Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa
File:                     57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa (raw, json)
Hash identifier:          ZY+TvElnGpCenxiJ6CEu7k73YUKN0AK9FvCmE2xrJ68=
Subject key identifier:   F8:05:C1:BB:F4:CF:BD:47:89:2F:1D:7B:44:3D:1F:E1:0B:2B:C9:88
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584EA7918145037CDD6619CB5500
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29802
IP address blocks:        2602:f972:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:81:45:03:7c:dd:66:19:cb:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e88b3f92-b342-47f5-8dc9-e07275bfdd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:8f:36:9a:bb:38:0d:c9:9d:a2:e2:c7:86:
                    eb:85:4c:70:8d:fd:b7:e2:3c:81:78:52:39:3f:45:
                    4a:04:81:ed:90:7a:a3:fd:70:2b:1b:86:6b:b8:46:
                    fb:82:31:80:f2:48:6f:6e:0b:50:6a:cf:81:66:1a:
                    fc:44:51:f2:12:d1:67:f2:ea:1f:3d:fe:b0:1b:fd:
                    56:65:da:d3:79:31:84:a5:92:38:08:09:14:22:8c:
                    6e:fc:e5:95:17:cd:95:2e:1a:d9:33:30:c5:05:e7:
                    62:ad:36:7f:df:2c:f2:3b:58:b6:24:63:32:b6:ef:
                    b8:f3:18:dc:db:e1:80:23:a2:64:90:e3:9b:98:1a:
                    65:ad:46:62:04:fc:50:89:b8:2d:ec:53:d4:8e:62:
                    72:19:39:f8:66:7b:ac:cd:28:2f:ea:e0:16:b5:71:
                    23:17:c4:27:c3:f1:4f:8f:33:b2:72:a8:cb:09:32:
                    7f:1e:8c:9c:0b:08:13:cc:90:68:aa:78:64:11:e1:
                    d9:81:e4:3a:ce:1c:e5:60:3e:3a:21:09:e6:17:25:
                    49:54:68:3d:59:aa:e8:06:77:c9:ed:04:88:f7:a2:
                    14:ef:45:9b:ba:7c:de:7d:16:1a:19:89:59:ac:ff:
                    14:21:45:db:28:de:45:e0:15:22:f5:a9:6d:e9:d6:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:C1:BB:F4:CF:BD:47:89:2F:1D:7B:44:3D:1F:E1:0B:2B:C9:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:93:c8:17:08:2c:16:3a:11:f1:fa:f4:fc:e6:79:25:95:
         99:cb:5e:d5:8a:3c:4c:56:64:41:d1:61:0c:0f:77:ff:0e:08:
         7b:ec:da:a3:22:7e:98:04:72:76:28:48:62:9b:ee:87:0b:1a:
         b3:60:7c:52:4e:6c:d8:31:21:fd:96:0f:a8:a8:c9:58:8f:9f:
         8a:3d:51:76:75:d6:f2:4c:bc:b3:1f:10:46:4c:ef:71:f7:07:
         93:cd:81:6c:4f:18:49:58:e4:10:a6:8b:8d:11:f5:4f:b0:47:
         ee:7d:13:8d:df:b0:f7:1b:ee:09:62:38:67:ea:77:6e:49:00:
         2c:d9:a7:10:46:e7:d5:f7:ab:90:20:80:30:59:01:77:84:b7:
         10:69:38:12:63:bf:dc:cf:8f:1f:0c:56:4a:17:b1:41:46:7f:
         01:40:ca:f2:eb:1e:72:a2:1a:0a:43:1a:30:dc:e8:18:e3:16:
         24:e3:a7:f1:69:52:34:f0:82:9f:64:ca:c5:07:d8:bd:f2:57:
         0c:c8:af:16:96:a1:55:77:de:dc:bc:61:c4:63:5e:a7:55:21:
         29:7d:9c:78:43:f0:1e:bf:c6:5f:ba:04:60:5a:f5:85:bf:12:
         31:cc:64:0b:a3:36:3f:56:33:df:ad:7f:39:76:0f:4c:6d:40:
         34:36:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:23 2026 by rpki-client