Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
File:                     8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa (raw, json)
Hash identifier:          Vd7ETzR2p8GME6kzFQMg6f+kac5/7c6vaKKQGUHqfAE=
Subject key identifier:   02:20:6C:67:BC:1E:4C:CE:D5:C2:11:90:60:FF:30:3B:33:E4:87:27
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584E0D8429A20FB7B1208CF92880
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     401012
IP address blocks:        2602:f956:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:29:a2:0f:b7:b1:20:8c:f9:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=b364b40f-098b-424b-93f7-ce498d2001a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:e9:3c:99:91:93:23:50:51:48:4b:ee:9e:
                    25:68:ee:3a:61:ac:74:8b:21:08:04:f7:7c:b3:da:
                    64:f2:38:5d:48:dc:7b:b5:1e:e7:b9:95:a0:c9:b8:
                    50:32:59:58:54:9c:8e:02:1e:5a:9d:a8:26:94:ac:
                    9c:52:f3:92:f5:6d:8d:18:10:79:b0:50:d4:f9:2a:
                    12:c9:5b:24:45:50:0b:e9:73:b4:7b:56:4d:9e:e8:
                    7b:4e:89:b9:0e:db:e3:9a:5b:51:11:64:3f:ed:54:
                    aa:2e:69:f9:6e:84:15:32:a4:04:73:d3:89:52:53:
                    99:e0:c6:20:6f:04:9e:90:dc:dc:79:72:40:1a:a6:
                    d0:21:dd:c9:e4:9f:c2:fc:35:da:97:9e:d8:83:48:
                    70:39:f6:6e:0a:4e:d6:f7:14:e0:a4:a0:df:7d:3c:
                    d7:f0:87:06:27:f4:c9:ff:24:78:c3:5d:c9:7f:05:
                    65:59:5c:58:2a:be:4a:d7:5b:21:95:9b:11:13:bb:
                    16:c2:dd:95:71:7c:47:e4:ea:58:75:de:c7:30:2a:
                    42:ed:0a:91:33:ac:70:90:26:bb:f4:7a:86:cf:b2:
                    8a:1d:3f:a9:7d:29:55:0f:0c:90:db:b5:e2:db:2c:
                    d3:46:50:89:d4:fa:a4:8e:5c:94:2e:4f:97:08:79:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:6C:67:BC:1E:4C:CE:D5:C2:11:90:60:FF:30:3B:33:E4:87:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/8eeb1ea2-7d67-30c8-ba9f-b9591546a0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:f9:ee:c2:5d:6f:24:07:ce:44:a8:86:9a:1b:c7:54:49:
         09:db:4c:cc:55:01:86:75:50:31:08:d4:92:11:4d:b2:85:ea:
         c2:43:17:14:36:54:18:f4:1b:df:31:58:7b:17:9b:a3:2b:a5:
         d3:50:9e:eb:4d:fa:a0:1c:2b:c4:52:40:81:9f:9c:b8:d5:b1:
         44:90:7c:75:18:32:29:6a:ef:b8:a0:e4:46:00:97:30:f2:9c:
         b8:4a:f1:5a:a6:d7:33:2e:da:5d:76:74:1c:d1:89:c8:8c:3f:
         a0:95:6c:df:a9:7e:36:fa:1b:7c:07:b9:1d:60:71:45:63:b5:
         c2:f7:7d:ed:5c:5f:b1:94:e5:63:07:0e:d5:31:89:89:a7:44:
         0f:68:58:9b:3c:58:30:7d:7e:8a:28:35:56:37:62:1f:bb:af:
         02:c0:63:43:99:0d:e5:7e:ae:fd:81:02:a3:b3:6f:4b:81:8a:
         27:ef:7f:45:21:63:ee:d9:43:7d:4d:ea:a5:b6:08:1f:34:fb:
         29:31:d5:f9:fd:04:dd:9c:95:ee:8e:85:c1:f9:f6:b3:2f:81:
         2b:3c:25:51:b3:a8:75:7d:9d:cd:bd:0c:9a:07:d2:11:c2:75:
         fb:93:fd:4c:7f:95:84:30:46:59:3b:7e:6c:91:ae:e7:dd:05:
         db:96:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:59 2026 by rpki-client