Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/677cd0d2-aff5-34ee-92ca-eb3e1ae3f686.roa
File:                     677cd0d2-aff5-34ee-92ca-eb3e1ae3f686.roa (raw, json)
Hash identifier:          0kAro4/oEf/FdcFY4ioi5/1oyGkH/11MLp3V9Bsh/1A=
Subject key identifier:   50:17:18:0B:44:26:9A:39:F3:A4:56:8D:9B:D2:A8:04:A7:0D:EF:BC
Certificate issuer:       /CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
Certificate serial:       010D0C9F4328584E9BE519F23B415A691E0ACD40
Authority key identifier: A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/677cd0d2-aff5-34ee-92ca-eb3e1ae3f686.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     25735
IP address blocks:        2602:fb40::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:19:f2:3b:41:5a:69:1e:0a:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=a129a93c-dcc6-482a-a701-f4e3604569bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:ed:78:53:86:7d:f7:bf:d8:9b:92:4e:9f:
                    f2:1a:c0:f1:e9:29:59:b0:13:77:cc:79:57:42:3b:
                    10:02:c1:0c:e8:72:1c:b9:14:de:8a:24:1d:19:46:
                    de:9d:a4:67:85:1d:4e:59:52:11:e6:9d:65:60:c7:
                    a0:98:5d:1d:79:4d:12:e2:d6:15:d3:f3:5f:d4:c9:
                    81:19:6e:39:a7:99:31:53:fc:d3:2a:60:58:a3:12:
                    25:76:72:2e:ca:79:5b:3b:fe:70:8a:05:03:5b:67:
                    c2:bd:a4:30:38:7d:1a:25:3f:1a:b1:11:c7:14:8c:
                    ea:16:8e:76:d9:0d:93:16:f5:1c:ee:7f:2f:fa:e6:
                    2a:51:e1:be:1f:25:38:26:25:d0:70:ad:e5:93:62:
                    eb:ee:7c:44:2e:fe:9d:15:bc:d8:e7:62:a3:45:7c:
                    6b:43:31:2d:5f:41:8b:6e:33:ad:0d:85:70:72:00:
                    f2:10:c7:c6:8d:11:c0:4c:4f:1b:d4:8f:19:18:0e:
                    f2:33:0f:b7:34:4a:80:46:55:c6:e0:80:75:bc:42:
                    7d:03:cc:c3:c2:ee:5f:05:27:83:89:ce:3c:01:6a:
                    1f:8e:2b:2a:46:20:e7:01:e9:77:51:4d:e5:3f:7f:
                    1f:41:14:0c:c0:a2:7e:7e:5e:2f:3f:de:a7:42:5d:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:18:0B:44:26:9A:39:F3:A4:56:8D:9B:D2:A8:04:A7:0D:EF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/677cd0d2-aff5-34ee-92ca-eb3e1ae3f686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb40::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:76:9d:93:ae:51:dc:14:13:87:26:6c:50:f8:0c:08:bf:ba:
         dd:31:2a:8e:ce:c9:89:8f:05:9d:07:fe:9e:24:5f:25:74:f4:
         4b:d1:e3:c7:94:49:45:47:09:bc:1a:d4:97:b7:6b:61:5a:4a:
         09:aa:8a:67:85:b6:11:61:64:04:ca:c1:17:7a:00:7b:67:74:
         e1:80:5e:9c:a6:55:ff:97:ec:09:82:1b:41:62:f3:33:18:b8:
         cc:8f:f2:2d:64:7c:78:77:ce:de:49:92:07:bf:8a:79:f1:5d:
         06:0d:e5:e1:06:96:b2:b1:37:66:98:3a:7a:8b:1b:86:92:54:
         d3:95:bd:c1:b1:77:e3:4d:18:34:a8:26:f0:5d:52:56:1e:2f:
         36:02:43:69:22:3d:05:4b:bf:85:8e:6d:de:25:7a:8e:7c:8e:
         b7:ef:e7:82:f3:b6:d2:86:d9:ec:5f:0b:13:ed:fc:22:7c:c1:
         fb:a8:1e:95:4d:56:ee:2e:66:11:22:32:92:32:01:5c:cd:38:
         97:41:8c:c8:58:1d:15:8e:aa:69:d6:6a:38:c1:a8:a1:ff:70:
         52:d1:44:d7:bf:ac:4d:05:76:56:b8:e5:24:c6:8b:e4:89:77:
         6d:71:50:ac:15:c0:fc:1d:8a:63:f0:2a:95:87:b3:ec:43:8c:
         d9:00:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:56:03 2026 by rpki-client