Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/77bcc360-5389-35c5-b3d1-80c9a92f4561.roa
File:                     77bcc360-5389-35c5-b3d1-80c9a92f4561.roa (raw, json)
Hash identifier:          EbGWQkftIBhImuTVL35+aAJ5IWrRkmK6/4Rmo5tFTQo=
Subject key identifier:   BD:E7:12:D4:24:42:21:77:0F:89:85:FD:8F:8C:A8:98:65:CE:79:10
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584D7F9A9F0DF316287AE1742F80
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/77bcc360-5389-35c5-b3d1-80c9a92f4561.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     400556
IP address blocks:        2602:f71e:72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:9f:0d:f3:16:28:7a:e1:74:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=6ecb9c9f-7fe6-44d5-86ff-c0d3023ea069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:46:59:65:06:7a:aa:51:b9:dc:c1:12:e4:
                    9b:c5:e1:cc:90:2f:98:6f:1a:32:bb:44:50:a9:bd:
                    b4:b1:43:9b:00:b0:ef:d3:86:d7:b2:fa:a3:cf:35:
                    86:79:65:2b:f5:54:1c:30:51:8f:44:38:28:38:66:
                    f7:06:f3:19:b2:15:97:ed:a0:99:24:6b:cd:02:0e:
                    25:d7:ab:1b:82:04:92:f3:0d:35:f4:cd:0a:37:ec:
                    ff:71:af:43:fe:e3:a2:db:62:c4:de:aa:e4:8c:a7:
                    cd:3e:ed:80:81:23:e5:54:76:73:04:3f:70:f8:56:
                    d1:cd:dc:82:fe:8b:b0:55:1c:6a:ac:58:d0:69:1f:
                    55:37:59:ab:62:ad:48:c6:90:f9:d1:46:1e:9d:a6:
                    82:c6:f8:c7:f4:fb:80:23:db:e4:64:53:e8:b8:9f:
                    74:9e:6b:ba:6f:c4:b6:50:ca:61:87:2c:22:5f:2a:
                    0b:cc:7c:6f:c1:a8:00:85:12:0d:28:4d:4f:87:6b:
                    6f:f3:2a:68:f6:96:d3:87:ef:2b:00:02:09:7a:e4:
                    a7:fc:14:a2:c1:e6:e5:82:19:a5:d9:84:9e:a3:31:
                    ce:6e:ac:13:15:8f:13:e2:28:87:3d:7d:19:37:45:
                    d3:94:60:bb:76:5d:45:f8:43:d3:6a:43:94:f2:be:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E7:12:D4:24:42:21:77:0F:89:85:FD:8F:8C:A8:98:65:CE:79:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/77bcc360-5389-35c5-b3d1-80c9a92f4561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:52:62:c8:7f:fc:c5:7a:00:16:af:9f:07:17:6a:cb:42:
         38:11:e7:d5:88:f0:65:7e:13:af:bc:e6:5c:39:f3:2a:b2:7e:
         b5:b2:15:5e:9d:8a:45:0c:bc:22:4f:a1:f6:e6:22:0f:3c:84:
         31:30:0f:dc:4b:13:0d:b7:4e:2a:1e:18:9f:8c:3e:4c:87:c8:
         02:c1:fe:8a:61:8e:78:35:4e:d1:d5:88:bd:0a:37:63:e1:cd:
         91:68:f9:47:99:a2:3a:b2:eb:9e:01:f3:c3:8c:b7:af:65:ac:
         67:42:78:4e:dd:be:52:05:77:2f:7a:37:dc:8c:b9:5a:8a:7e:
         1c:32:dc:61:d8:11:28:e0:5f:68:cb:fb:e9:c8:00:15:ed:a7:
         d6:cb:02:c0:87:46:26:d8:30:ac:03:a4:f2:07:50:1b:d9:c0:
         8d:51:7d:e4:66:d8:90:35:56:f7:fe:95:55:38:8c:cf:b6:6d:
         73:38:c4:e2:41:5b:7f:fc:78:6f:c1:8b:7e:f6:ff:ab:62:aa:
         d0:3e:72:b8:e4:72:dc:df:fe:c3:e9:f1:ef:99:fd:68:24:34:
         55:c7:f6:29:29:c9:c9:ef:b1:8b:4d:31:fe:a9:06:2f:34:fa:
         c2:31:d7:2e:5f:ba:7d:4a:40:a3:c3:0d:71:6d:37:29:7e:6f:
         a1:60:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:57 2026 by rpki-client