Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/0defd317-c627-3204-a5e9-9bb3c9a39f29.roa
File:                     0defd317-c627-3204-a5e9-9bb3c9a39f29.roa (raw, json)
Hash identifier:          tCt7ex1wO2aETNMoUPCooapaSIUYAVaBwZBFMC7FalM=
Subject key identifier:   6B:DA:4C:C3:F2:C7:53:BB:99:35:76:CC:5A:AE:94:E4:C1:5E:66:20
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584DFBD5CC99E8AE3AE5DA888D40
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/0defd317-c627-3204-a5e9-9bb3c9a39f29.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     25870
IP address blocks:        2602:f777:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:cc:99:e8:ae:3a:e5:da:88:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=17d37b55-c988-4101-a0ba-847b677eabb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:19:96:fc:3a:89:bf:ef:a0:da:86:ba:05:
                    66:85:83:ee:c5:4c:f8:49:2b:e7:06:09:b5:51:30:
                    a2:e0:92:40:6a:e6:4e:e8:6b:6d:12:05:79:ca:59:
                    67:82:4a:75:bf:7c:8a:c4:84:45:9a:4c:f3:90:b5:
                    23:4b:d3:c1:d0:cd:98:e5:52:e0:d9:31:89:0e:7b:
                    9d:cd:41:1d:b1:ec:26:0d:8c:83:0c:78:94:22:ee:
                    95:2e:05:48:08:39:1c:02:6f:bf:c3:e8:f7:a5:0b:
                    62:78:b1:02:98:02:61:7e:6f:ae:af:fa:2a:c9:72:
                    8e:81:3d:85:38:a7:c7:1d:08:39:ae:5e:37:70:55:
                    ba:d9:34:a7:55:66:2e:52:91:38:04:71:47:fd:05:
                    88:cd:52:29:d5:4a:b8:1c:6c:ae:15:42:fc:fb:6e:
                    fc:dd:16:05:3b:a8:d5:40:5c:88:a3:5a:bb:58:c8:
                    e9:63:54:3a:ed:18:93:ad:77:db:80:9a:f3:21:16:
                    61:75:d0:36:ad:c7:e1:a5:a7:5c:b5:90:f0:77:7b:
                    92:79:8c:87:72:58:9e:d1:8b:f6:de:8f:1b:c8:0a:
                    44:2b:f7:f9:e2:dd:d7:9c:b4:5f:de:db:86:22:93:
                    bf:f1:4c:b7:ca:fd:1d:d7:30:6f:61:08:6b:47:1f:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:4C:C3:F2:C7:53:BB:99:35:76:CC:5A:AE:94:E4:C1:5E:66:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/0defd317-c627-3204-a5e9-9bb3c9a39f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:56:4f:31:b7:2d:24:f5:3a:78:40:fd:f4:11:99:65:8f:70:
         f7:74:3d:5b:bf:7e:66:23:60:66:db:65:29:f2:16:70:b4:ef:
         85:59:ab:bc:2a:a7:a1:36:07:dd:9f:59:c0:76:9a:d8:3a:fe:
         70:64:92:41:a6:19:74:f7:bf:c4:5d:92:ee:96:af:b0:43:71:
         f1:ba:8e:b3:f0:a4:0c:3b:65:94:a2:e5:05:ea:c2:dd:b3:b7:
         5e:0c:1d:48:68:51:c9:d1:f7:d4:1e:5f:3c:83:c2:bc:8c:78:
         e6:3e:e6:1b:14:aa:ac:46:ec:0b:40:6a:35:26:8d:1b:25:59:
         40:ef:95:bf:d6:cb:35:84:1f:4e:1d:14:76:33:b5:4d:d7:cb:
         df:9a:68:b1:d2:7b:9a:a6:4e:bc:06:fe:1a:aa:d4:4e:03:ab:
         4e:05:52:68:f6:52:5e:09:ac:d4:d6:da:eb:2a:3f:b4:e1:71:
         b1:56:83:9a:45:5a:7a:cb:9b:9a:9e:4a:d2:1d:f7:4f:30:7e:
         4a:70:18:f1:24:93:99:d5:34:72:db:f1:a9:ae:1a:12:6e:62:
         96:46:44:31:46:e9:91:65:43:1e:52:1e:61:97:56:e6:55:10:
         a1:4d:1d:2b:75:72:09:f8:54:fc:f3:c0:67:2d:fa:9d:0e:6d:
         f1:22:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:53 2026 by rpki-client