Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
File:                     39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa (raw, json)
Hash identifier:          N9fFW1STr601LPhY4dt2YJ2pyKGGPwhJFhArWjlHIdE=
Subject key identifier:   D1:E6:5C:34:F1:B1:3C:61:B5:41:25:B0:00:F9:B5:D1:4B:23:19:81
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584EA5AA6AEF26EA89A6DDF33E00
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     3754
IP address blocks:        2620:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6a:ef:26:ea:89:a6:dd:f3:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=1048ca03-141c-46ff-9b65-2b0728f89b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:00:c8:1a:4b:53:f5:0b:24:87:f7:f6:55:
                    f3:e7:c2:b7:f7:e4:3d:16:c8:6d:27:62:1f:9e:ca:
                    5d:14:7b:9d:07:d8:ca:b5:9f:2a:bd:f0:8d:71:59:
                    22:55:51:85:80:b5:8d:9e:86:07:23:38:ec:63:5b:
                    2d:f4:3d:9e:76:cc:76:89:69:9d:26:58:c6:b3:88:
                    30:0e:1d:1d:55:04:b3:89:e4:64:e2:9d:15:d3:87:
                    0f:de:b9:69:f8:af:fc:ad:ed:c6:1a:f4:6a:06:a6:
                    8c:f9:2a:6f:d6:ab:98:aa:c5:a6:b2:60:46:0f:92:
                    2f:46:95:66:94:dd:06:7e:a4:54:5d:a2:53:67:62:
                    cc:6f:bd:d8:43:f6:64:02:11:4f:37:08:c2:ab:41:
                    a5:ef:67:e3:de:1c:eb:ef:ea:7c:03:3b:ba:f9:a3:
                    30:bf:c0:be:b9:ea:36:6b:f5:bd:f2:aa:da:62:e7:
                    d4:2a:8e:f2:58:02:a9:b6:d3:10:fa:b6:49:d3:d6:
                    9b:99:f9:63:df:c0:c5:87:84:64:c4:3b:24:5c:d9:
                    3a:ac:57:54:de:1c:34:97:19:c1:a3:69:1d:96:b3:
                    77:71:01:af:11:38:7b:fb:f1:d4:de:33:f8:21:3c:
                    f6:3f:4b:4d:c2:5f:d5:c5:a1:65:f6:3d:72:45:1e:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:5C:34:F1:B1:3C:61:B5:41:25:B0:00:F9:B5:D1:4B:23:19:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:1f:5f:b6:e2:c6:31:8b:74:fa:0f:1d:53:64:82:03:8e:
         dd:a6:1c:6d:d7:91:77:2d:a8:92:4e:05:58:66:87:7a:0e:da:
         27:45:41:da:22:47:f5:a3:44:29:84:0e:69:68:3e:74:43:d9:
         da:89:62:50:1f:0e:42:22:92:33:f7:fc:36:e5:0b:e5:38:f5:
         b2:ec:4f:da:cf:89:57:e4:04:cb:5c:ca:d8:e0:60:da:0d:06:
         54:a7:c9:99:90:25:c3:dd:2d:d2:b1:88:cc:3e:65:3a:5e:d8:
         e5:97:9f:e4:b2:2e:0c:35:02:d8:a4:ea:66:44:a3:e4:41:1f:
         80:31:85:1b:d0:66:9d:e2:b3:e3:a6:01:61:e9:93:4e:3a:ad:
         62:39:47:41:a3:b1:9d:0d:01:fb:04:8e:46:1d:54:07:02:02:
         95:86:c4:a1:b8:d3:02:69:ae:91:af:b6:c2:98:4f:c6:5c:db:
         07:be:ed:21:43:2b:d9:a0:e6:f9:fa:eb:80:f2:c5:6d:3c:65:
         68:7e:38:10:ef:e2:fa:cb:29:1b:17:65:75:78:e2:41:86:93:
         12:07:d3:63:29:6d:ac:73:15:b7:7b:0f:be:cd:19:02:3e:09:
         f4:98:92:53:8d:12:57:e3:9a:ee:6e:79:17:44:2d:42:53:77:
         75:a1:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:36 2026 by rpki-client