Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa
File:                     1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa (raw, json)
Hash identifier:          l3O7KHoocNfUxyTSgRCX92NTf1UhRWsRvt3ye5bVxqw=
Subject key identifier:   66:DE:A7:2A:7D:83:A4:81:43:E8:15:E7:05:32:1C:06:69:F3:17:CC
Certificate issuer:       /CN=08e3f98b-676d-49af-91dd-964a1e63df3b
Certificate serial:       010D0C9F4328584EA79A54642439EB0A87D96080
Authority key identifier: FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8075
IP address blocks:        2602:faa7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:54:64:24:39:eb:0a:87:d9:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5b98678b-70ca-464e-9a1c-6f4a1ae2a626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:c2:4f:86:90:d9:6a:41:1e:14:02:f2:c7:
                    fb:53:92:5a:a4:b7:a0:a6:7e:ac:f5:de:dc:9b:4e:
                    d2:61:e0:a7:fe:5f:ed:51:63:93:7b:da:1f:28:0d:
                    13:e7:e3:03:a0:38:6a:45:b4:86:62:9e:5e:02:06:
                    d6:12:10:2e:37:02:c3:7e:a8:57:06:9d:1b:47:8b:
                    6c:14:a7:c5:1a:f5:bd:0f:ae:58:b3:dd:05:d2:83:
                    b5:1d:f1:99:4b:d9:ed:7a:f6:f0:92:84:ef:19:26:
                    b5:34:09:b1:72:e4:3c:ea:ff:ca:97:7e:8d:27:68:
                    82:a6:d1:f1:94:f4:a0:0b:66:3b:09:1a:ab:4b:40:
                    1d:2d:43:16:dc:2e:85:12:37:5f:46:95:1e:a9:ed:
                    e4:b9:fc:ee:1c:dc:f2:ef:e6:66:4f:f8:00:e8:76:
                    0c:80:43:ee:9b:ea:d1:70:f7:6f:fa:05:12:ed:f5:
                    11:ef:51:87:17:e9:1a:51:19:23:bf:98:d8:f9:2f:
                    84:50:32:e4:86:ce:3b:f0:e9:33:f2:fc:1f:a0:9f:
                    80:21:64:9a:32:e2:34:f6:f8:f6:b9:fa:da:eb:a0:
                    0f:78:0f:e7:d3:fd:a5:79:b8:ac:96:82:86:4a:f0:
                    26:84:db:7c:6d:49:79:99:4f:53:e6:cf:25:a7:41:
                    58:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:A7:2A:7D:83:A4:81:43:E8:15:E7:05:32:1C:06:69:F3:17:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:5d:9c:5d:75:7c:16:ab:5a:fd:22:12:84:7d:a1:70:28:0f:
         b7:30:7e:e9:89:18:01:d3:f2:e7:61:92:ef:b9:e1:8f:bf:8f:
         6c:53:9c:31:19:e1:e2:09:74:a0:b6:35:26:64:6c:6e:1d:85:
         36:95:03:fe:a6:7b:a9:3d:40:f9:1a:95:53:fd:7f:b6:3e:96:
         b2:4c:21:47:04:89:04:da:db:60:fd:31:47:e1:b0:dd:4a:8c:
         a1:41:19:8b:32:94:3a:f2:a8:e9:c1:8d:d9:3f:fc:39:11:d6:
         0d:77:e1:bf:e9:11:a9:38:2a:11:59:7f:c2:c2:e9:ac:a8:3f:
         80:d3:a7:4e:81:57:51:7e:cf:40:3e:a2:42:6a:88:c9:2b:9e:
         72:73:7d:38:d9:e5:8f:b6:ee:c4:cf:27:e3:9d:4c:85:d6:d6:
         3d:6a:53:85:f9:e3:b1:1b:b6:5b:ad:45:a3:6e:a6:a6:c5:b3:
         de:dd:72:b2:9e:45:e0:e8:eb:44:71:b6:d0:ef:05:0a:05:cd:
         b2:43:aa:cf:04:27:13:87:4e:0f:92:e1:c6:b2:cc:e8:b4:92:
         e0:68:ad:e4:ae:8d:12:84:c9:84:91:44:5b:da:23:c9:a4:e0:
         d9:21:7e:20:9c:f0:19:1e:83:78:0a:49:7a:74:b1:3e:be:d7:
         4b:28:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:42 2026 by rpki-client