Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/b4999ad4-02be-3684-9d95-c830fea08356.roa
File:                     b4999ad4-02be-3684-9d95-c830fea08356.roa (raw, json)
Hash identifier:          65OKy7EosxJDvO+C0fs1fz4mQWOPpkkUnCWPEov9lQM=
Subject key identifier:   58:54:37:EF:75:3A:F8:CB:3A:B7:EB:56:B4:C5:18:48:DA:39:29:AF
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584EA796615266D39B9730E68D80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/b4999ad4-02be-3684-9d95-c830fea08356.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     835
IP address blocks:        2602:fd50:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:61:52:66:d3:9b:97:30:e6:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=03b2a13c-6431-4082-82b5-d1de51d9a1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:ba:9e:b1:c6:db:71:ea:79:0a:be:f5:e3:
                    2c:34:e3:dc:2c:63:56:c1:33:09:88:48:d0:52:88:
                    81:4f:e7:eb:47:dd:df:91:2f:f1:a4:30:cd:d0:a7:
                    7b:08:c4:bd:f9:9a:f9:d5:87:8d:67:4f:77:0c:03:
                    10:6c:6c:fb:90:f3:95:e1:19:53:45:4a:b2:e9:99:
                    0d:36:a0:86:29:91:11:d2:9a:b4:2a:93:2a:d5:6a:
                    66:52:d3:09:d3:9f:df:39:83:76:59:ae:4b:94:4e:
                    79:4f:c9:1a:58:87:91:54:81:df:9d:1d:3f:3f:9c:
                    65:7c:94:15:b7:c0:96:90:04:76:1d:5b:f5:57:ce:
                    ce:9c:02:ba:bc:d6:3f:da:7b:25:01:ac:3e:16:4a:
                    d8:ab:70:fb:ff:5b:5f:88:a6:32:9a:7d:6d:f8:6a:
                    93:8d:1b:eb:17:a7:de:1a:50:14:e4:67:39:70:93:
                    c0:47:6d:07:8a:64:75:6a:c2:21:16:97:23:8b:51:
                    af:f7:02:4a:08:16:29:b4:32:f7:67:e4:01:0b:75:
                    a3:95:b8:18:1b:49:39:ca:21:a7:3f:69:1d:12:f2:
                    24:da:fd:1d:2b:e8:87:50:9c:0d:1c:2f:3b:a0:a2:
                    62:0f:ef:cf:79:63:8d:f1:70:ab:8a:50:4a:12:f4:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:54:37:EF:75:3A:F8:CB:3A:B7:EB:56:B4:C5:18:48:DA:39:29:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/b4999ad4-02be-3684-9d95-c830fea08356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:20:e2:7e:a3:63:67:05:54:43:74:ca:bb:3d:f5:aa:ef:b3:
         04:41:e5:a8:ca:82:66:0a:d9:c0:de:4b:2f:98:7b:e4:41:e3:
         0c:ac:94:7d:34:bd:d6:22:ba:94:63:15:47:81:75:48:41:7f:
         8b:f1:d4:c7:6e:9e:85:52:1e:5d:08:94:6a:bd:7a:cf:38:d7:
         9a:93:bd:18:ce:1d:96:b4:16:a7:ed:b3:e6:d9:51:aa:32:90:
         1e:30:52:67:1c:77:52:ba:a1:5b:43:ad:ce:0d:ba:dd:c9:82:
         22:c0:b4:7b:06:67:74:9d:19:76:6f:40:6d:04:cd:53:80:10:
         ac:24:7a:7d:85:ac:41:44:ac:fa:34:5f:d1:a4:8c:24:3c:68:
         b4:85:29:da:1f:39:0d:0b:bd:26:a3:f4:5f:24:58:a1:23:11:
         db:be:a8:64:ad:75:59:a7:ec:32:41:7c:4a:02:93:f1:b5:25:
         28:2d:2e:09:f3:9f:75:2d:49:b9:13:fd:41:36:b6:bf:b1:5f:
         54:ef:dc:d4:b1:d1:79:b6:14:da:31:7e:cc:65:37:75:e1:87:
         57:ea:fa:fd:e1:6f:fd:a4:0f:68:ca:65:cd:bf:71:46:28:8a:
         9a:9e:e0:24:53:51:04:43:8d:7a:d7:03:dd:31:3a:ac:b7:2a:
         24:44:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:56 2026 by rpki-client