Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
File:                     3c7bdba5-8362-330b-97ea-a2d35f272c00.roa (raw, json)
Hash identifier:          sDZboovOUrt10iNupfHy3NXTWoLUBZaI20OeWKI7nh0=
Subject key identifier:   6F:03:82:F9:CC:0F:2D:2A:D4:1A:70:75:2B:7B:C0:7F:35:E6:F8:65
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584EA798D411AF1534FC22B16580
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26768
IP address blocks:        2602:2a4:9d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d4:11:af:15:34:fc:22:b1:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=66a2c9b6-2508-49c4-9e9c-464456529ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:2d:a4:90:10:17:2e:0a:34:39:fb:83:e2:
                    00:8c:c5:69:b8:bb:85:60:23:14:be:37:de:23:a3:
                    1d:ee:36:16:e3:b5:29:b0:b4:81:22:d0:da:52:1e:
                    f9:8c:ca:55:b2:f3:a3:8d:c5:2a:7d:7b:67:d7:4d:
                    80:e0:5b:77:23:00:25:59:b9:c4:a5:38:f9:d4:48:
                    7f:60:9c:d1:87:eb:89:20:48:6c:70:85:19:f5:e7:
                    75:48:52:b2:ea:3d:63:3e:77:0f:e7:0f:42:ed:27:
                    51:06:dd:59:92:06:4b:87:cd:58:62:eb:4d:82:fc:
                    3c:4d:c1:68:dc:c1:66:9f:06:9f:9f:81:19:9b:41:
                    76:c0:0f:8d:51:21:26:81:ba:ad:a1:e7:44:15:b8:
                    67:29:57:ef:1b:c0:9e:b1:7c:61:a9:69:66:fe:76:
                    0e:c7:0a:14:ae:59:d0:af:16:43:3b:1e:ec:87:d1:
                    36:a9:46:a4:65:cd:1f:79:a0:ea:37:5c:21:06:0e:
                    f0:b2:1b:cb:52:51:3d:0e:c4:cf:05:aa:15:0b:b0:
                    54:58:1e:53:bd:cd:19:9b:12:1d:d9:f6:ef:22:0a:
                    f2:11:2a:3b:99:24:f2:4d:59:bf:47:42:cd:e4:ac:
                    25:a9:a8:c6:79:74:ec:be:b0:e7:0f:38:a9:e7:2d:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:03:82:F9:CC:0F:2D:2A:D4:1A:70:75:2B:7B:C0:7F:35:E6:F8:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:2a:f9:f5:c9:d4:ce:a9:17:ad:26:e1:31:02:11:66:81:
         c0:8f:43:8d:8d:45:0b:52:94:bb:05:6e:b1:d2:61:70:1f:58:
         25:ea:8e:ee:11:d4:dc:ae:48:78:75:6d:3e:57:34:6b:6e:f9:
         35:76:26:35:66:03:01:5f:0c:a0:a0:8e:25:ac:8e:0b:d6:5b:
         84:49:86:94:16:93:d9:b1:38:7f:04:64:3f:50:c3:da:8a:40:
         99:ab:2f:be:21:82:67:94:08:22:86:39:1c:b2:a3:a1:a4:23:
         fe:ec:57:0a:d8:0f:c8:87:24:b0:be:3a:a7:84:9a:6f:ed:fe:
         b7:8a:e6:85:33:c3:7a:40:96:a0:7c:d7:34:19:18:7d:cb:64:
         05:9b:b8:6c:29:06:e5:98:df:a1:bf:fb:c6:67:d3:92:cc:f3:
         df:47:4a:ce:00:38:33:18:8f:00:c2:0e:6a:a2:b7:49:14:23:
         8d:72:d5:24:61:1a:af:dd:24:d2:07:df:45:b4:05:c0:76:0f:
         14:47:e1:37:d5:32:87:a5:df:ab:fa:6d:30:83:38:e2:c0:ad:
         21:01:9f:4c:32:a1:92:3b:d0:b4:76:75:42:a8:d5:8b:9a:10:
         fc:8d:81:0f:86:7e:34:33:f8:3f:f0:b2:6c:1a:49:ae:85:20:
         cb:04:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:53 2026 by rpki-client