Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
File:                     8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa (raw, json)
Hash identifier:          GwfugpwqM5hYVoogqh909MT91jK2Mds8aiLzJwgtmac=
Subject key identifier:   8D:37:79:DA:47:D6:3D:AA:04:3A:5F:F7:26:1E:E5:77:DF:02:EB:54
Certificate issuer:       /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial:       010D0C9F4328584EA78896579389DB269C7188D0
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2602:f957:a00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:96:57:93:89:db:26:9c:71:88:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=be97c595-d989-4ebb-ba3d-f41446e35685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:a1:09:fa:c2:71:a9:cc:26:bd:d5:24:f1:
                    8b:a6:d4:04:b0:ff:80:ac:d4:bd:72:fd:09:0d:f0:
                    cc:09:8e:35:2c:e8:7a:91:82:22:57:6c:2c:ab:28:
                    88:39:21:ab:49:5f:f6:5b:55:d2:02:fd:d2:81:23:
                    7d:d4:28:5a:89:71:43:07:30:2d:ed:e6:25:51:7e:
                    ef:4a:58:34:da:0a:de:33:67:59:3d:a8:9a:ee:e9:
                    23:03:24:c4:2b:a4:e1:c7:22:94:60:dc:43:80:af:
                    a5:3b:ce:eb:2f:f6:8b:1c:7d:54:b8:37:1e:38:45:
                    9a:6d:af:3f:a6:f7:f3:a9:30:ab:50:a0:6c:ce:fe:
                    f0:a6:ca:52:3e:56:2f:42:6c:7b:f5:c8:ca:39:f3:
                    62:42:c7:e1:5b:96:43:57:24:33:c8:80:31:70:e8:
                    97:d4:1d:82:b9:92:1e:f0:d0:73:a3:0b:32:f3:43:
                    6e:cc:38:53:5a:da:8f:1f:ab:cb:d2:e1:61:07:76:
                    96:b6:90:9c:50:21:ea:f1:94:ec:64:3f:37:60:cd:
                    ea:16:8f:2e:63:8d:f5:6f:2d:ac:47:1b:6a:ab:31:
                    c0:76:8c:0e:6d:14:24:d2:2d:00:38:12:97:38:a7:
                    bc:30:b1:11:0c:44:9f:e8:ed:d5:93:d8:80:9a:1b:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:79:DA:47:D6:3D:AA:04:3A:5F:F7:26:1E:E5:77:DF:02:EB:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl

            X509v3 Authority Key Identifier:
                keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:bf:cc:6f:7f:01:47:0e:b0:a3:ef:36:5a:af:fd:69:4e:
         60:5f:d5:9e:82:c2:91:75:f4:e2:38:2c:e8:7e:54:02:ff:1b:
         54:6a:65:26:ad:02:da:2b:78:e8:99:a9:e6:3d:33:e5:2f:3b:
         12:d3:04:16:e7:71:37:7e:90:d2:59:68:34:e5:23:78:2b:bb:
         bf:f0:ae:5a:5b:b8:dc:64:3e:3f:30:80:ac:2f:9c:7a:4b:82:
         b8:b9:07:ea:72:1c:c3:a8:6e:0c:8c:72:6f:e2:dc:02:8e:a9:
         2e:a0:e0:99:9e:32:66:00:49:87:16:6c:15:a9:f3:69:2f:d8:
         14:f8:40:7b:cf:c2:d4:14:3c:b1:cd:f6:02:4d:12:0a:33:1c:
         f7:54:81:30:e9:c0:55:29:b4:ea:4e:a1:27:11:16:df:a6:35:
         56:dd:dd:6d:ed:2a:45:8f:df:eb:f7:c1:e9:b6:39:23:33:cf:
         e3:38:0e:69:46:04:d3:d8:a7:2a:86:5a:9a:3e:80:20:a4:c1:
         87:21:cf:84:ad:29:32:83:ec:4c:98:78:18:55:3b:2c:ab:24:
         a4:f5:4c:bc:af:e5:a1:db:3c:29:e9:a9:bc:98:3c:55:a5:8c:
         45:34:cd:a8:1a:84:0d:5a:f6:86:9f:73:4c:8a:a7:92:f5:10:
         ef:02:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:42 2026 by rpki-client