Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
File:                     2824194e-8305-35b7-934a-dfe3c0b4c203.roa (raw, json)
Hash identifier:          lW/YcWyHVKHuI6gTdVgNdbIlhua+WECO7K+24Bet6lg=
Subject key identifier:   2A:EE:D8:93:C6:26:D8:9F:E5:DF:16:EF:01:03:5A:78:8B:F4:72:D7
Certificate issuer:       /CN=3e7444b5-1f39-42b3-8603-6480a7a61609
Certificate serial:       010D0C9F4328584EA8EC4F117A7B67B9511E3600
Authority key identifier: 10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     20473
IP address blocks:        2602:f533::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4f:11:7a:7b:67:b9:51:1e:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e7444b5-1f39-42b3-8603-6480a7a61609
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=1af8f552-3fbf-4517-aafc-98cc132853da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:e9:cf:b0:78:57:40:69:87:05:f6:8b:89:
                    fc:f5:a8:33:05:69:7b:eb:57:87:37:10:48:4c:8b:
                    5b:1f:04:9b:6e:61:fc:61:66:a5:e5:d7:f7:4e:b2:
                    9b:cc:3b:bc:e7:4c:73:9a:c6:e1:0d:07:aa:a9:3c:
                    b3:6f:95:33:f4:77:72:14:6a:5a:ce:d1:6d:4e:d1:
                    63:68:bc:32:89:ad:14:e9:56:7d:a9:21:8b:f0:b1:
                    bd:78:80:0d:40:92:ea:93:02:a9:10:69:71:58:d2:
                    88:e7:93:af:57:c4:50:7e:69:97:3e:28:ed:05:dc:
                    0f:54:22:68:43:01:d5:a0:75:fb:54:45:98:97:0c:
                    85:0b:20:15:3b:e8:0f:00:12:98:68:e9:af:d2:38:
                    da:0e:1a:80:4c:7b:a0:61:82:72:7f:99:b7:d2:ed:
                    83:22:0c:79:45:95:a3:37:01:50:2d:23:f9:cf:cb:
                    b5:6a:53:2b:40:54:96:c5:a4:1a:d7:c5:7e:e1:50:
                    74:59:1b:1e:81:bb:ec:95:82:44:b0:a8:df:10:49:
                    2a:a8:0c:cf:e3:88:c7:01:9b:5e:94:74:7b:a8:2f:
                    1e:4f:43:94:c3:3f:42:bc:83:db:e0:2a:b3:a0:a0:
                    df:8b:2f:4f:fc:b6:32:9c:e7:7d:d2:a3:b7:53:18:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:D8:93:C6:26:D8:9F:E5:DF:16:EF:01:03:5A:78:8B:F4:72:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/2824194e-8305-35b7-934a-dfe3c0b4c203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.crl

            X509v3 Authority Key Identifier:
                keyid:10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f533::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:f6:b4:9e:a5:97:fb:07:82:b0:03:e5:bc:69:db:af:a6:
         41:45:a2:85:3a:29:99:59:e6:f8:6d:1e:5f:40:bc:2d:b7:16:
         ce:07:e7:b8:40:10:48:0c:eb:d5:a3:2d:8a:1e:d8:f4:5c:44:
         53:cb:f8:e3:69:2a:79:4e:c0:7b:2f:33:97:99:6f:35:4a:01:
         fe:e5:69:56:7c:ab:62:2a:f3:51:5c:cd:ca:f5:97:76:4f:6e:
         2d:66:b8:dd:c6:49:cb:2e:86:51:70:7f:06:57:8b:ec:92:a3:
         08:1b:93:28:cf:94:3f:68:dd:70:d6:f7:20:8d:52:3e:09:52:
         2d:fa:9e:a6:2d:d7:63:32:cb:93:a7:15:95:3f:b7:b1:89:c8:
         9a:85:58:90:4c:4c:23:ba:40:c3:ea:41:3c:07:ef:10:b3:55:
         b3:28:33:29:e8:d5:0e:e9:c6:40:30:b3:3e:da:fc:2c:20:95:
         e9:97:2f:b7:c1:d0:a8:cb:6f:a1:1b:63:55:ba:c6:5f:88:36:
         ea:a9:74:66:60:c1:14:8c:35:ca:d9:4b:51:bd:d1:5c:65:38:
         5e:61:64:c7:75:ca:d5:40:63:51:1f:1e:06:20:d9:e3:e0:48:
         1c:2d:08:3d:31:3d:fb:f3:ae:2d:5b:f0:2b:88:0c:87:7d:71:
         65:12:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:22 2026 by rpki-client