Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/0defd317-c627-3204-a5e9-9bb3c9a39f29.roa
File:                     0defd317-c627-3204-a5e9-9bb3c9a39f29.roa (raw, json)
Hash identifier:          CzaLgyH++IgVdWPgktzJA74cFxAS7QOnzItWsJ4SqWI=
Subject key identifier:   67:57:94:6C:97:34:0F:C9:9A:A8:FC:E7:85:BB:39:BF:A5:D0:E2:B3
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584EA7989F023A325566677D0200
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/0defd317-c627-3204-a5e9-9bb3c9a39f29.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25870
IP address blocks:        2602:f777:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:9f:02:3a:32:55:66:67:7d:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f9678cd3-62fa-4d5a-8b50-df4673e77601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:0f:1d:18:93:36:dd:75:aa:ff:2d:fd:90:
                    c4:b9:1c:99:63:3d:b8:4d:5a:50:a7:87:bb:34:f4:
                    d2:f7:12:45:f0:d0:74:8f:87:20:04:c1:a5:0e:3e:
                    0f:62:3a:e8:6b:c4:96:c4:d6:b6:60:c8:e4:dc:67:
                    78:59:20:ab:e4:a0:f6:aa:24:18:0a:c3:c1:43:13:
                    d1:c4:99:e5:89:37:83:a1:1f:0b:a7:85:ca:5f:19:
                    d2:ae:9f:5f:83:97:cc:e2:a1:4c:69:ab:48:5c:50:
                    01:b1:fa:b2:84:d8:67:02:97:30:5f:58:ac:63:42:
                    b0:dd:bd:81:31:23:93:2c:91:52:c7:00:9b:bd:ea:
                    f3:30:7f:63:1e:4d:0d:da:35:7b:dd:7d:25:80:95:
                    86:8d:af:7b:05:db:52:f8:9e:44:65:73:26:f3:30:
                    80:b0:8d:d7:bf:ff:20:1f:af:09:6c:05:59:89:a1:
                    cf:48:5d:75:b5:9e:0c:e2:f0:dd:75:0a:80:65:3e:
                    6d:6d:d2:03:f3:29:e3:49:37:a2:be:08:38:9e:9f:
                    c7:b1:3d:27:fa:13:49:85:54:de:db:fc:66:ba:75:
                    83:b2:96:5c:c3:3e:80:9b:77:01:ed:fa:71:13:fb:
                    7d:b4:35:f3:53:54:ed:0a:40:0d:9c:5c:c0:02:7b:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:94:6C:97:34:0F:C9:9A:A8:FC:E7:85:BB:39:BF:A5:D0:E2:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/0defd317-c627-3204-a5e9-9bb3c9a39f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:18:2b:ee:51:ab:a8:bb:f8:ec:6d:38:2a:45:73:09:e8:20:
         40:10:a9:9b:48:b6:d7:3a:15:45:30:ab:41:b7:6a:f8:b4:de:
         76:d9:3c:36:13:f2:c9:a8:40:62:8a:a4:43:c9:1d:b5:24:ee:
         62:67:e5:d2:db:58:08:34:c2:5f:cd:df:24:1a:0f:37:64:ae:
         84:69:ae:a6:9d:04:39:a3:01:92:f6:f6:0f:b1:28:18:04:ad:
         89:65:39:d1:ec:f7:e0:0e:a6:56:da:58:a7:1d:85:41:32:b5:
         8b:f8:d6:7e:e8:57:d2:b7:d9:f4:7a:3e:cb:7b:70:44:94:86:
         79:10:db:9d:b3:9f:f2:63:f2:98:3c:35:16:1b:b8:25:ba:4d:
         1e:45:04:4a:79:f1:1e:bb:12:39:c6:18:6c:be:94:28:5f:96:
         a8:80:c3:f4:60:bb:16:45:39:29:eb:35:7a:89:56:20:6c:5a:
         42:f4:75:69:ff:44:2d:e5:5a:2f:f6:85:d1:63:68:45:fb:c7:
         76:ef:4e:36:fc:7d:d3:52:d0:76:c5:0f:50:fb:52:96:a7:fe:
         1a:9e:c8:4d:1e:5b:14:c8:9c:0d:7c:ae:59:c9:40:45:5f:e0:
         8c:46:96:38:e6:10:4a:f5:80:3b:bb:34:3e:4f:9c:24:f1:9b:
         85:aa:4a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:41 2026 by rpki-client