Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/befc38c7-5468-3778-953c-7d7e5f66777a.roa
File:                     befc38c7-5468-3778-953c-7d7e5f66777a.roa (raw, json)
Hash identifier:          8OF2jnWEv/zpAqcy3c1sHlihkqHCXodA3Euue3tATEo=
Subject key identifier:   5F:46:F4:76:C5:3C:22:33:42:01:95:01:14:C2:33:91:32:8A:85:87
Certificate issuer:       /CN=addfa849-95a5-420b-9709-5cafc0b4ffa4
Certificate serial:       010D0C9F4328584EA795D5BD3FACE8FA569CEEC0
Authority key identifier: 7E:DA:3C:1E:9A:B1:12:27:F5:35:59:8C:BF:94:92:6D:95:B9:84:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/befc38c7-5468-3778-953c-7d7e5f66777a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40507
IP address blocks:        2602:f949::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:d5:bd:3f:ac:e8:fa:56:9c:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addfa849-95a5-420b-9709-5cafc0b4ffa4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=964aa30b-419d-4440-bc56-f205d8a67419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:bf:34:0a:0a:b8:97:92:83:3d:0b:e2:8d:
                    22:f6:35:e8:0d:02:ab:1e:7f:e3:fc:5f:04:3b:8b:
                    b2:bf:e6:9d:6f:e1:32:d1:c9:c9:d7:ad:46:c6:04:
                    e5:97:a6:d6:22:3c:99:4d:6e:7f:cf:3c:15:7d:99:
                    f6:99:ed:ee:5c:c7:93:a4:ff:29:ad:d1:17:b1:5f:
                    18:97:a7:0e:c7:5a:cb:5d:ef:2b:f5:72:c9:e0:79:
                    31:5e:86:a3:38:51:07:ca:45:59:1f:dc:be:eb:86:
                    11:6d:9e:d7:60:43:59:e2:ee:f7:00:6f:cb:c3:b1:
                    d1:79:c0:a4:28:bb:36:4c:f1:46:8a:80:81:b7:bc:
                    64:2e:73:6f:0b:54:89:2c:72:ea:03:43:40:34:8d:
                    fa:a9:7f:0a:3a:65:38:32:2d:fb:b1:df:c7:70:7e:
                    af:6d:bf:2b:08:df:ad:3e:fe:49:b0:89:51:ac:c6:
                    58:be:c1:ad:0e:7b:23:7a:62:ae:26:4b:73:b8:07:
                    b7:60:e5:a3:aa:e3:b3:2a:74:82:05:8f:97:6b:72:
                    42:08:14:af:cc:b3:31:cb:53:25:15:80:63:ac:c2:
                    48:99:d4:26:6e:44:26:5a:0d:71:c5:33:4d:26:b6:
                    c6:b2:49:91:45:28:3a:1d:ba:2a:69:6f:6a:45:c9:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:F4:76:C5:3C:22:33:42:01:95:01:14:C2:33:91:32:8A:85:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/befc38c7-5468-3778-953c-7d7e5f66777a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4/addfa849-95a5-420b-9709-5cafc0b4ffa4.crl

            X509v3 Authority Key Identifier:
                keyid:7E:DA:3C:1E:9A:B1:12:27:F5:35:59:8C:BF:94:92:6D:95:B9:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/addfa849-95a5-420b-9709-5cafc0b4ffa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f949::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:54:da:a6:ce:5a:a8:48:9e:11:9d:fd:5c:f2:da:93:8e:
         81:2b:74:61:9f:d8:4d:9b:ea:22:e2:3b:59:74:ff:b8:48:cb:
         22:f8:90:36:f3:f8:90:eb:80:a8:b0:57:80:da:c2:76:9a:ab:
         92:a3:32:69:c8:f5:70:c2:cf:d0:cb:d8:78:0e:1d:8b:e1:d4:
         75:19:70:aa:f0:9f:c0:18:d3:4c:73:38:2c:da:11:54:3b:71:
         79:d6:00:8f:9b:a7:4f:32:22:91:b5:82:bc:4c:a1:c7:b2:1a:
         f7:da:7c:81:d8:ef:61:ba:1b:e9:9e:01:ff:7b:fe:e2:9a:94:
         39:1d:2d:b5:af:91:f9:85:b9:74:57:9b:f7:23:5c:fa:35:23:
         26:b2:7e:9f:16:59:ae:9c:ac:23:0a:f0:65:ae:8f:30:c9:ed:
         53:05:c1:d2:e4:5a:27:ca:0a:61:ed:7f:a8:dd:59:7f:7d:5c:
         71:16:7a:f6:7e:5c:bf:58:14:57:10:bd:63:02:4b:66:11:75:
         c7:32:2a:2f:54:78:19:7b:bd:06:30:fe:3e:d6:a7:07:88:5a:
         b3:19:09:db:6d:2f:b5:13:0d:b3:e6:ac:02:2c:d3:a3:23:e1:
         b9:4f:a6:6e:84:0d:22:e7:21:41:f4:02:3d:0b:e4:73:be:89:
         e0:7a:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:15:00 2026 by rpki-client