Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa
File:                     58bd39cc-2d7d-31ec-92cd-db743957baae.roa (raw, json)
Hash identifier:          /MJxZNkgfyQumnQqAy2sK1WE/fxzPNmWUjloamIiMg8=
Subject key identifier:   43:A4:E9:34:EE:80:CB:72:E5:B1:58:93:47:8F:B8:1F:DE:75:43:0F
Certificate issuer:       /CN=3f21d6d0-2d09-4711-b420-9646c9d81c01
Certificate serial:       010D0C9F4328584EA7874B09BAA9AB56BDBBEA00
Authority key identifier: C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16871
IP address blocks:        2602:f451::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:4b:09:ba:a9:ab:56:bd:bb:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f21d6d0-2d09-4711-b420-9646c9d81c01
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=599f19cb-73bf-4a52-9c46-4694907a4994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:15:8f:87:9b:36:c2:c2:f7:b1:12:51:1f:
                    07:05:76:0a:36:34:86:25:0a:34:b5:97:47:a8:36:
                    9c:ca:14:64:a5:ed:d0:fa:8b:1b:9b:98:d8:d3:29:
                    58:9d:81:b9:55:86:37:0b:b7:93:f4:cd:4a:b2:35:
                    19:90:68:f9:df:f0:ce:63:7c:5e:9d:6b:be:7e:71:
                    0a:ee:58:da:4d:7b:c4:f2:29:11:aa:f9:3f:3a:06:
                    4f:e3:52:5b:e9:8d:0e:5d:fe:49:15:56:ca:b2:da:
                    ee:6f:56:b4:8a:1c:b8:29:a4:15:94:98:d6:3c:2a:
                    50:ee:ad:d9:b1:8a:65:1b:73:10:8b:1e:a8:58:6d:
                    70:8c:27:d1:60:12:1e:3b:39:46:4f:c4:03:b7:ef:
                    7b:c5:32:5d:56:72:a7:03:8a:7b:3e:a6:a8:41:82:
                    59:ef:8e:a6:40:08:e3:6c:e6:4e:cf:63:af:70:dc:
                    cb:76:f5:f2:b4:6f:9b:d9:44:84:08:37:2d:12:83:
                    81:3d:7e:3c:ec:61:89:cc:e1:32:b4:ff:52:67:48:
                    41:b6:da:38:07:9f:be:a1:7b:33:5e:98:a0:a6:6b:
                    46:ea:1a:76:b0:40:73:1c:85:ee:45:21:96:be:43:
                    52:4d:9b:1d:c0:3c:63:80:d4:5c:e1:d9:08:36:b2:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:E9:34:EE:80:CB:72:E5:B1:58:93:47:8F:B8:1F:DE:75:43:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/58bd39cc-2d7d-31ec-92cd-db743957baae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.crl

            X509v3 Authority Key Identifier:
                keyid:C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f451::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:16:ef:aa:25:24:1f:79:f5:ff:10:eb:6e:9f:c9:28:68:1b:
         e5:c7:a0:25:b1:28:fd:8e:45:cc:60:22:79:86:a9:da:5c:45:
         f6:a7:67:2b:5c:4e:f7:4a:17:61:0b:31:12:d5:71:48:e1:99:
         71:83:e8:e3:03:16:0d:5d:49:25:ba:e1:d0:db:b9:e1:e6:ec:
         1c:1b:06:1f:33:c3:8f:7a:bb:e0:e7:37:ba:31:59:a5:89:27:
         a6:0d:ea:37:4b:45:23:95:5b:75:a2:62:a1:aa:fb:93:27:b3:
         9f:9a:92:32:46:23:17:27:c0:4c:a5:8d:d4:d7:68:a9:fd:2e:
         4f:b2:fa:19:34:91:13:a6:3a:59:4b:79:c8:12:9c:7d:78:ba:
         2b:f1:09:8a:3a:20:93:1f:fe:c6:1a:56:58:84:1a:39:7b:67:
         7c:b4:c1:5a:b2:fe:89:88:2c:81:d9:4a:16:03:bb:4f:ce:3f:
         1c:c1:4c:40:31:67:de:a8:8f:ab:60:b3:1f:12:ff:71:8e:56:
         44:2f:67:0d:a8:3c:dd:64:59:09:07:27:24:24:7e:16:b8:e3:
         01:73:0d:d8:4b:c1:8a:fe:24:64:f9:cd:fc:af:6d:d3:71:09:
         09:2f:e1:a7:c8:3b:da:8a:11:c9:0d:49:07:d0:60:f9:0b:8c:
         99:3a:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:55 2026 by rpki-client