Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
File:                     bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json)
Hash identifier:          v6SiVYbUt8FtpVkxoYK4Qhq+EHeB/kzlYr/lac0wElA=
Subject key identifier:   01:E2:91:7C:E7:13:F0:DC:CA:15:53:D4:D3:CF:58:D9:EC:F3:C3:9C
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F4328584E043605C5268EF7533C25DBC0
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     401082
IP address blocks:        2602:f8b4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:05:c5:26:8e:f7:53:3c:25:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=90d475ea-0d34-43ec-9d54-a9f9545fb31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:39:5d:f2:f7:2a:1d:fc:75:3b:16:db:b0:
                    84:e0:19:ae:3c:b9:5f:45:ea:a1:df:a2:63:a8:24:
                    55:29:f2:01:9d:d6:63:96:c0:28:6e:a2:bc:c9:2f:
                    22:6a:b5:a2:59:51:d5:50:e4:6d:d8:d7:75:e0:97:
                    54:06:1e:34:5c:0f:62:3d:c9:85:ed:29:6d:07:b2:
                    0d:d5:95:55:77:e9:0c:fc:c2:a3:8d:d2:bc:64:c1:
                    19:72:71:8e:c3:57:ad:b6:ba:64:8a:59:df:fc:d9:
                    ce:74:07:0c:91:64:5c:74:8b:f5:ea:e0:c9:21:35:
                    b9:66:eb:24:c0:20:74:20:18:da:36:29:b2:28:70:
                    da:9b:97:ca:22:28:6d:3d:fc:7f:61:71:35:05:92:
                    5c:65:0f:99:a8:fa:42:78:87:b7:9f:8d:17:7f:6e:
                    9e:70:ed:99:a2:8f:6a:b1:aa:4b:8b:fc:08:83:77:
                    ba:d2:8b:f3:21:9f:2c:54:9a:65:8a:32:19:f9:25:
                    0b:51:70:6c:f1:e1:93:b4:9e:13:eb:d7:a3:f2:20:
                    9b:52:cb:b5:ff:10:c0:fc:e9:31:68:f8:18:c8:52:
                    21:15:fc:71:bb:38:d1:33:a0:4e:fb:e7:e8:23:dc:
                    b6:ae:b5:a0:b8:bf:2a:a2:cd:ca:19:22:d6:90:ed:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:91:7C:E7:13:F0:DC:CA:15:53:D4:D3:CF:58:D9:EC:F3:C3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:2a:90:c2:6d:d3:e7:2b:48:e5:dd:aa:e4:9e:49:c2:81:
         7f:1c:a3:63:82:eb:38:15:4a:2b:31:62:61:24:e1:d4:61:77:
         e7:f2:a0:21:12:5d:e6:a6:34:71:81:bf:af:f9:f1:fe:e7:7a:
         f3:a2:5b:0c:39:ac:2f:99:a0:c6:a4:86:93:ab:6a:cb:d1:2d:
         83:df:6c:e0:06:57:05:0c:d0:b3:4a:d2:c1:4a:20:45:7c:4d:
         83:48:3b:70:1e:4f:7b:41:1c:f7:f4:91:f3:62:01:0f:68:1e:
         52:c8:14:aa:6e:78:b5:21:dd:c8:3a:48:fb:05:58:e5:be:ef:
         ee:eb:44:da:ea:3e:47:bf:cd:01:e9:05:83:ad:f6:17:77:18:
         29:ab:20:25:61:f2:30:f3:56:36:98:b6:7f:c9:c8:fb:ba:7b:
         de:41:11:10:bf:cb:ad:34:f6:22:90:6c:b2:a9:76:b0:9b:61:
         12:6a:e7:29:ca:bf:ae:c1:fe:ca:fb:62:90:02:50:b2:38:fe:
         71:a8:6d:f0:c1:83:ce:28:84:af:35:24:30:41:f5:b3:ba:dd:
         91:d5:ec:03:f8:fc:b8:9d:43:73:3d:a5:fb:fa:9b:6e:5b:32:
         2e:19:68:41:df:18:e7:06:92:6b:ac:ea:05:2f:fe:18:d4:8d:
         1b:39:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:22:40 2026 by rpki-client