Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa
File:                     678b3993-91f5-38e4-8904-da250d8e607d.roa (raw, json)
Hash identifier:          FgENWoDGtufQIl+eQ7ke1jT3nGmYKsWeiSasz6qIynk=
Subject key identifier:   01:52:D2:51:98:74:78:1E:0E:CE:A1:2C:92:1B:B6:CE:19:79:F5:B3
Certificate issuer:       /CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f
Certificate serial:       010D0C9F4328584DEB160038FB2BCF814B1F7600
Authority key identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     46170
IP address blocks:        2602:f70c:66::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:16:00:38:fb:2b:cf:81:4b:1f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=84004280-6778-4213-9cf9-dcd9b22df31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:c4:dd:22:62:15:ad:90:20:eb:25:d1:bf:
                    6b:4c:b2:c2:9d:60:d6:99:65:4e:23:e2:75:ea:05:
                    ba:20:fc:97:4e:10:79:e3:b4:2a:ca:ab:30:59:e9:
                    f8:21:a5:a1:67:9b:2f:a7:e0:36:ae:83:2e:e3:5a:
                    53:88:b2:26:d4:11:44:2f:4d:49:d5:88:73:c7:00:
                    0c:65:5f:f3:d2:49:c2:57:72:0d:a5:63:00:c4:4e:
                    83:c8:1f:c7:00:0b:91:97:5f:40:7f:10:34:8c:47:
                    11:06:0f:dd:c0:e9:a5:71:4f:9d:0f:25:5c:c3:16:
                    2e:60:28:7a:2e:72:52:fa:88:94:4b:47:4d:13:3c:
                    cc:69:a6:2f:0a:38:9f:65:db:a0:ac:14:ac:5a:ee:
                    f1:a3:fb:72:24:d3:25:f5:3e:8b:ca:15:8e:ad:4e:
                    30:9d:23:8a:a6:ad:0c:50:d5:7f:3d:82:3b:67:cd:
                    a5:3b:ea:f3:b4:ba:fd:9e:b8:7e:81:03:e2:96:eb:
                    dd:fd:fa:52:1e:5a:b4:dc:0a:86:d7:d5:2c:bf:29:
                    42:54:e2:60:63:d5:e1:17:cf:e0:e6:3c:6b:d2:01:
                    00:8b:71:e3:c7:38:40:72:dc:56:d8:fd:f5:2c:90:
                    c3:68:7b:4c:ed:9d:66:75:ad:47:5d:63:0e:9c:14:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:52:D2:51:98:74:78:1E:0E:CE:A1:2C:92:1B:B6:CE:19:79:F5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f70c:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:76:2c:18:72:81:fe:b5:6f:43:e0:60:90:96:72:4d:76:
         87:fc:0f:76:43:6e:65:1e:a7:5b:de:8f:75:ef:76:d0:8c:3f:
         b2:18:25:8a:98:e6:d9:b4:0e:83:e9:71:17:87:d3:38:14:06:
         0e:3b:38:9a:a7:1c:a2:22:7e:9a:b5:5c:9a:f6:db:66:e1:6e:
         10:47:0f:3e:8e:d7:ef:b2:46:8a:21:c1:03:88:32:cd:07:7d:
         06:8f:57:17:6b:45:f4:c4:ac:89:0c:39:4d:18:b7:75:ec:25:
         02:50:5a:ef:6b:e0:4d:ba:b9:ad:be:8a:66:26:36:f1:ca:7f:
         ce:43:1c:cf:0e:26:15:09:84:2c:f5:33:2a:e3:6a:63:35:78:
         14:f9:62:ae:0d:56:d1:9c:1b:44:2d:77:17:f5:56:0e:44:1e:
         93:99:ac:83:cf:13:8e:63:2e:32:7c:1a:de:d0:a5:76:18:57:
         39:5f:c9:85:d7:23:c0:a8:3d:aa:0a:2d:0c:31:1a:1f:fe:17:
         db:42:cc:ea:86:9e:c3:c7:3e:f6:af:75:3b:2c:99:6d:05:34:
         4d:00:7e:32:b0:0d:21:4d:f4:d1:b6:88:01:57:23:dd:26:3c:
         da:4c:6e:61:9b:15:cf:7b:85:fb:3d:aa:07:77:26:59:b1:02:
         c0:89:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:50:54 2026 by rpki-client