Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/267734ed-fcf3-389b-ac7a-b6771d559cec.roa
File:                     267734ed-fcf3-389b-ac7a-b6771d559cec.roa (raw, json)
Hash identifier:          fs/VxpLsuE9XvFahQnGWSTbSR5PM5zSe6uOmR9gRsxQ=
Subject key identifier:   65:BB:70:E5:81:0D:A8:61:68:A1:92:9C:CA:96:7D:E5:0A:AF:79:2F
Certificate issuer:       /CN=b32cd942-7da6-4568-a951-c48745916cd9
Certificate serial:       010D0C9F4328584E260F51CC5F5C1439A7EADC40
Authority key identifier: F3:AC:69:66:DA:8B:B6:0B:4A:22:89:AD:B4:81:5F:0E:C1:81:2D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/267734ed-fcf3-389b-ac7a-b6771d559cec.roa
Signing time:             Fri 12 Jun 2026 16:00:06 +0000
ROA not before:           Fri 12 Jun 2026 16:00:06 +0000
ROA not after:            Thu 10 Sep 2026 16:00:06 +0000
asID:                     402619
IP address blocks:        2602:f38f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:0f:51:cc:5f:5c:14:39:a7:ea:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32cd942-7da6-4568-a951-c48745916cd9
        Validity
            Not Before: Jun 12 16:00:06 2026 GMT
            Not After : Sep 10 16:00:06 2026 GMT
        Subject: CN=7916f89a-c44e-4a86-b8a4-e71d980d7808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:d9:23:bf:ce:27:27:e7:11:de:8f:fb:90:
                    18:c7:48:01:df:6b:62:26:78:4c:da:78:5e:37:65:
                    b6:00:cc:34:a7:b3:40:68:b1:77:42:7e:97:a3:a0:
                    04:61:13:9d:f0:5c:0d:81:59:21:9a:db:3d:eb:c8:
                    93:43:6d:8a:eb:df:2c:28:c9:01:70:6e:bf:ca:fb:
                    22:b8:20:5c:b8:c5:39:a3:ed:2b:d7:d1:59:5b:a8:
                    bd:65:ba:f4:d6:d8:7f:32:a1:48:f9:fc:95:8f:d6:
                    57:fd:85:76:4e:ce:bf:b9:c3:94:3a:27:74:3f:f5:
                    0d:2c:ee:75:f0:e1:42:6c:95:b4:53:02:6b:67:16:
                    18:ff:9e:c9:f1:d2:6e:71:aa:d8:9f:e4:55:f4:a2:
                    a7:8a:a4:18:3f:da:86:64:06:93:6d:6a:96:93:be:
                    5f:b5:06:4c:74:96:60:2d:d2:16:71:29:11:6b:3f:
                    d5:b7:49:8c:ae:28:7c:e4:ff:b9:7f:1a:fa:8c:90:
                    20:1f:94:74:50:6e:99:2e:b9:19:ef:87:95:ed:e4:
                    88:7c:ac:23:5e:29:99:87:5f:8e:47:ff:ad:04:32:
                    1d:b4:4f:e7:32:60:6f:b1:74:d2:81:bd:40:43:2b:
                    b3:10:8d:d5:19:6b:aa:06:e8:34:cc:2b:06:af:5e:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:70:E5:81:0D:A8:61:68:A1:92:9C:CA:96:7D:E5:0A:AF:79:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/267734ed-fcf3-389b-ac7a-b6771d559cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9/b32cd942-7da6-4568-a951-c48745916cd9.crl

            X509v3 Authority Key Identifier:
                keyid:F3:AC:69:66:DA:8B:B6:0B:4A:22:89:AD:B4:81:5F:0E:C1:81:2D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b32cd942-7da6-4568-a951-c48745916cd9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f38f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:67:e0:b4:ef:88:29:7e:df:1f:17:2f:e4:01:83:68:7a:5b:
         6b:48:1b:d1:dc:6e:93:a0:96:82:54:56:d0:0f:4f:3f:ab:11:
         34:60:b5:e6:42:76:ca:cb:17:e9:b5:dd:f4:01:b7:b6:1e:8b:
         e3:1e:6a:17:65:5a:58:16:2a:9a:4d:6a:36:46:34:4b:e1:ae:
         6c:af:37:3e:5c:8b:20:6d:36:c6:1f:96:7e:24:28:f3:ad:ac:
         7b:4a:81:ad:d6:eb:1f:5a:22:f1:40:e9:49:5f:64:df:0e:78:
         ef:19:f6:32:22:95:f7:98:56:53:a6:3b:4b:29:aa:a1:49:50:
         7b:78:76:18:ca:9e:32:8d:73:d9:56:67:a4:09:12:5f:bd:86:
         d1:6f:55:8b:03:18:83:aa:4b:96:a3:d2:05:4c:f6:84:68:9e:
         a0:b1:3d:6d:0c:f7:11:bd:74:c6:c9:07:e0:4d:0c:cc:95:8e:
         1a:af:c0:c1:21:77:fa:e7:47:b6:c6:9d:0b:1a:ad:7b:b6:e6:
         75:01:dd:95:a6:6c:b1:b1:82:d4:65:66:69:e4:e9:6c:09:fb:
         b3:cd:97:a8:0a:2a:58:e8:01:e4:dd:96:7f:33:98:f5:b6:c1:
         ef:e9:c6:57:e5:b2:21:1e:92:21:0a:f9:b4:cd:d0:62:1f:8b:
         ba:c0:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:10:56 2026 by rpki-client