Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa
File:                     bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa (raw, json)
Hash identifier:          FB73hpmXM8RgDEUnP/W6ts4NVz8DxFoAQOmIe6tOZns=
Subject key identifier:   2B:9C:1E:91:C0:43:30:1A:00:46:2B:70:62:65:D5:59:B0:E6:CF:E4
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584EA15C42BF5CAD39BA087F0800
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa
Signing time:             Sun 26 Jul 2026 19:59:33 +0000
ROA not before:           Sun 26 Jul 2026 19:59:33 +0000
ROA not after:            Sat 24 Oct 2026 19:59:33 +0000
asID:                     402778
IP address blocks:        2602:f33f:c00::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:5c:42:bf:5c:ad:39:ba:08:7f:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Jul 26 19:59:33 2026 GMT
            Not After : Oct 24 19:59:33 2026 GMT
        Subject: CN=ee3e412c-91aa-4082-aba7-df3b1d525b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:cd:08:c3:44:bd:d1:e3:7d:b1:b7:7b:63:
                    ec:59:cc:a3:bc:8a:05:c0:8a:25:69:c0:2c:76:7e:
                    56:4d:02:5e:7d:48:3f:fd:16:03:32:a1:70:e4:75:
                    7c:82:1e:40:4e:8e:b8:7f:1a:7c:83:5f:4e:76:92:
                    12:ee:f3:67:1c:ce:23:a5:8c:ed:49:65:e9:4b:78:
                    9f:7c:e4:6e:bf:c8:7c:f8:8d:8b:f6:cb:50:b9:a8:
                    0d:04:1b:a3:40:f8:d1:36:49:1a:d9:db:16:cf:24:
                    8f:ca:bc:52:1f:50:7c:b7:98:f5:03:dd:0e:31:a3:
                    aa:17:6d:96:f0:f4:5f:24:e4:e3:72:77:5b:ba:e8:
                    fc:fc:8a:d7:ab:5d:e6:c7:47:ed:3d:e2:25:12:98:
                    0f:91:a7:af:ba:bc:f9:34:6f:45:65:9f:27:bd:9f:
                    1c:e1:f0:9e:9a:5f:ae:c1:86:f0:8e:1c:08:8c:15:
                    d4:b4:01:c0:af:4c:10:af:45:68:11:fc:a1:f3:eb:
                    db:0e:8b:40:4b:3e:cc:fd:e2:62:3e:ae:a0:a1:6e:
                    ba:d4:8d:1d:9c:02:df:5d:d3:90:f4:83:6e:a0:c2:
                    cd:dd:94:e0:3f:77:15:28:e2:74:2e:2f:b6:3c:2b:
                    dc:42:59:f0:2f:df:8d:c2:2c:82:fc:30:d7:21:52:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9C:1E:91:C0:43:30:1A:00:46:2B:70:62:65:D5:59:B0:E6:CF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/bcccfcb2-d59b-3762-8ea3-42fdd23d7edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f33f:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:6e:b8:72:69:7a:fd:e6:e8:f2:b9:b1:20:d2:a9:b7:73:
         26:a9:e5:41:65:57:f4:0d:d0:4f:83:8f:4e:d0:5a:18:13:7f:
         e9:38:8b:53:94:33:72:9b:25:7a:7c:35:50:ab:fe:b8:c2:e1:
         da:c4:b7:51:17:66:6e:90:69:6c:06:d3:94:e2:59:7f:ff:1c:
         2e:b7:ef:25:74:78:96:8c:a8:e2:20:92:64:92:c3:5c:b5:71:
         02:2c:34:62:7c:ef:db:38:5e:db:22:61:63:3b:0c:10:20:d7:
         75:db:54:c3:cf:d1:2d:a0:77:99:74:58:bc:7e:77:68:73:dd:
         88:87:11:80:46:85:30:51:69:5d:64:5c:05:18:fe:3f:0d:1b:
         1c:13:d4:14:aa:fc:70:9d:09:ae:6e:70:ac:73:27:f2:93:37:
         04:e5:d2:ce:3c:90:7b:2f:c3:3d:a9:02:6a:d6:39:14:05:ea:
         55:24:81:87:c3:ea:9a:bf:a2:7b:e4:4d:be:ee:ed:93:31:a1:
         10:b2:24:58:dc:fd:cb:fe:97:47:6b:ea:f6:48:a9:c5:48:63:
         80:b6:5a:41:2c:63:90:bc:ce:8b:1d:dd:94:1c:82:a0:b7:a8:
         c0:31:2e:62:11:5a:7f:4c:69:e6:3c:66:92:9a:71:82:d1:9a:
         ab:a8:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:41:00 2026 by rpki-client