Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa
File:                     ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa (raw, json)
Hash identifier:          oaAehghcLFoSsszgpvM2laIQ8Ig8emHQ9XI9fL2LQ4A=
Subject key identifier:   87:00:47:2E:A5:CD:ED:54:89:1B:35:15:38:75:A8:E2:02:72:F4:DD
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F4328584EA79162AB1DE3F0AC4FD0B040
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53397
IP address blocks:        2602:fd61:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:62:ab:1d:e3:f0:ac:4f:d0:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=927c9c6e-7380-4b54-a5c4-26dc6606b660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:79:21:98:48:ae:12:9f:31:4a:83:f6:8b:
                    3c:a9:15:a9:09:48:da:7e:92:d6:04:12:f8:c7:3d:
                    2d:78:6a:3d:18:54:10:d5:8e:46:bf:12:0a:8d:78:
                    a5:4f:ad:64:d4:74:5c:2a:a8:80:52:1a:87:83:34:
                    ee:f0:61:7e:3e:11:5b:8c:85:e5:5e:8c:2f:2f:9d:
                    b3:3d:b6:e8:20:bd:e5:15:d7:f3:f8:97:7a:2f:5d:
                    2e:05:28:83:e7:06:6c:00:86:15:97:7a:b0:e7:27:
                    60:3d:40:ae:cb:68:a3:dc:16:76:62:0c:18:5b:3a:
                    0d:9d:e5:fb:85:1c:13:cd:64:0e:7d:fd:a1:91:4b:
                    90:0a:b9:8c:6c:b9:9b:fb:43:96:29:8e:33:a5:e0:
                    07:36:4c:af:14:e5:42:31:8a:8f:6f:03:f1:17:9d:
                    2d:fc:d7:8a:d4:4a:0e:f3:b5:02:95:81:05:1c:fc:
                    68:94:3c:3e:b4:32:78:ee:0f:9a:22:38:58:e1:af:
                    16:50:45:e7:11:a0:e4:47:82:c9:50:89:30:96:ab:
                    49:3a:62:bb:ed:6d:eb:8d:78:ff:c7:cd:70:a9:b3:
                    e4:89:a9:b6:8c:75:b3:7b:6c:27:8a:58:ea:09:f7:
                    72:61:7e:f7:50:5b:1a:31:d7:14:22:ac:4f:5e:08:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:00:47:2E:A5:CD:ED:54:89:1B:35:15:38:75:A8:E2:02:72:F4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd61:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:80:54:71:e5:62:f1:ea:03:d8:0d:d3:0e:db:c7:d4:d7:8b:
         9f:e6:94:5e:60:a8:f4:fd:b4:32:30:28:6f:cb:84:0a:e1:51:
         31:cc:49:65:6d:6b:29:76:86:55:55:fe:42:ff:9d:00:3c:11:
         5d:35:98:2a:b0:20:7c:2c:b5:82:f9:60:43:24:98:37:e8:01:
         1c:e3:ef:8d:2c:45:3d:79:15:30:97:ba:36:37:2f:9c:28:45:
         90:e7:fb:54:db:39:55:f8:6d:03:0c:2b:d3:4c:e9:de:3e:41:
         d7:a8:20:59:49:10:cf:29:f0:55:06:7c:8f:56:b3:e0:d4:5c:
         0d:93:1a:e6:b8:84:19:dd:c3:51:fe:b9:df:91:21:fe:d2:d3:
         2e:c5:f0:07:ca:27:84:f6:98:8f:d5:fa:aa:e0:64:63:5c:d9:
         5d:8e:66:88:a9:96:84:5d:55:af:dc:b0:29:f3:2c:f0:2d:fc:
         21:fb:1e:59:a3:32:35:e0:18:31:3d:a2:58:cd:29:fa:1b:9a:
         21:33:57:a2:2c:c8:e3:ae:45:62:f6:a9:91:a5:e5:e6:2e:2b:
         bb:16:40:f5:50:e4:41:6b:8f:50:c0:3c:74:5a:83:54:e3:0d:
         5a:1b:16:4e:7e:8b:6c:b5:f9:12:b1:be:03:e2:68:18:e9:4c:
         22:43:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:41 2026 by rpki-client