Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/b67a892f-189e-39a8-8a9b-527ef0ac21ed.roa
File:                     b67a892f-189e-39a8-8a9b-527ef0ac21ed.roa (raw, json)
Hash identifier:          VxYFNYmObr1m8qy9Wt3ZB0nZL6sy+muBMrg45g0T9UI=
Subject key identifier:   65:0D:0B:0A:DD:45:78:B7:F6:B7:28:40:E7:22:79:E1:7F:E6:25:31
Certificate issuer:       /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Certificate serial:       010D0C9F4328584EA4450EF22B0684512AFA4400
Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/b67a892f-189e-39a8-8a9b-527ef0ac21ed.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     401450
IP address blocks:        2602:fa1c:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0e:f2:2b:06:84:51:2a:fa:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=05ebbb6c-5d73-4bf8-81b6-bd25fb0f500e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:b8:4e:fc:83:ce:38:3c:36:df:ce:ec:93:
                    e7:92:c8:bb:f0:9d:a0:a9:75:42:c0:19:27:e2:72:
                    70:9f:71:b2:7c:02:ed:f2:d7:54:70:74:8e:8e:0c:
                    a2:0d:5d:de:e2:9d:44:bf:44:55:23:21:04:0a:72:
                    b9:82:4a:57:2c:76:0d:3a:9a:b9:07:0e:c0:33:b8:
                    ea:f1:9d:d3:84:48:8d:ee:5f:c4:ed:80:4b:ad:ff:
                    ec:ca:34:1d:21:24:63:80:98:20:29:05:15:81:2a:
                    44:0f:55:13:1f:a7:93:7b:93:5f:cc:1e:16:25:f4:
                    a4:fe:7f:40:ae:0f:64:0c:10:73:0b:af:e3:cb:72:
                    21:18:ad:3c:25:b0:8f:a9:d3:4b:cd:12:04:81:14:
                    5f:c7:c5:1e:25:49:82:b4:3a:a7:cf:bd:d8:a9:86:
                    d7:d1:56:9a:5e:d8:65:a3:8a:07:dc:54:29:ac:54:
                    1b:af:33:d5:ec:13:81:a5:60:d0:9b:62:1e:1a:1c:
                    be:17:bb:e3:84:2c:2a:c6:99:59:5b:84:ef:0f:23:
                    fc:29:41:e5:7e:93:de:17:62:d9:13:79:88:f6:28:
                    7e:f7:2b:65:e7:7e:8d:91:fc:3f:a3:a6:af:a8:89:
                    7b:c7:57:c5:a6:ef:fd:d0:30:5d:1c:2d:28:30:b3:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:0B:0A:DD:45:78:B7:F6:B7:28:40:E7:22:79:E1:7F:E6:25:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/b67a892f-189e-39a8-8a9b-527ef0ac21ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl

            X509v3 Authority Key Identifier:
                keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:d3:f6:b6:e2:58:c2:af:c3:e7:91:9b:39:0b:53:6e:04:
         da:af:db:85:4b:ea:67:76:54:c0:30:eb:2b:71:81:ec:c4:ad:
         2c:0c:cf:6a:26:98:4c:b9:19:36:ab:5d:d0:72:b1:26:3f:56:
         90:93:65:3e:ee:63:64:2f:ee:51:c7:6a:fe:78:e7:93:da:39:
         5a:32:f8:3b:b7:bb:37:64:82:a2:aa:2c:45:f8:73:b4:35:0b:
         bc:06:8a:9f:8d:02:fb:f2:75:05:c0:70:54:8f:f6:1b:d4:65:
         da:21:46:2e:bd:e9:c7:b1:48:2d:6f:00:99:4c:0e:56:8d:c4:
         f7:1e:59:0a:9f:74:5e:5d:e3:7c:61:fd:8a:26:46:ba:de:87:
         38:75:30:a5:09:3b:6f:32:34:cc:15:02:db:cd:37:03:df:91:
         50:07:eb:78:78:77:d5:9b:d3:30:c2:9e:1f:65:56:df:68:66:
         9e:8e:7a:4c:9a:7d:da:81:bd:48:85:5a:ad:10:4f:02:cc:0b:
         7a:b3:a2:df:3a:20:34:a9:36:0a:93:00:38:34:c0:42:c3:19:
         51:64:a8:56:05:00:63:3b:5a:4c:01:90:a5:51:0e:45:fe:71:
         d2:d1:8d:b2:03:ab:0d:e8:d2:6d:71:6b:46:d2:d2:c5:46:9c:
         c6:f1:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:11 2026 by rpki-client