Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa
File:                     16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa (raw, json)
Hash identifier:          jYv5ZacS57KWZsuHHb+PIkbNOcwoPLM1oMbXSJ1higk=
Subject key identifier:   53:4D:E4:98:8C:09:3A:05:60:57:8C:BF:BA:82:51:50:82:82:4E:50
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584EA79A34FDDAE01253BE4192A0
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2602:fcd8:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:34:fd:da:e0:12:53:be:41:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69841011-f510-4496-88fe-032bc7baaa26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:20:23:c1:ad:59:88:ea:da:4a:1f:bc:60:
                    66:71:9a:df:c2:b8:2e:2f:7b:a4:32:66:5d:3e:04:
                    a5:e4:2a:02:c5:83:79:23:9c:67:b1:6a:90:e0:e2:
                    52:fd:65:0c:37:2f:8b:26:3c:b9:bf:a9:d8:5f:ce:
                    c5:2b:37:7b:0b:77:1c:34:53:e1:d4:8c:9f:5f:67:
                    5d:b8:b5:d9:87:d2:38:16:72:7b:29:5b:98:ea:93:
                    59:2d:03:02:33:21:3a:b1:14:36:33:09:e8:3f:91:
                    c1:0d:dd:1d:3b:8b:6b:da:7c:6a:0f:e4:62:d1:d0:
                    7d:2d:f9:e5:5a:be:77:f5:68:49:83:2b:94:be:76:
                    34:df:1e:57:be:e2:85:c3:9e:af:05:cb:c3:3a:c6:
                    b3:7f:93:b0:02:1a:53:eb:fd:e0:68:3d:80:40:0e:
                    43:0b:2f:71:7d:15:05:f6:ae:e5:f4:99:3c:33:79:
                    7a:63:7b:47:7d:73:70:89:70:8c:b0:ab:39:df:b6:
                    de:16:74:0c:da:30:28:e4:f4:36:39:c9:b5:5d:a0:
                    a5:02:18:e3:72:c6:e0:a7:23:0b:9e:e6:10:38:58:
                    aa:d7:8c:cf:2d:93:91:78:20:33:95:ca:12:af:c5:
                    75:a4:d4:08:e1:70:7c:4f:92:79:e5:f1:93:44:6b:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:E4:98:8C:09:3A:05:60:57:8C:BF:BA:82:51:50:82:82:4E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:4f:1a:37:28:2f:32:17:c1:dc:30:7e:51:62:c7:2c:59:
         b8:14:8a:f8:17:a8:96:95:0d:3a:73:f0:2d:9d:4b:00:6b:ab:
         6c:ce:99:00:37:18:d9:9d:6f:bd:ad:4e:0b:40:83:54:ca:de:
         12:86:26:76:31:58:7c:5f:5a:64:da:b4:fa:d8:c6:fe:86:9e:
         72:6d:33:c1:14:ba:de:25:ab:55:eb:ba:f5:8e:3b:77:8a:6d:
         1f:b3:c8:3b:0c:3d:b9:b4:3d:96:31:80:59:5d:2a:36:06:6e:
         4a:25:5d:26:32:49:d6:00:b2:0e:3c:de:e4:c5:1a:07:96:ee:
         13:29:6b:3d:84:c7:8c:4e:4c:75:df:bc:cc:c6:18:3c:e3:1b:
         f9:cf:ac:d3:ce:49:72:9c:3c:74:22:fb:b9:ec:a7:27:5a:84:
         d2:8f:70:96:01:54:f3:37:c8:80:45:93:61:4d:1f:8c:3d:55:
         c4:a1:5f:d1:c8:e4:cd:4b:88:87:cf:0b:36:70:e4:54:07:f3:
         66:1d:f9:56:31:ba:d2:67:f9:b7:80:c7:17:7c:cc:22:48:04:
         00:46:f4:8e:d7:51:40:dc:6d:87:89:45:cf:7e:c6:8d:f5:9c:
         0f:3b:ba:01:b4:2b:0c:11:53:9a:02:8c:d9:17:17:37:7c:76:
         f7:fd:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:09:53 2026 by rpki-client