Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/b019fe12-bb84-38a7-89c4-9595476d5af7.roa
File:                     b019fe12-bb84-38a7-89c4-9595476d5af7.roa (raw, json)
Hash identifier:          mMYkR+kljC0CJSOZkTPa12e0x3lH0QyvPUBRJyIDtH8=
Subject key identifier:   E1:E0:6F:DB:2A:5D:92:86:A3:60:7C:36:6F:4B:97:5D:7F:EE:92:F2
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584EA7919A74360E6D4D9C9DD580
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/b019fe12-bb84-38a7-89c4-9595476d5af7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:1688::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:9a:74:36:0e:6d:4d:9c:9d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7f49c02c-3e30-4e3c-ad86-4cf0133f9b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:e4:b2:28:16:4a:72:97:7a:0e:7b:56:c0:
                    05:af:b8:9e:27:de:ec:62:27:68:41:38:94:c3:c2:
                    45:f3:5a:79:ce:bb:be:61:00:a2:a0:83:fd:73:78:
                    fd:39:3b:de:11:0a:b8:5f:81:a2:f4:a8:31:b4:fc:
                    e3:94:e9:a5:51:6d:5b:da:a6:a2:5e:49:1a:71:b6:
                    e9:ca:6f:5f:2c:42:fc:65:8b:53:c1:91:82:e5:40:
                    00:97:d9:3c:2f:ca:59:f7:60:fa:b0:2d:ac:38:6c:
                    b4:f7:2e:c0:77:e9:3e:81:f0:be:0f:2c:bd:47:62:
                    3a:56:b7:16:28:3d:5a:ea:74:c9:54:a1:b9:e9:e2:
                    26:60:da:39:e7:bf:08:8d:0b:89:0f:04:f2:cf:da:
                    ee:bc:8f:80:fe:84:ae:e9:b5:1e:27:b2:fb:ec:33:
                    69:f7:4f:90:e6:e6:59:1a:7b:c8:eb:16:27:00:71:
                    9d:95:23:08:64:94:3b:a1:85:f7:d2:c8:da:d4:69:
                    a0:55:15:38:b4:ff:eb:27:ef:b2:68:63:bd:ef:ec:
                    47:f0:f2:37:6e:c8:aa:21:5b:e4:fa:52:d9:57:2d:
                    70:5b:3b:d6:2b:db:7f:aa:8f:43:a9:19:d6:cc:4d:
                    b2:9e:15:5d:b0:d2:3e:bd:ef:f2:39:e4:39:20:41:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:6F:DB:2A:5D:92:86:A3:60:7C:36:6F:4B:97:5D:7F:EE:92:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/b019fe12-bb84-38a7-89c4-9595476d5af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1688::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:29:36:d5:d1:1c:d3:a9:b1:53:92:68:ff:cf:1b:85:81:5a:
         04:52:80:71:ae:d2:36:04:52:58:03:d5:dd:8d:6b:8c:ed:7f:
         ba:7e:8a:01:37:57:91:8f:23:3f:07:1c:cd:d1:c5:5c:59:1f:
         1c:c6:a2:a0:8b:75:50:54:cb:42:52:86:3d:d8:fa:df:23:29:
         81:d9:40:e0:4a:6c:76:13:74:8f:8d:18:a0:5b:1c:99:19:cd:
         3f:8d:66:b2:20:12:8f:b0:24:2b:98:7b:dd:99:86:0c:53:6a:
         7f:6e:26:61:31:23:49:3a:74:c0:88:fc:54:c5:47:52:ff:17:
         7e:b7:51:96:6c:81:b2:5c:61:42:7e:1b:7f:88:55:37:d6:92:
         61:da:59:2a:ec:df:2e:51:1a:41:94:5c:eb:9c:d8:3c:e6:29:
         47:9e:2c:71:79:fd:ca:ff:66:5f:38:1e:7f:45:7b:93:73:98:
         52:d6:d4:90:ca:d0:b3:35:a3:e7:7f:25:10:d3:e2:c4:0a:18:
         dc:19:d5:e7:0f:37:57:1f:45:48:c3:e8:50:47:ce:f3:0d:cb:
         e5:fb:89:09:0a:c1:95:c6:9e:e6:4f:3e:77:af:7d:79:5c:92:
         c7:a1:99:e0:9f:7b:aa:ed:43:2f:99:d5:42:78:4c:8e:3d:c9:
         1e:d3:26:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:13 2026 by rpki-client