Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa
File:                     428d2931-231b-33af-9119-4138e16c38af.roa (raw, json)
Hash identifier:          roC/vyHrbRYIQQH9YjgniOVnHI4+X5qbpPPtggvwWjU=
Subject key identifier:   DA:03:F1:D1:C3:6E:59:CD:4B:71:A7:29:22:CD:DB:8E:6D:34:23:B4
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584EA7946F09B1110D2CCDF26280
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399883
IP address blocks:        2602:fc06:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:6f:09:b1:11:0d:2c:cd:f2:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b0e92d1d-b606-4590-9d37-826111246c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:2d:8e:1c:db:85:71:1e:52:74:38:64:30:
                    cf:79:0c:4a:b0:b9:4c:57:b8:0b:4b:fc:85:8b:16:
                    10:e1:47:d2:09:ce:d2:bc:38:fe:ec:d5:66:f1:08:
                    d6:d4:2c:e2:73:03:99:9b:b8:aa:45:ef:7f:48:11:
                    4f:8f:96:26:72:31:8e:5c:0a:d4:62:46:e6:62:ba:
                    cb:bf:50:4c:19:ad:77:b8:70:22:d3:ee:f2:22:f6:
                    6b:a5:d9:15:ba:4e:02:b7:ef:3a:d1:8c:c7:dc:c4:
                    47:a5:f3:e0:4a:f9:9b:8d:d2:bf:e3:41:fb:89:13:
                    71:a8:4d:f4:6f:6e:5c:b5:43:d6:28:34:91:89:ba:
                    b7:8f:3f:13:0a:65:71:c1:93:e1:7b:c4:3e:5b:e3:
                    77:ec:c8:b5:88:f2:fa:a0:64:f1:88:32:44:92:c3:
                    f6:a1:f4:40:c2:27:06:32:3a:05:0f:be:d5:24:21:
                    b5:92:3a:f3:8f:97:d9:f4:61:6a:9d:6c:85:74:5c:
                    41:cf:61:55:16:8d:c0:f6:fe:71:99:7a:38:70:1b:
                    54:51:59:17:53:34:8c:00:ee:27:70:38:f0:b8:7d:
                    87:e2:a8:40:77:91:25:85:f5:c4:76:00:69:74:85:
                    0e:84:9e:46:2f:fe:e7:0a:1a:7e:19:d8:96:ca:13:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:03:F1:D1:C3:6E:59:CD:4B:71:A7:29:22:CD:DB:8E:6D:34:23:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:eb:71:2f:0f:03:38:4f:f4:e1:f6:f8:51:fb:d6:29:de:
         e8:a7:9e:f0:62:33:97:fd:a6:f1:ae:3f:c2:2c:59:b0:a1:4c:
         3b:50:5c:fc:be:6e:2e:39:56:cc:cf:ae:1c:bc:43:db:0e:bb:
         5e:39:89:ed:15:b5:7c:38:c6:5e:ee:cc:ab:1a:4f:ba:45:50:
         71:73:26:95:51:4c:19:d1:32:cb:69:b5:09:bf:53:78:09:de:
         de:4a:ad:f8:43:c2:e8:e0:b5:af:6a:8b:3e:0c:c4:8b:4c:37:
         a9:79:b2:18:1b:f3:bf:71:c3:fa:08:67:f4:52:ee:0b:fa:49:
         9a:ab:17:f5:8b:2d:2a:69:4c:1f:16:ce:a0:d1:40:3c:63:c6:
         89:6f:49:71:cf:15:7c:e2:3e:66:02:fa:f8:ce:4e:36:e3:3d:
         9c:31:61:f7:93:1f:51:64:95:35:e4:ff:1e:e0:2c:90:60:c2:
         4c:aa:6d:71:de:76:cb:37:a2:ac:d6:a5:e0:85:fc:f9:f9:ca:
         3e:2f:dd:f1:19:f0:84:7e:78:6a:53:5a:77:c6:ee:bc:2e:00:
         56:94:67:a7:c3:5d:68:ed:f6:f8:c1:27:77:fa:62:12:8c:f0:
         50:1c:09:e7:16:d8:38:5a:a3:8b:dc:c7:14:8f:90:0e:4f:41:
         3e:c4:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:01 2026 by rpki-client