Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa
File:                     dbf19602-5228-31b4-b609-be9efc6ef44a.roa (raw, json)
Hash identifier:          M811iWDwJE0lzfHSlMWXyyetsLvI2F0TDSTewHSeYrg=
Subject key identifier:   09:CB:E8:39:05:6E:7A:C2:80:B2:2A:08:F6:5C:A4:97:82:66:1A:3A
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584EA2DFC77EFA9F2B177660FFE0
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     46983
IP address blocks:        2602:815:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c7:7e:fa:9f:2b:17:76:60:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=bce54927-8cf9-4b96-ad31-5f4df5f8e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:d2:82:93:ea:18:18:41:de:63:5c:7b:f7:
                    d0:10:79:40:d4:84:c8:e9:de:3b:89:ff:7c:cd:d6:
                    3a:e9:a2:01:fc:45:53:ac:46:77:d8:ea:94:4f:da:
                    17:8c:21:29:23:a4:b2:a2:fa:87:2b:8e:bb:96:5d:
                    29:ac:19:48:d2:00:56:05:c4:ca:70:b5:95:da:8c:
                    c8:b7:1a:2d:41:47:49:08:a4:86:aa:86:e7:32:9e:
                    bc:50:e1:03:df:57:03:0f:36:18:3e:07:d2:12:48:
                    cb:fb:cb:47:cc:75:82:75:50:9e:2d:6b:7b:cf:93:
                    7d:cb:5f:a9:6a:f7:34:1f:41:45:7d:39:9c:7e:66:
                    99:da:1a:6d:e3:c3:50:ad:4e:be:db:b5:13:dc:10:
                    7f:e8:0d:06:bd:49:2c:dc:7a:fe:33:91:b1:a4:15:
                    a2:84:54:04:11:6b:1e:96:2f:47:37:f8:a6:aa:1a:
                    9d:08:df:a2:f5:36:38:0c:39:52:b2:f0:38:99:06:
                    1b:e3:2d:aa:9d:9f:35:d6:29:04:93:6b:fc:26:64:
                    8d:18:cb:34:44:0f:6c:1a:c8:a2:24:ce:22:81:11:
                    11:86:82:56:38:67:ba:15:b5:cd:55:38:14:21:25:
                    e1:49:34:cd:a3:43:27:46:32:cd:e9:bc:33:bc:7e:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:E8:39:05:6E:7A:C2:80:B2:2A:08:F6:5C:A4:97:82:66:1A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:63:19:e6:55:1b:b8:3f:75:7f:f6:9c:fa:c2:dc:f2:a2:fc:
         59:39:c8:9b:2e:9d:bf:30:aa:39:38:91:cd:2e:50:38:34:b6:
         ad:42:ea:d3:00:b6:66:8c:d0:c2:8f:c3:2f:08:da:29:91:9a:
         46:ac:1f:38:e3:5a:af:6e:77:8f:43:64:26:9f:b2:dd:76:63:
         e2:5f:44:5e:53:a3:a3:80:a4:82:e8:1b:da:18:c2:7c:26:30:
         04:e4:8c:e8:75:a9:c4:ef:4d:97:6e:bc:fb:20:77:88:0a:78:
         2b:20:0a:56:1b:e3:15:90:f7:22:ba:0a:7b:06:7e:62:cd:f4:
         2d:c4:ef:02:0b:8d:95:79:92:ab:80:09:b4:03:fd:ec:98:c8:
         8c:1b:be:4a:b6:7e:8c:dc:26:64:1a:77:b4:43:04:fe:41:56:
         b1:e9:cc:e1:5a:1a:38:5f:8e:e3:09:92:38:72:b8:64:25:b5:
         70:58:a3:58:fe:6b:44:0a:cb:cc:c8:b6:69:b2:47:18:e2:cc:
         41:dd:9e:62:dc:7e:e5:29:91:75:53:a1:18:d7:f6:ec:df:5e:
         6a:9c:63:83:b7:e3:36:44:c0:bc:56:77:e3:4a:c9:e6:c5:19:
         e1:0b:b4:33:70:a7:ae:64:3c:b5:e2:f7:b4:3e:17:ec:1d:b6:
         e0:ba:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:54 2026 by rpki-client