Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/aef94748-7b48-37ec-8326-7a31f7a87ab7.roa
File:                     aef94748-7b48-37ec-8326-7a31f7a87ab7.roa (raw, json)
Hash identifier:          XV6RzRmKdA28kz6x7aMKqQuWG+i4ywW4s/eHoVTuq+k=
Subject key identifier:   B2:E9:6A:6F:F1:EA:CC:7B:A8:C1:AE:80:1E:3D:79:65:3E:C2:E9:16
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584EA788785581BD7A7E07964B00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/aef94748-7b48-37ec-8326-7a31f7a87ab7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     207939
IP address blocks:        2602:fd92:ce0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:78:55:81:bd:7a:7e:07:96:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c7969a7c-eaae-4aae-b75c-5d96873e4602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:ac:ab:d9:0b:68:bd:d9:9f:d5:be:97:ab:
                    a5:2b:42:fb:8d:16:77:c0:a4:7e:b7:5d:c0:c1:da:
                    af:d2:5b:4e:36:76:9b:d4:a7:50:b7:b9:e9:6b:57:
                    81:4d:2e:2d:73:5c:56:e8:a8:59:44:07:38:9c:5f:
                    4c:83:c8:85:7f:c5:77:78:6d:11:db:9c:94:6f:9a:
                    2d:da:9c:1d:9e:ff:cf:4a:e0:9b:65:44:78:82:13:
                    16:56:97:67:ce:6a:ec:8d:f4:b3:0e:0b:5e:89:5e:
                    aa:af:e4:fe:d3:85:88:b7:f4:40:57:24:72:c8:14:
                    76:6c:17:c9:47:33:48:2e:56:67:5c:1a:fe:7a:ea:
                    66:fc:a2:25:4d:14:79:17:c8:f8:86:15:3d:56:6f:
                    f8:28:4a:07:78:96:08:e3:38:af:04:47:79:c4:32:
                    65:ea:80:7d:4a:a6:89:12:7c:ac:85:f1:eb:07:8a:
                    17:31:44:10:e3:ac:7c:4f:7c:c5:07:7e:b2:8e:85:
                    72:a7:81:77:59:c3:b3:d1:11:9f:b9:3e:78:42:0d:
                    69:46:d0:2e:6d:d3:cf:27:3b:ae:07:06:ec:e2:ea:
                    ed:02:9a:45:b1:e9:7f:7e:c3:7f:6a:c6:3a:32:d0:
                    35:3e:b6:ca:d5:ee:b4:3c:8c:53:51:ee:fe:e8:5d:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:6A:6F:F1:EA:CC:7B:A8:C1:AE:80:1E:3D:79:65:3E:C2:E9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/aef94748-7b48-37ec-8326-7a31f7a87ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:ce0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:d9:e8:ef:00:55:1b:03:10:49:a9:73:f5:4b:d6:9c:0c:
         fd:67:f2:a2:74:d5:30:e8:fe:bb:8f:e9:b1:d7:c8:3c:03:b0:
         e0:fd:6b:35:8d:52:62:96:c4:a6:e9:70:9e:bd:5e:06:3f:4e:
         7c:27:c0:ac:4b:d5:6b:74:21:56:27:8a:c1:95:1b:39:be:44:
         7a:55:de:4e:90:44:e8:aa:30:9c:9e:57:c4:7c:ef:6e:77:c9:
         22:4e:3d:55:07:bf:47:97:46:c6:99:df:4e:ed:c7:a8:5e:b6:
         42:fb:db:ef:4f:5a:f9:89:50:92:64:cf:60:1e:6a:2c:cb:67:
         86:aa:1c:d9:29:a6:62:d0:b2:d2:42:c8:bc:4b:41:7c:5e:c7:
         87:54:13:ea:ca:58:2e:e3:93:0c:91:c9:3d:a5:87:a4:c4:81:
         22:93:61:d2:0e:fd:04:cf:bb:ce:ef:4d:cd:be:f3:6d:bc:db:
         52:34:bb:6e:6e:d5:1d:98:0f:af:36:8c:12:5e:4d:8c:fd:74:
         22:4a:c2:eb:13:e4:c5:69:e9:a4:21:a0:f0:9f:ec:0f:e1:61:
         17:e5:7a:13:cb:bf:8b:a9:82:b1:45:85:a7:37:c1:4b:f8:50:
         e5:40:79:3d:69:fc:d3:9c:bc:26:d4:d4:8d:08:5a:a3:b3:7e:
         46:fa:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:56 2026 by rpki-client