Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
File:                     075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa (raw, json)
Hash identifier:          j1pBLTQp/Tju6+cszR6l9mIOQ+nbdbzuWpTfyMrGmlU=
Subject key identifier:   0E:3D:AE:C8:E5:46:61:98:42:2F:34:94:39:9F:31:23:43:92:C5:38
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F4328584E0A6FF68B1FDC41ED4597F680
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     399542
IP address blocks:        2602:f8ef:fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f6:8b:1f:dc:41:ed:45:97:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=0b73939d-073f-43c5-b5fc-062091874b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:2d:4f:a3:c6:68:68:53:2e:f8:a7:45:64:
                    67:fd:dd:75:56:28:07:4d:a5:e0:3f:2b:2b:95:e8:
                    40:4d:1c:3c:23:f6:1c:e6:d7:48:02:ae:27:4a:28:
                    b0:da:7e:98:e1:9b:78:c4:c4:65:90:08:8c:66:2a:
                    b8:68:f9:62:a4:cc:bf:58:7d:8d:10:07:49:e4:05:
                    c6:44:51:e9:f0:8d:d9:27:84:30:d5:22:38:a8:00:
                    6f:00:a3:3c:4e:5e:5c:8c:2d:a2:32:ce:a8:6e:c6:
                    10:7e:87:72:51:32:ad:a8:0a:e8:09:d0:59:3a:5b:
                    10:0e:2f:bc:74:31:f8:6f:9c:9e:af:3a:ca:85:7d:
                    99:ed:2c:ee:5a:9c:eb:d5:32:04:49:c6:96:96:ec:
                    62:6a:30:72:98:21:38:fc:c5:14:28:87:48:1d:d1:
                    bf:c7:26:6a:70:5a:6c:a5:02:53:c7:4a:6a:83:72:
                    27:42:95:52:7d:71:e2:98:20:e9:3a:a5:4b:71:49:
                    ea:35:28:ea:63:3f:48:66:ca:1d:5d:8f:76:41:ab:
                    44:73:11:63:82:d7:c1:d1:f0:07:ce:28:e7:04:16:
                    6b:26:25:ba:58:b9:67:4f:73:61:06:07:e6:91:de:
                    b1:aa:2d:48:60:58:4e:92:cf:a3:f7:ec:b2:19:ba:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:AE:C8:E5:46:61:98:42:2F:34:94:39:9F:31:23:43:92:C5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef:fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:54:03:cf:72:d6:95:7f:63:79:af:f0:0e:b9:f2:cb:8c:10:
         65:52:38:c5:d1:c0:c9:d3:65:bf:97:dd:e5:4e:d5:c5:c4:10:
         b2:54:c2:9e:93:bd:5a:42:41:ff:19:5f:d8:cb:3f:9d:fe:7d:
         b2:ae:5e:f0:01:28:6e:97:50:bc:20:94:3d:33:07:2b:0c:1c:
         fc:94:f5:c5:f3:85:0f:3f:21:05:49:3b:98:b1:b5:c6:fc:20:
         72:40:8c:b3:7f:17:6f:4c:a0:25:5a:22:aa:e6:96:93:ed:ed:
         14:71:e0:3d:a2:a7:ee:8b:94:89:f9:31:03:fa:e6:b7:86:94:
         ff:f7:23:a9:82:0a:47:f2:18:27:03:a2:70:ca:f3:15:eb:9d:
         72:4b:df:4a:33:54:03:62:10:23:7b:01:21:3d:d2:46:84:82:
         13:08:be:e3:20:7b:17:fe:86:49:37:43:ee:fd:24:80:bb:5a:
         df:68:8f:95:67:1e:1b:5d:7e:e6:f0:81:b1:7a:44:bc:f6:d8:
         3c:e6:6f:e2:8d:ab:31:fd:65:9f:42:1c:8a:c4:3c:0f:57:a4:
         60:16:c4:de:32:27:cb:eb:89:68:50:ee:db:c7:d2:10:8b:bd:
         d5:dd:e0:73:cc:93:e5:d4:94:51:eb:00:37:ab:05:6b:ec:82:
         21:2c:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:49 2026 by rpki-client