Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b/d2af514b-138b-3be1-bc90-0e18dd462139.roa
File:                     d2af514b-138b-3be1-bc90-0e18dd462139.roa (raw, json)
Hash identifier:          fYvfUsodpHSI/MBKuJqkl0pVQC64ATUzm/B1SGw9Zns=
Subject key identifier:   99:0B:22:24:52:23:7C:8F:83:9A:15:C4:5D:35:9F:05:66:03:CC:4A
Certificate issuer:       /CN=183e3d87-fce9-4891-8d7b-67c96279f65b
Certificate serial:       010D0C9F4328584E9D4A62FBF2915AFEDAFF9170
Authority key identifier: 8E:67:1A:32:B1:A8:3B:52:53:88:D8:EF:C7:88:7D:70:4C:E7:47:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b/d2af514b-138b-3be1-bc90-0e18dd462139.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     397248
IP address blocks:        2602:fde9::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b/183e3d87-fce9-4891-8d7b-67c96279f65b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b/183e3d87-fce9-4891-8d7b-67c96279f65b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:62:fb:f2:91:5a:fe:da:ff:91:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183e3d87-fce9-4891-8d7b-67c96279f65b
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=c5078a45-8581-4f35-8292-7ea96e5f5eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:f6:e0:4c:72:bd:c8:fc:4b:54:e2:70:a2:
                    f7:da:c6:99:15:9a:1e:d3:6a:f4:89:a3:05:1c:6d:
                    0a:f8:ee:a9:11:65:02:0e:a3:be:fb:7e:53:87:3e:
                    27:03:9f:02:c3:d1:c9:b4:20:da:9d:1a:16:cc:0a:
                    3e:f3:45:fa:59:ed:23:67:6e:a5:84:96:8b:70:fb:
                    27:1a:eb:bc:7d:63:73:c5:36:96:04:2f:89:51:1d:
                    52:79:d6:6f:2a:37:6c:b7:bf:8f:2b:5f:9b:19:fa:
                    62:7c:3d:ce:9e:77:86:38:70:39:40:ac:20:e4:b2:
                    67:51:ba:dc:d7:c0:08:df:f8:5d:0b:73:ea:ac:06:
                    59:21:06:60:69:19:4b:c2:28:cb:9d:98:3f:e0:5d:
                    44:80:f4:73:54:ec:7b:df:58:b7:a6:03:e4:f8:53:
                    99:25:46:49:00:83:2e:db:c4:f7:19:6c:e4:94:42:
                    a1:68:3d:54:23:34:5c:72:24:2c:c3:d9:24:18:a3:
                    b5:28:0a:89:57:39:f9:98:d6:a5:b6:74:57:53:e0:
                    15:b0:07:71:e8:23:7a:05:39:d0:8a:ff:c7:ba:b0:
                    28:d7:75:e5:9f:94:6b:bb:b7:25:01:0c:8c:2e:3f:
                    60:bc:56:31:43:3d:df:b8:f2:10:9a:96:0e:f9:d8:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:22:24:52:23:7C:8F:83:9A:15:C4:5D:35:9F:05:66:03:CC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b/d2af514b-138b-3be1-bc90-0e18dd462139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b/183e3d87-fce9-4891-8d7b-67c96279f65b.crl

            X509v3 Authority Key Identifier:
                keyid:8E:67:1A:32:B1:A8:3B:52:53:88:D8:EF:C7:88:7D:70:4C:E7:47:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/183e3d87-fce9-4891-8d7b-67c96279f65b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fde9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:41:88:13:18:14:8d:79:63:c6:09:e4:39:86:9e:92:59:
         b0:bb:06:c4:61:32:40:b6:f5:3d:97:1a:c2:8f:9d:87:00:d9:
         15:c7:1a:9c:25:83:f7:e0:58:b9:b5:4e:0b:dc:27:e1:ed:a6:
         82:66:c8:1a:1d:b6:1e:82:e4:66:45:98:5a:5c:5c:c0:60:85:
         d2:74:03:4e:0d:06:67:2a:ff:eb:b2:dc:68:ce:d9:e1:05:e4:
         cf:ef:7b:7b:8d:0b:f4:5d:45:88:6f:13:f9:ea:89:e7:ce:1c:
         6d:cf:43:37:62:b9:7a:0e:66:05:24:b4:28:4e:d9:9f:66:7e:
         15:d6:f3:22:e6:c6:02:19:53:93:ce:f9:4c:d2:35:7f:46:d8:
         6e:2e:35:a9:95:62:cd:91:9a:07:39:47:57:69:ef:4c:1a:24:
         a7:fe:2f:1b:16:c2:38:22:68:d8:b4:e5:cc:df:93:2a:71:4b:
         c4:6d:e1:4c:65:43:d4:60:76:e3:fd:ae:67:76:e2:45:ad:e0:
         b2:fc:84:1f:1e:9a:9c:89:80:f1:31:45:53:fc:20:45:22:74:
         5a:b1:c1:e3:d7:0d:52:04:c3:ae:d9:6e:f7:98:36:e4:70:b1:
         34:59:eb:25:fe:b4:f4:18:25:f7:69:dc:27:3e:ce:ec:74:b4:
         fc:3b:8b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:06:50 2026 by rpki-client