Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa
File:                     7eef445c-3118-388e-96f6-477ba677dc0d.roa (raw, json)
Hash identifier:          z02rvAAayevfOMTmBH2pHVO3TVWFVJ4qJg9OCbpPMG4=
Subject key identifier:   CC:FC:EA:1B:A0:CA:47:65:82:FB:93:60:A5:AB:CC:5C:39:5D:80:E1
Certificate issuer:       /CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b
Certificate serial:       010D0C9F4328584EA17AA972777EA2F4EE317300
Authority key identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     9304
IP address blocks:        2602:f3de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:a9:72:77:7e:a2:f4:ee:31:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=af193ea3-56f3-446a-bb98-7d75f3b2141c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:17:74:f8:06:ac:aa:af:94:a2:f3:27:51:
                    be:55:d7:fb:f7:aa:e7:4b:e1:53:9f:e2:e4:8f:19:
                    25:e7:6f:75:38:de:0a:ec:f2:05:ff:c1:0b:4b:45:
                    8e:4d:c8:70:4b:02:1b:56:1e:e6:87:76:7b:d4:6a:
                    bf:80:11:e7:35:fb:3d:38:e1:b9:18:e0:00:ef:c6:
                    67:b8:93:15:bb:58:d7:d0:fa:a9:2b:7b:fa:9e:cb:
                    a7:a1:18:20:01:04:9e:e1:65:80:5c:67:12:36:45:
                    c2:21:a0:df:ec:1e:2e:3e:6c:2a:73:e3:b1:f0:43:
                    67:36:c6:7e:bd:9e:0a:6d:3a:18:64:47:6a:bf:5a:
                    c0:d0:55:74:59:2c:18:a0:7d:c9:0b:46:0d:a7:8b:
                    bb:e6:84:b6:ff:96:0a:9a:78:2f:2d:22:3e:1b:59:
                    a2:7c:9f:55:e8:e5:93:e6:ef:ff:7b:d5:9d:16:fe:
                    86:85:58:84:eb:5f:35:00:4b:2e:c3:d4:f2:ec:0e:
                    3b:21:08:fc:b6:7c:54:41:a5:5a:36:6b:a2:8c:49:
                    32:76:0e:b6:fd:46:a2:d9:37:98:ee:59:85:0d:d2:
                    62:e7:7a:8c:8c:a9:4c:cc:ae:bf:99:1e:58:31:07:
                    78:cc:64:ce:4a:fe:ae:6e:9f:ae:64:ac:19:83:5c:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FC:EA:1B:A0:CA:47:65:82:FB:93:60:A5:AB:CC:5C:39:5D:80:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl

            X509v3 Authority Key Identifier:
                keyid:29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:35:6b:3b:85:5c:bf:16:5d:d8:51:cc:a7:51:f6:de:c4:
         8f:6e:ac:71:eb:3e:d7:14:e7:7d:f5:77:9c:e1:85:67:79:d7:
         d3:e3:54:ba:75:84:11:75:95:ec:54:06:ea:9b:24:58:42:5e:
         f9:5b:0d:92:2b:ac:98:67:ed:1e:13:16:1a:27:c2:89:47:d8:
         48:01:4e:3e:47:68:f8:db:a1:09:2d:f9:be:36:1e:77:12:85:
         73:cf:a2:b4:ce:d5:c3:20:25:d2:bc:e2:06:1e:41:43:78:0a:
         08:72:f7:99:ff:a3:a2:13:be:11:66:34:e9:9f:d9:a4:26:67:
         03:d0:19:8e:a1:c6:4f:a3:dc:7a:aa:76:bb:d5:7f:07:2b:9e:
         37:63:24:76:17:3f:2f:62:da:32:cd:f7:6e:9d:fa:5a:1a:26:
         cb:ea:99:1d:0a:58:d6:a6:19:09:3f:85:fe:31:af:b9:4c:df:
         fb:2b:f7:a1:94:c1:39:46:a3:99:98:d0:10:f2:0f:16:14:18:
         13:e5:fe:26:6f:0e:0a:06:3e:2b:4c:f0:8f:39:27:a7:46:9f:
         2c:c5:61:86:27:26:bd:12:36:5c:94:75:46:46:ae:b8:80:f1:
         e2:75:a9:05:38:7f:9b:c1:c1:41:4e:9e:f6:7f:47:88:3b:c1:
         29:83:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:45 2026 by rpki-client