:c9:a6:b2:a0:b8:89:0f:eb:df:
         fb:da:dd:27:f3:1f:4c:c0:09:9f:ea:02:58:d7:a3:1b:91:44:
         17:9d:b9:bf:0a:35:c9:3f:65:43:19:e0:e3:1c:ba:27:38:a4:
         c9:94:56:e8:88:44:c7:ae:ba:8a:ae:d3:4e:39:48:56:f3:0e:
         1d:ee:8c:8d:04:fd:ae:de:6c:ec:eb:a0:4b:70:3b:83:ee:0a:
         b2:d0:04:2e:72:51:02:7f:c0:23:5a:0b:c8:e0:f6:4d:9f:b7:
         58:59:79:1c:e2:28:5f:2b:75:2e:72:ee:48:d4:e9:1c:90:e6:
         15:3d:f9:99:b9:22:87:d0:9b:8a:ff:23:05:74:47:b9:18:e3:
         74:fe:c9:f1:51:cf:d2:73:dc:85:8b:bc:4b:15:d9:11:86:fc:
         6c:9f:b7:d5:22:2a:95:33:d0:51:82:f0:60:fa:67:70:bc:25:
         0f:72:f7:80:41:a3:6c:8c:37:46:be:5d:0e:88:75:eb:be:b0:
         02:22:25:d4:d9:64:86:e1:90:2d:83:c9:1f:41:c5:b9:a4:ea:
         a2:01:d7:0d:b4:8b:98:81:70:a4:0c:51:e0:db:d1:ee:37:97:
         2e:ab:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:41:46 2026 by rpki-client