Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa
File:                     ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa (raw, json)
Hash identifier:          mgttC5FmYnQPtwSPTwySd8ZAXtuYWC0PXAx8YtWt83w=
Subject key identifier:   8C:6A:3E:29:F8:83:76:74:57:9F:C1:53:D3:3F:5F:B8:3E:32:78:60
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584E9BE51B07CD09CB76FA0DB700
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     399122
IP address blocks:        2602:fcd5:38::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1b:07:cd:09:cb:76:fa:0d:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=737fadc9-23a9-45e2-94f5-17136ca1386e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:a4:fd:7a:0c:48:be:ff:d8:f9:f5:12:85:
                    56:e9:f6:53:be:4c:96:dc:d2:07:e9:6d:51:bd:32:
                    49:d2:a4:ae:b6:77:17:9f:f9:e0:24:2c:ca:d0:e6:
                    85:f9:5c:0d:f1:23:af:ee:21:9d:22:54:63:69:1d:
                    8c:09:a2:2d:6c:a9:96:74:24:bc:0f:e0:63:cc:f3:
                    6a:cb:29:71:ff:14:e1:35:53:b6:4f:84:4c:0d:6b:
                    9d:91:14:5f:0b:af:86:9e:4d:48:ad:58:fe:9c:91:
                    11:68:38:27:72:40:47:3c:83:42:25:db:94:05:15:
                    7a:b0:87:72:5b:da:57:7b:2b:f1:53:80:1f:54:d8:
                    38:3b:79:11:83:4d:8c:dc:b3:94:50:1e:de:60:5f:
                    e9:17:95:e2:da:56:30:7e:f8:76:e7:69:61:e7:18:
                    3c:d5:8b:92:4a:2d:01:10:a4:0e:23:b7:f6:5b:33:
                    f9:e6:d9:e7:ea:82:df:ab:38:79:91:da:d3:02:da:
                    52:a7:01:b6:3b:6b:ae:02:6b:5e:37:1d:a8:b0:70:
                    0a:30:82:71:82:18:0e:10:ee:18:a7:cb:7b:ac:a6:
                    69:6f:af:61:7a:26:66:0a:25:7d:72:22:9c:74:08:
                    be:8a:0f:5e:a4:98:1f:39:f2:f7:6b:e3:69:f9:bd:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:3E:29:F8:83:76:74:57:9F:C1:53:D3:3F:5F:B8:3E:32:78:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/ce9c78fd-fbbb-3bdd-b97d-ef6a2e85f3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:38::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:11:ef:78:8d:1c:73:e2:78:2f:7f:ea:2a:b1:63:aa:0e:
         f4:38:20:68:33:5f:14:89:84:b4:0b:3f:46:4c:83:0c:e4:de:
         2f:e2:4f:cd:c7:ad:e3:44:ca:cb:5c:f8:3d:f5:95:eb:3c:9f:
         4a:8a:56:36:9c:fa:ee:d3:27:80:71:6f:06:ba:b8:e6:bf:ad:
         b1:29:90:1a:63:b6:35:be:0d:75:cb:56:0f:13:9b:96:15:f5:
         08:13:22:d8:48:e2:71:9e:79:21:c5:ea:28:23:7b:2b:8a:9c:
         21:87:83:57:1a:a5:c2:41:66:18:51:de:7a:25:d3:af:12:f2:
         37:df:e1:0b:fe:cf:2b:2b:cf:7b:cf:0a:43:0f:01:3e:6d:3f:
         e1:39:bc:46:c0:8e:1f:04:e3:a4:8b:9a:1e:c1:dc:ab:36:02:
         72:5a:52:32:e2:fe:7c:44:ed:91:98:fe:6b:71:17:99:f6:25:
         a7:18:16:45:18:be:15:94:d8:2a:64:cd:5c:b3:f5:bd:89:00:
         12:d8:ed:c1:89:63:11:06:60:8c:9f:3b:ec:5d:1f:fe:d6:0b:
         c2:b8:35:78:7a:bd:6e:0b:06:0f:ba:b0:28:22:86:21:64:3e:
         a6:83:9c:e3:39:28:68:cb:9e:85:7d:02:5b:c8:f2:35:56:de:
         83:b2:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:36 2026 by rpki-client