Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/8ee9fa63-2436-3b1c-ba3e-9586b50ba310.roa
File:                     8ee9fa63-2436-3b1c-ba3e-9586b50ba310.roa (raw, json)
Hash identifier:          dwGNvRy+ky/TLxO88di/Qp08E7FbQCYPkGRaSksP72M=
Subject key identifier:   BB:FD:EC:8C:C5:02:17:C3:F8:64:BF:8E:34:3C:65:9A:D3:D8:E3:7B
Certificate issuer:       /CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54
Certificate serial:       010D0C9F4328584EC7A1E9784E98F036C171F300
Authority key identifier: 19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/8ee9fa63-2436-3b1c-ba3e-9586b50ba310.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     401879
IP address blocks:        2602:f5b8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e9:78:4e:98:f0:36:c1:71:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=3bfb74ac-f21a-40fd-b589-9770851de7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:33:f7:1e:31:9e:65:d8:46:ba:3e:18:2b:
                    02:7a:99:4c:4d:2b:5d:9d:f7:74:3f:09:02:fb:7e:
                    e0:13:69:40:50:bf:58:4c:3a:2e:78:1a:ee:ca:ca:
                    a9:ec:09:3d:c8:c3:e7:62:0d:ed:8e:4b:09:e8:cc:
                    91:d9:5c:0d:29:64:82:05:2c:f3:7e:33:cf:e4:f5:
                    ff:65:04:b3:37:24:c0:be:c6:7f:44:e4:59:77:55:
                    50:cd:16:6f:c4:61:45:e1:b8:ce:0e:a9:fe:d6:a5:
                    77:c8:32:24:8b:58:52:a2:b5:b9:d0:8a:37:10:1b:
                    2a:d4:19:42:d2:f0:41:de:e2:3f:d3:31:81:9f:89:
                    55:52:c7:f4:16:73:df:ed:5f:fe:8f:ae:b3:f1:1f:
                    74:33:d9:78:bf:10:de:56:17:33:ed:2c:0d:e0:23:
                    17:a5:5b:6b:41:83:43:71:d7:7a:d7:46:eb:db:3b:
                    32:ed:af:81:83:2d:8e:5f:dd:7f:2b:70:23:a6:85:
                    0b:9d:1a:72:e0:34:7d:7f:df:c5:d3:db:ee:01:bf:
                    eb:27:dc:e7:52:00:43:d3:2c:3b:0e:45:35:f7:fd:
                    79:89:db:e9:d7:f3:17:40:41:ff:2c:ad:48:3d:d1:
                    55:81:70:97:47:00:37:86:bb:dc:a4:10:19:ee:cc:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FD:EC:8C:C5:02:17:C3:F8:64:BF:8E:34:3C:65:9A:D3:D8:E3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/8ee9fa63-2436-3b1c-ba3e-9586b50ba310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl

            X509v3 Authority Key Identifier:
                keyid:19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:af:22:3b:29:18:f6:a2:d8:f7:f5:f1:b7:28:60:9b:b7:
         d4:87:5a:fe:be:56:6b:6d:6e:ed:f8:a3:33:0b:0c:34:e9:87:
         5b:38:8c:c3:38:0d:df:f6:81:29:16:c6:22:a8:af:0f:a2:ac:
         93:a7:2f:aa:af:90:ff:71:00:ad:9c:79:6c:d5:eb:58:71:42:
         e1:9d:8a:c9:97:25:d2:0b:9b:83:67:d2:c6:39:48:e8:1a:ac:
         5f:f0:d0:ea:42:ed:ad:8d:16:71:f5:c8:38:80:26:3a:d3:cc:
         a2:e7:e2:d6:78:6b:14:cc:d2:e1:45:b1:93:29:cd:4f:1a:76:
         cd:e2:b8:e5:1b:be:d5:80:ae:3c:78:eb:ba:15:5b:ad:d8:bd:
         b9:7c:1d:6b:4d:2b:ec:9c:80:d4:a7:7b:2d:a9:0a:48:e0:55:
         b9:93:72:d1:23:80:d2:8e:00:14:5d:0a:86:14:c3:7a:a0:d3:
         b6:b3:2f:cd:13:84:1c:ea:5b:fc:2f:90:89:dd:ae:76:93:b0:
         93:e3:6e:9e:7e:a7:df:de:59:f6:45:67:10:e5:73:08:8e:c6:
         39:67:ed:cc:72:ab:ac:d5:cc:27:2e:80:a8:19:b2:59:fe:35:
         4d:23:ff:bf:47:ac:ef:a7:fe:09:c1:08:c6:97:fc:46:c5:5f:
         e1:cb:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:53 2026 by rpki-client