Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/8cd2c080-6488-384c-860b-b025245289d5.roa
File:                     8cd2c080-6488-384c-860b-b025245289d5.roa (raw, json)
Hash identifier:          zxfO7etoirhD+5zDzO8Ml0F4T9p1q4b2I9rbNxT3njo=
Subject key identifier:   2B:D3:57:FF:17:8B:5F:6D:1B:E9:FD:E5:E1:FA:00:2A:7F:55:0C:F9
Certificate issuer:       /CN=abd79bfe-1e9a-4459-ad7a-dd64446b670b
Certificate serial:       010D0C9F4328584E66DA4BC25662AB721C272300
Authority key identifier: 64:2F:41:1B:83:EC:CD:BB:FB:55:4C:74:D4:DE:99:FD:FA:8F:FA:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/8cd2c080-6488-384c-860b-b025245289d5.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     32167
IP address blocks:        2602:f3f2:b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/abd79bfe-1e9a-4459-ad7a-dd64446b670b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/abd79bfe-1e9a-4459-ad7a-dd64446b670b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:4b:c2:56:62:ab:72:1c:27:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd79bfe-1e9a-4459-ad7a-dd64446b670b
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=f4ec1e9f-8186-4461-9b79-09b0c1414358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:e1:79:36:3d:20:e4:dc:cb:80:6c:54:aa:
                    53:ce:90:35:5b:8e:95:ba:ef:cd:af:ab:8e:26:df:
                    fc:c9:d6:dd:d8:0b:b5:a8:a4:3f:15:b7:e6:e8:19:
                    20:66:ae:e3:fe:fd:08:95:7f:08:56:33:2e:f2:31:
                    aa:51:41:fd:3b:6a:1d:70:b7:36:d3:e0:f4:fe:3e:
                    22:2f:4d:1a:04:75:64:f4:bf:84:ab:a1:d4:90:05:
                    1e:eb:05:d1:40:57:3d:eb:4a:d0:b5:96:db:9d:2d:
                    d9:c0:9b:ea:f9:54:b7:3b:67:68:40:58:6f:f5:68:
                    75:8a:f9:85:44:f0:94:61:88:58:c5:ef:36:87:29:
                    72:62:9d:22:f1:cd:7e:1f:33:61:aa:db:39:53:43:
                    29:ca:07:dc:3a:f1:2c:ad:06:69:ee:ea:88:06:ce:
                    7e:e1:d2:c4:d6:ae:4d:a9:53:ea:7a:50:21:45:51:
                    8c:57:27:f6:f7:4b:14:f4:61:3f:58:b6:6e:6a:16:
                    f4:cd:e7:4a:de:b1:13:bf:64:5f:eb:8c:ed:bd:c4:
                    9d:a4:cc:34:39:8c:5e:eb:f7:30:39:ff:26:46:ad:
                    e6:76:d5:86:ba:ad:3c:7a:65:a7:83:66:e7:30:16:
                    e8:5f:55:56:02:0f:ba:b5:e6:80:ce:27:9e:03:d9:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D3:57:FF:17:8B:5F:6D:1B:E9:FD:E5:E1:FA:00:2A:7F:55:0C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/8cd2c080-6488-384c-860b-b025245289d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/abd79bfe-1e9a-4459-ad7a-dd64446b670b.crl

            X509v3 Authority Key Identifier:
                keyid:64:2F:41:1B:83:EC:CD:BB:FB:55:4C:74:D4:DE:99:FD:FA:8F:FA:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3f2:b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:55:b6:8f:3a:97:89:3e:a0:a9:e1:b8:e3:b8:a1:36:ba:25:
         86:60:11:b0:7a:93:b9:7f:fa:6b:12:0b:53:8a:4d:2c:9f:1e:
         9f:44:93:4f:e1:23:96:88:8a:d7:20:4e:43:22:b0:58:33:de:
         af:fb:47:51:db:80:f9:bb:ab:61:70:23:e0:b8:b3:1f:64:f6:
         44:e6:4c:3d:c7:39:89:4f:33:4d:b1:2a:0f:5b:2a:16:0e:81:
         88:ce:12:d0:d0:80:6b:40:cb:a4:93:47:41:57:7b:ea:27:b4:
         0d:04:a4:1b:f8:63:b7:cf:07:a5:19:f5:f8:bd:9f:98:18:f3:
         7c:7e:de:6a:98:3b:34:9f:c1:68:20:5f:38:3b:82:7a:eb:1c:
         62:4f:a7:e9:3a:56:f6:72:f8:8a:73:af:b2:a9:91:7f:6a:c9:
         96:01:13:ad:a0:f8:18:44:50:3c:e6:20:9c:ea:6d:b3:a1:e6:
         02:7b:f8:32:8d:7f:1c:fa:20:13:0c:d6:df:70:d4:4e:06:6a:
         b9:76:9b:3c:78:a1:fc:9f:e7:7b:d9:73:cb:dd:b1:74:e7:0e:
         41:21:e1:f2:3c:47:8c:9f:7c:a5:4e:f0:a1:6b:97:43:07:84:
         c3:f6:23:eb:32:8c:60:86:9b:b2:a7:f3:9f:fd:d4:8d:ae:e9:
         24:48:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:24:03 2026 by rpki-client