Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
File:                     b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa (raw, json)
Hash identifier:          YBTfHcYB2iVyk9KGU1Pm8wDh6j1GSrnK+ZR7lyhoR8w=
Subject key identifier:   30:20:4C:58:A6:C0:A3:C7:73:35:C1:2B:3A:E8:DE:94:E1:3D:81:01
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584ECD37141AA511C3672026EF40
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     401659
IP address blocks:        2602:f5c1:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:14:1a:a5:11:c3:67:20:26:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=7f37c762-454c-40ee-a874-b064507b1e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:e8:da:8c:f3:b0:b4:f4:a7:fa:ea:17:8d:
                    ba:b1:40:34:49:30:c3:91:24:74:18:7e:9a:7c:71:
                    2b:89:06:73:8b:8c:cf:80:2a:68:f8:31:62:4b:fb:
                    26:6e:ed:b6:45:2c:7c:59:c3:a4:1e:34:84:a1:26:
                    e2:93:d1:ee:19:08:11:8a:37:1d:09:91:34:92:ce:
                    bc:0c:c0:39:47:ec:7c:87:ca:a9:79:b7:60:6a:88:
                    7e:24:9f:06:54:4a:dc:a7:7b:b4:87:14:58:32:de:
                    c4:8d:d5:dc:a2:0d:40:dd:18:12:21:e3:47:54:38:
                    43:b7:59:41:4d:eb:c7:ea:4b:a1:0c:91:a6:9b:01:
                    b3:ed:88:9d:9f:e4:82:0d:30:24:7d:23:ce:af:6f:
                    3a:9f:75:3a:9e:70:25:3e:19:cf:3b:1c:ae:cb:c2:
                    6c:1d:0f:b9:8a:be:1f:27:6f:38:96:ff:60:21:17:
                    eb:e7:67:65:38:8f:09:cc:91:f4:33:42:b2:aa:59:
                    f6:0c:12:32:dc:55:59:aa:73:76:3e:9f:18:c8:0e:
                    ae:b6:69:41:d0:7f:8c:b6:64:84:3e:f0:a9:52:0d:
                    08:94:ac:54:f6:cc:e8:03:b5:fa:f4:18:e1:28:a3:
                    a8:9a:10:61:aa:55:81:a4:be:fa:93:7c:46:86:d2:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:4C:58:A6:C0:A3:C7:73:35:C1:2B:3A:E8:DE:94:E1:3D:81:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b2f2ea1e-f2c9-3f13-adc7-e372d610fa89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:e3:6a:88:6b:5f:5f:6a:7d:cb:a4:9c:96:38:d8:59:75:
         38:73:d0:9b:73:ea:29:7f:9e:1b:68:ab:17:f9:a2:62:ef:6c:
         80:7a:50:73:ef:9c:27:86:df:4c:1c:28:d7:73:5e:f8:3f:5a:
         c5:f3:f1:53:1c:64:c0:78:51:20:0e:b1:c8:f6:bc:a9:4d:5e:
         84:af:52:3c:0d:7a:85:8e:cf:b8:21:84:98:2c:79:a2:03:03:
         2f:5a:dd:97:c4:2a:dc:7d:95:5a:4b:a9:98:a5:a2:cd:3d:dc:
         e6:98:53:2a:e0:1b:4c:8e:c9:70:09:0e:05:ee:b2:59:86:70:
         fa:c4:e4:29:40:b0:d1:a6:c5:49:db:0c:a0:51:8c:22:b6:52:
         61:28:49:e7:ad:02:23:26:40:83:e7:c4:a1:da:aa:12:92:7a:
         8b:3f:af:58:d0:b5:f2:7b:27:6b:54:68:49:17:87:fe:d6:9d:
         c3:8b:e9:c4:e7:97:4c:69:12:43:ff:a9:f5:1f:f2:33:49:2c:
         a2:29:c2:e3:a1:bb:4b:22:2d:e9:ed:27:1e:c5:20:e0:9d:09:
         fd:71:6b:3b:f7:57:4f:1f:74:df:57:cc:fc:a8:7e:0b:f2:ad:
         0f:49:e0:f7:dc:0a:8c:9c:c6:f3:fe:18:1b:2b:8a:6f:0a:c5:
         3b:fe:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:36:26 2026 by rpki-client