Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa
File:                     8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa (raw, json)
Hash identifier:          5Uwpac1PlPdAFHkXHBEf8uhV27nO7y6y6zSfwApTWmY=
Subject key identifier:   D9:AC:5D:89:53:18:6A:2D:F9:0C:84:70:40:B6:1B:03:F0:86:A5:0F
Certificate issuer:       /CN=68de9da0-8f7e-4231-9340-c37abafc3714
Certificate serial:       010D0C9F4328584E1FA9A6ED01DDA4E93CE53980
Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     1030
IP address blocks:        2602:f9cb::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a6:ed:01:dd:a4:e9:3c:e5:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=257b26cd-3506-4489-b841-42e02b2da175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:08:a5:9f:07:79:25:b9:1e:be:5e:b6:dc:
                    3e:b2:1d:6b:41:04:4d:ca:6b:fb:42:4b:54:fc:dd:
                    ee:37:06:3e:9a:ed:46:4e:8f:5e:71:11:bd:8d:a1:
                    3a:00:d1:06:98:7a:1b:c9:3f:02:86:c3:57:cb:57:
                    ea:d3:5b:7c:63:ad:30:7c:29:ac:75:d2:f4:33:3e:
                    28:d3:9e:a1:b8:00:f4:1e:71:2e:ee:0c:45:e0:42:
                    a6:a6:2e:1b:bf:12:6d:d5:8f:17:1d:75:6f:2c:87:
                    ff:70:0c:d3:70:a1:79:7c:e1:a9:0c:1a:eb:6d:de:
                    57:c2:86:70:f6:fe:b4:a5:c4:c3:ce:ec:b8:71:b4:
                    86:e7:ab:4c:84:7f:36:f2:71:90:70:2c:5c:8c:96:
                    25:af:e4:ba:f3:d6:a8:4a:01:4e:18:c3:ff:4a:6e:
                    ac:0f:74:72:9a:87:80:5d:b7:73:8c:00:dd:a4:9a:
                    28:5a:d0:91:9e:fa:ee:e6:ed:29:42:2e:9c:22:77:
                    ad:8f:71:ba:99:77:cd:1d:59:a9:21:86:11:9b:32:
                    ff:f8:b3:eb:d5:bc:cc:d3:22:f9:d4:d0:40:a3:23:
                    b7:5f:23:66:e9:44:de:62:33:0e:4c:0f:0e:4b:9e:
                    07:0f:ce:bd:93:c3:f6:ad:77:ab:f4:5b:40:80:e8:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AC:5D:89:53:18:6A:2D:F9:0C:84:70:40:B6:1B:03:F0:86:A5:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl

            X509v3 Authority Key Identifier:
                keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:55:f3:cc:0f:fd:2b:90:af:ee:4c:c0:d3:4d:12:fb:3b:4e:
         9e:f5:01:fd:9f:73:7c:ab:bd:ab:b4:6b:7a:c1:07:0e:0a:4b:
         d1:9c:96:0c:8b:c9:eb:11:0c:ad:31:77:b6:73:72:fe:6b:90:
         90:41:8a:94:15:c1:1e:31:f4:6e:39:a8:a7:36:19:32:1c:1f:
         a0:33:6e:2a:0f:5c:4c:ad:f4:38:7e:55:3b:28:8a:2b:70:ef:
         bc:ac:99:de:12:8b:eb:17:6d:3e:91:d2:80:f4:ee:98:69:31:
         28:0a:c0:d5:16:ff:b3:e7:02:60:83:67:2e:5b:10:22:0f:49:
         70:f8:a1:a0:d7:c3:9b:59:77:6e:65:0d:cb:c8:32:c6:6c:c9:
         67:56:f3:19:cc:87:a8:fb:e0:3e:f2:e1:2d:b2:4d:23:27:57:
         33:50:e3:bf:ef:1c:40:f1:dc:e9:6f:52:51:4b:74:59:fb:00:
         7a:93:3e:79:97:06:c0:9a:12:66:1e:97:50:bb:25:0f:b3:8f:
         05:8e:d9:22:28:4c:1c:5a:fc:f9:73:a3:a7:e5:bf:b6:61:95:
         71:70:a3:7b:54:e5:d7:90:81:db:57:7c:b1:b2:37:7c:c0:10:
         8a:b4:6e:c2:05:1e:f2:1c:dd:d8:68:ff:bb:1f:7c:0c:ba:6b:
         34:8e:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:27:55 2026 by rpki-client