Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/875d84f1-68b5-3901-8d31-7443d9e4e2db.roa
File:                     875d84f1-68b5-3901-8d31-7443d9e4e2db.roa (raw, json)
Hash identifier:          ymazQdhCVCeX7DNAz+XEgdGFub85LI2FVVmnQMvZKNs=
Subject key identifier:   07:16:D6:D1:05:DA:BA:F2:AB:5A:4F:79:F7:02:3C:FA:52:5A:EA:19
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584DE6E5C334C955DC83CF126BC0
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/875d84f1-68b5-3901-8d31-7443d9e4e2db.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     11385
IP address blocks:        2602:f7a8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:c3:34:c9:55:dc:83:cf:12:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=f53d5f46-1b9b-4c06-ab14-13d285721e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:94:b7:69:5a:10:c3:ab:3d:86:e2:af:5d:
                    62:9c:d8:8d:c6:15:f9:a3:08:4d:a6:5b:a3:32:8b:
                    6e:f9:c0:bb:41:ac:34:28:88:fb:4d:1e:b2:af:3e:
                    bc:a6:71:b0:71:da:c5:e3:cd:98:7b:c8:89:fc:98:
                    f3:f6:43:da:59:81:fd:dd:33:de:d8:26:6d:3b:6c:
                    e9:ed:58:4a:1f:5c:27:ab:68:8d:82:d3:79:6c:eb:
                    19:11:46:8f:c1:47:f0:97:ad:53:26:c4:43:7c:c7:
                    35:69:fa:7e:2a:1c:33:56:06:69:06:b7:76:22:a1:
                    ca:99:a1:22:9f:db:73:57:16:06:51:a8:eb:42:ee:
                    dd:e5:61:e9:16:c5:65:2c:30:23:ee:75:68:2d:cd:
                    f6:a7:78:ff:27:64:e5:f6:2d:c5:e2:ff:2d:81:a2:
                    58:71:9e:c9:e9:51:f1:96:55:f7:a8:99:08:79:d4:
                    a2:6d:9e:67:bd:db:f8:de:52:72:8d:09:b9:4c:82:
                    6f:0b:e5:09:fa:72:d7:fa:04:8d:71:a5:b8:30:8b:
                    80:42:fd:d4:07:16:94:78:f0:dc:4a:48:ab:03:9d:
                    9d:91:50:d4:46:62:f7:71:1a:d8:ea:32:97:2e:12:
                    e5:a7:b3:9e:7f:53:61:d9:3a:30:50:9d:1a:b0:88:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:16:D6:D1:05:DA:BA:F2:AB:5A:4F:79:F7:02:3C:FA:52:5A:EA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/875d84f1-68b5-3901-8d31-7443d9e4e2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:fc:45:3a:be:ec:ee:89:b8:3d:e9:12:8f:c6:65:68:49:
         e1:06:85:21:6c:b4:2e:94:af:59:66:0c:69:86:51:38:34:99:
         75:3b:ac:9d:ea:d2:1b:a8:10:58:64:96:e9:8d:f5:fc:18:14:
         6a:7f:51:0c:da:37:f8:b9:a9:99:54:df:e9:f0:6c:b5:a4:87:
         70:93:4c:b3:f7:ea:44:e5:e0:12:e9:c7:d6:cd:c5:20:b9:de:
         d7:56:b5:eb:f9:ce:f1:94:61:ee:f5:be:f3:5e:9c:9a:39:8e:
         6f:6b:ff:6a:a9:fa:20:fc:79:48:e5:a7:4e:c2:28:ee:c2:65:
         70:70:90:ea:2e:8d:32:18:a3:cf:f0:d7:24:3a:ff:55:6e:eb:
         c9:52:74:5b:97:3f:75:d2:6b:1a:d4:44:da:17:ec:5f:73:bc:
         7e:1b:f8:0a:76:1a:23:26:ca:7a:c5:d5:1d:d9:26:66:13:1f:
         87:fb:c7:9e:09:66:20:cb:07:8c:17:49:60:fd:1e:35:2e:e2:
         d4:9b:64:4e:03:82:f5:2b:84:25:bb:6b:7f:3b:48:48:65:b6:
         e2:01:de:18:2e:0c:8c:6d:53:af:a0:c3:c7:dd:7f:6b:75:9a:
         d4:22:31:fe:fb:c8:31:00:24:a1:35:f2:b5:a3:c5:8e:b0:7b:
         09:27:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:16 2026 by rpki-client