Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/bf871785-9653-31b5-bd26-956ac60af095.roa
File:                     bf871785-9653-31b5-bd26-956ac60af095.roa (raw, json)
Hash identifier:          Fa3YXHRwVM/nkupDvrBaeIYzc7YXOMEukydbqslWjqk=
Subject key identifier:   DE:50:08:00:D1:79:F8:29:AD:FD:A5:E5:50:32:28:10:68:CD:D5:B6
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584EA79346E21FBA9A6439B8C8C0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/bf871785-9653-31b5-bd26-956ac60af095.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     152598
IP address blocks:        2602:fd92:cc0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:46:e2:1f:ba:9a:64:39:b8:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f11cfeb1-d55c-4ac3-a149-6a657ca7dc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:d7:99:87:9a:c3:02:30:95:30:77:10:38:
                    49:43:55:12:ab:35:3d:10:07:6e:a5:10:cb:0b:dd:
                    4b:29:4f:54:51:32:29:fb:b1:f5:5e:4a:3e:5d:7f:
                    02:19:a9:30:c8:f6:53:f9:7e:85:e5:0d:1f:b9:ee:
                    5a:5d:82:b0:c7:54:19:42:17:bc:88:56:cd:9b:e9:
                    4a:ea:cf:a6:a8:79:83:7e:75:bb:9a:a3:f2:c7:49:
                    ff:43:d8:72:42:43:0d:e3:de:b9:fc:6a:57:fe:16:
                    44:9c:96:e1:05:f7:28:00:5f:2d:c2:40:bd:3e:3b:
                    9e:7d:c7:ff:1c:e1:c5:0b:85:0a:15:18:76:54:36:
                    e0:eb:0c:90:ad:04:36:62:c6:02:2a:80:3f:ab:64:
                    74:85:fc:a6:c6:d4:51:1f:a8:6a:cf:77:bf:ea:6e:
                    a2:4e:2e:5d:c8:98:b8:ab:7d:6f:f3:91:e7:91:0d:
                    4e:81:63:23:3b:e7:0f:f6:5c:fc:da:eb:18:33:d7:
                    46:b8:d1:ba:99:5b:93:4a:0f:32:0f:59:f4:e3:85:
                    80:c7:f9:26:19:3a:98:b2:74:9c:5e:60:10:cd:52:
                    00:99:64:4d:93:19:e4:f6:db:b1:85:77:65:97:c4:
                    46:fd:82:ad:51:29:52:b2:f7:de:d4:2b:75:db:32:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:50:08:00:D1:79:F8:29:AD:FD:A5:E5:50:32:28:10:68:CD:D5:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/bf871785-9653-31b5-bd26-956ac60af095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:46:97:70:c7:0d:ab:cd:ca:93:2f:57:95:18:c9:ca:42:
         97:6c:e2:d7:86:03:56:c5:72:f1:b0:95:fe:13:85:9e:70:92:
         e7:1b:64:2b:e0:56:06:e2:06:3c:07:2e:90:90:b1:31:14:fc:
         b1:a8:31:12:22:73:a5:f1:7f:ce:8a:43:fa:76:cf:bd:45:e4:
         6f:71:b7:b4:26:eb:d8:d9:9a:d3:fe:b8:0e:2e:59:fd:15:1d:
         74:95:1a:90:9d:7f:80:fa:57:ad:40:c5:84:fa:92:0b:c5:e4:
         52:5f:87:f0:27:09:b8:cb:8c:0b:67:ee:4e:82:43:eb:61:84:
         14:50:c2:05:02:ec:b5:6a:86:d2:01:98:d0:1b:1d:5e:09:d8:
         d4:03:6f:53:0b:08:2c:8e:04:aa:df:70:a6:9e:16:97:c7:84:
         7a:e4:a0:12:3a:d2:28:46:7f:8c:d1:44:65:ce:80:7e:c9:4e:
         33:77:61:d2:61:d6:d2:7e:f1:59:d1:bb:46:ee:88:e4:a8:f1:
         27:ed:2b:89:8b:ee:08:80:f8:c7:13:cc:24:f4:a9:99:22:48:
         2c:67:91:02:81:66:78:ac:f1:99:c1:fe:22:a5:d9:d6:99:c2:
         84:5f:37:4b:cd:45:aa:d1:9d:7d:3f:c5:ce:2a:17:4a:36:77:
         40:12:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:37:25 2026 by rpki-client