Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/280b80da-a6e4-3fd1-af73-6d921e018ca7.roa
File:                     280b80da-a6e4-3fd1-af73-6d921e018ca7.roa (raw, json)
Hash identifier:          PmQD09zkYP3ihxg1itTEAoX9xTq1rEqhxpFymB5d5g4=
Subject key identifier:   F2:70:C7:1F:C4:12:F9:43:8B:44:BE:D8:93:9B:13:00:99:B4:85:D1
Certificate issuer:       /CN=dfc6770a-8775-4ba8-9d91-68facba79b33
Certificate serial:       010D0C9F4328584E0005E205547D32D420EA4840
Authority key identifier: FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/280b80da-a6e4-3fd1-af73-6d921e018ca7.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     18702
IP address blocks:        2602:f842:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e2:05:54:7d:32:d4:20:ea:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc6770a-8775-4ba8-9d91-68facba79b33
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=00fbc61b-b04a-412c-a7ad-8ec309b6e1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4d:b5:d9:79:bc:b2:0a:60:25:75:db:7c:bd:
                    77:cc:c1:6e:4a:b6:d7:3d:49:1f:b6:e1:ec:92:ff:
                    20:31:f1:e7:ea:b2:b4:4a:73:3e:c8:ef:4f:33:b0:
                    eb:ed:45:be:37:46:76:91:f7:ca:22:64:2e:dd:e3:
                    6f:31:a7:61:0b:46:05:3a:25:bb:33:8f:d8:ae:ce:
                    a4:d5:f5:5a:ca:09:0a:6c:cd:fa:ca:eb:d3:91:30:
                    7e:6a:94:74:dd:be:3f:04:72:7f:8f:ad:53:2f:02:
                    62:55:85:ad:d1:ea:dd:56:91:62:27:04:19:56:12:
                    37:df:e4:0b:e3:9a:19:8e:c5:bd:c5:9e:b9:9a:ac:
                    e6:11:2c:ef:65:c2:d3:69:3c:22:76:4c:59:3f:6c:
                    a6:e4:b3:6c:77:a3:1b:f8:a4:1b:47:98:fb:b2:51:
                    a3:95:67:a9:46:47:b1:93:75:ea:cf:9b:db:fa:88:
                    fc:40:02:df:2b:ff:0d:9a:5d:7c:73:dd:b5:b4:9b:
                    0d:99:11:2d:a7:f6:55:d9:53:9c:dd:f5:f8:1c:1c:
                    fd:f1:40:62:9b:7a:65:a8:7b:d0:ff:64:84:f8:9f:
                    a7:eb:fc:d4:af:b6:90:2c:bf:61:c4:70:43:9c:7c:
                    1a:3b:43:87:dd:2d:4d:3c:94:66:e0:0c:b1:a7:9c:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:C7:1F:C4:12:F9:43:8B:44:BE:D8:93:9B:13:00:99:B4:85:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/280b80da-a6e4-3fd1-af73-6d921e018ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl

            X509v3 Authority Key Identifier:
                keyid:FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f842:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:70:4c:10:61:ba:a6:89:df:fb:9c:b5:51:0f:f8:7e:d7:
         93:9c:5f:8a:e8:2c:1d:b6:b1:f4:6a:63:56:4d:9d:d8:17:28:
         6b:35:5a:7d:93:ba:57:67:d7:56:1e:76:70:33:f4:fa:4b:85:
         17:5d:45:db:4f:ac:74:11:db:54:32:d2:41:0e:ea:c2:6e:1e:
         d5:22:ea:4f:64:a3:35:07:0f:f7:53:e1:47:f0:5e:a2:c5:77:
         70:3f:c5:08:7e:56:50:f2:80:6c:fa:ee:eb:0a:3d:0a:4b:8f:
         bc:cc:fe:ee:41:9c:1c:55:a9:d8:1f:a2:f4:9e:04:2d:bb:90:
         9d:75:9f:72:1a:df:0e:d2:4c:f4:b8:4e:16:09:da:8a:a2:10:
         1d:bc:60:03:8b:e7:02:3c:57:d0:0a:43:fb:6c:84:25:a5:a3:
         82:f0:9b:40:92:19:23:5c:70:26:ef:56:c2:af:5b:c3:ef:38:
         9b:01:ba:09:b8:77:2c:a1:59:70:22:f8:27:a7:bc:0b:de:c0:
         ea:c1:c5:bc:a0:86:cd:7d:55:35:d7:83:58:f7:38:84:6d:24:
         48:dc:8d:93:da:8d:54:9a:02:d8:a6:e0:50:15:dd:ed:e8:07:
         5e:4f:27:ec:cf:47:eb:28:36:ad:33:67:c6:82:d3:fa:30:2e:
         21:73:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:42 2026 by rpki-client