Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa
File:                     b8cf2895-ac49-3412-9f96-565f1707b420.roa (raw, json)
Hash identifier:          EQBxkO6iHl8dXeXPlBJW3VIiyWeasDZUahw/QoOkGhk=
Subject key identifier:   97:6D:21:5E:0F:13:1B:86:DB:DE:82:EC:D4:EF:99:20:75:6A:3A:C8
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EA799F7F8298176C917E71880
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16740
IP address blocks:        2602:f5c1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:f7:f8:29:81:76:c9:17:e7:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c4571d5-624c-4558-9c94-3aaf49ec3d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:d8:c1:24:e7:4b:96:b5:20:60:39:bd:2b:
                    43:6d:77:89:b9:43:7d:ca:fc:30:1d:a7:a0:4e:42:
                    9d:7d:a0:f1:12:73:db:f5:29:04:53:14:96:4a:4c:
                    ca:21:55:ed:9e:53:fd:72:78:45:63:61:6e:50:0b:
                    77:85:42:ff:bf:1b:89:d3:cd:7c:b9:bd:1c:53:2c:
                    39:c6:0a:59:8e:7e:b0:fd:14:1e:95:07:16:86:1b:
                    98:ed:4a:f9:df:3e:fc:37:5e:dd:a1:6d:1a:e4:95:
                    51:16:a2:06:c7:b0:93:f6:a4:8b:c5:d8:89:b2:d9:
                    e3:12:bc:6c:66:53:41:a9:40:63:86:db:d2:8a:bf:
                    3c:cb:93:49:94:c9:9d:fb:d2:9c:26:8f:86:cc:c7:
                    17:dd:d2:6b:13:63:09:63:65:07:b8:e8:25:9e:79:
                    e9:89:ec:c9:c9:fb:17:c9:88:d6:34:55:ae:04:a6:
                    ac:05:46:d3:ee:4b:11:60:cd:b7:06:e6:c3:54:87:
                    f7:e8:4f:a1:9b:71:ff:97:ce:0c:b2:f0:6e:31:23:
                    db:0b:fd:bf:aa:8e:0a:ad:18:ae:36:39:93:9e:27:
                    0a:c5:a9:5c:6a:96:82:48:49:e0:87:0b:f8:c0:b4:
                    87:46:38:4d:d6:75:af:7b:ee:3f:95:a0:67:0d:b3:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6D:21:5E:0F:13:1B:86:DB:DE:82:EC:D4:EF:99:20:75:6A:3A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:31:e7:b4:a6:68:93:a1:94:cb:d8:65:73:f0:f3:68:4a:b5:
         7e:8c:75:1a:5a:75:8e:21:31:5f:10:56:5b:eb:8b:70:50:ac:
         62:1b:f9:85:f2:8c:c3:f2:a3:fe:cd:9a:1a:8c:55:c5:76:56:
         35:7e:ec:34:a3:b9:65:55:1b:d0:13:54:2b:c3:d8:ac:45:8e:
         f2:83:89:0e:26:0a:fb:fc:d7:8c:88:2d:f8:bc:88:2d:14:42:
         6a:e4:95:1f:fd:32:da:66:c3:98:84:0f:5e:f4:7a:f8:f2:7d:
         53:6e:21:15:ea:12:81:9e:bc:5b:21:5d:95:f6:1b:97:59:2d:
         f9:cc:b0:3c:b4:32:ed:07:79:00:25:43:e1:d5:93:5a:d9:60:
         90:4c:3e:02:23:e6:fe:85:a5:37:2e:72:34:37:8e:b0:25:06:
         db:4d:dc:86:7e:60:c8:fe:86:ee:fc:df:82:21:a9:d2:b2:64:
         8b:63:83:79:4d:99:b1:3a:d9:39:15:17:fd:2d:a6:9c:7a:f2:
         df:a1:2c:f5:ed:e0:58:6f:7b:82:17:1b:dc:e9:26:3d:3f:4c:
         63:f8:16:ea:19:3d:b6:d1:c8:d5:38:16:19:21:2d:87:f5:c1:
         02:62:a2:a9:16:80:1c:55:f0:8b:9f:f8:7f:68:67:cf:ac:39:
         bb:fa:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:56 2026 by rpki-client