Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/126e1e98-1f54-3cd4-8d82-633f8b6d0374.roa
File:                     126e1e98-1f54-3cd4-8d82-633f8b6d0374.roa (raw, json)
Hash identifier:          vgW5Ewc6bhk0QLkXH0TY+KMOh4kgkvVQmlIecN+oxd8=
Subject key identifier:   9B:DF:93:CD:27:B3:C5:68:29:B0:0E:DE:F1:B9:E4:01:C4:FC:69:40
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F4328584E296F0AE0750AA03AB8215700
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/126e1e98-1f54-3cd4-8d82-633f8b6d0374.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     400013
IP address blocks:        2602:80c:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0a:e0:75:0a:a0:3a:b8:21:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=3fe4c884-0ba1-480c-ba9a-761f9caa5e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:06:95:1f:aa:32:5f:ab:85:2c:9d:59:85:
                    60:cd:3e:26:42:aa:90:4e:cb:4d:66:f5:62:4c:57:
                    64:7b:fd:ca:f7:d4:80:9b:75:6c:57:8f:14:94:47:
                    3b:05:b9:e6:c6:84:48:17:1c:39:c8:a2:45:97:28:
                    f9:ce:c5:d3:98:87:a2:6f:ae:5d:d9:4b:79:e8:99:
                    13:e3:76:de:7e:0d:08:d6:61:8a:8b:1c:c9:d5:9e:
                    77:ad:7f:94:30:c2:86:a0:84:69:0e:60:50:4c:28:
                    96:8d:01:c0:1f:10:40:47:7f:7d:c9:8e:90:99:b7:
                    cb:58:f6:2f:1a:8f:27:bd:e9:41:d1:e9:9b:1e:6e:
                    bd:4b:8a:8a:27:24:43:e5:0f:47:ad:ef:95:04:cd:
                    f9:2b:80:b0:cd:0e:aa:d4:3f:b0:c1:93:2d:cd:b1:
                    eb:7e:94:84:fe:a3:46:c0:64:bc:56:b8:d7:8d:00:
                    e0:a7:f3:eb:23:80:a3:fd:f3:d3:97:e1:58:5a:4f:
                    e9:f9:95:ce:16:8a:68:39:7f:96:dc:db:ee:f8:0f:
                    28:f6:9e:84:4f:f2:db:d8:bf:1d:b0:f5:ba:b7:c2:
                    82:50:13:32:1f:62:18:f7:51:f8:f4:f4:81:89:1c:
                    2c:96:71:49:29:b9:7a:34:df:63:ba:e9:60:e7:ff:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:93:CD:27:B3:C5:68:29:B0:0E:DE:F1:B9:E4:01:C4:FC:69:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/126e1e98-1f54-3cd4-8d82-633f8b6d0374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:9a:8a:62:38:b3:b2:8f:21:b9:ea:e0:85:26:6b:e2:bc:
         90:21:e9:63:0e:40:e7:a5:e3:5e:ae:a5:99:e2:aa:db:75:b6:
         95:33:95:67:4f:90:f2:63:8b:d3:63:4a:09:41:a1:a7:ef:8e:
         dd:22:0d:53:d5:a7:00:8e:e7:e4:ed:e3:90:00:f3:75:08:88:
         36:73:80:33:6c:fd:bf:72:72:16:0b:c1:89:b9:1f:76:d4:23:
         80:fe:65:a4:dc:cb:ef:33:a6:d3:6e:da:36:55:fe:d7:13:c9:
         4b:d9:9a:22:2b:9b:3c:32:64:06:ff:04:a7:3d:af:39:35:c7:
         66:ed:8e:be:3a:9a:34:ce:af:a0:e1:40:6e:6f:95:1a:5d:e7:
         e6:47:c8:47:ba:81:26:96:dc:7a:65:64:23:4b:1b:be:c1:c7:
         35:1a:8c:5e:42:a0:bf:14:f4:d8:45:b1:d1:9e:b1:e2:c8:68:
         cd:d3:29:d2:c2:91:36:d2:3b:b1:85:83:10:8c:74:3a:96:bc:
         58:d7:2e:8c:92:e1:3c:98:67:a1:9f:50:fa:e6:66:a7:54:f7:
         a0:41:bd:2a:32:8e:b3:6d:5f:45:b5:44:ea:95:1c:03:ab:e9:
         f0:e2:55:d1:e8:51:99:fb:88:9a:3c:d3:47:29:cd:2f:e5:c3:
         29:7a:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:56 2026 by rpki-client