Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/ce0c7722-759e-370a-97db-df696609d036.roa
File:                     ce0c7722-759e-370a-97db-df696609d036.roa (raw, json)
Hash identifier:          7xhmZa4wEOk0ocw0SJHLmHnLzDRt4KdaTCyGIWgEJzo=
Subject key identifier:   4B:B4:8C:0A:00:0B:38:45:77:D8:81:50:60:99:7E:A0:DA:43:A2:FB
Certificate issuer:       /CN=92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2
Certificate serial:       010D0C9F4328584EA788D9CA9E7B61CB46B28A00
Authority key identifier: 11:F0:BB:48:66:EF:CD:56:DD:93:34:E2:22:56:D9:2D:D4:BF:F1:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/ce0c7722-759e-370a-97db-df696609d036.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397727
IP address blocks:        2602:814:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:ca:9e:7b:61:cb:46:b2:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=145e84bd-4e3c-43bd-bbba-ea9979294084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:00:c9:f7:7b:80:b9:39:6a:66:8f:10:67:
                    3c:7f:a0:dc:f1:25:92:36:3b:4f:70:f4:11:bb:54:
                    a2:71:5d:be:cf:28:8f:ed:b4:b4:15:e6:0e:9b:99:
                    d7:04:a9:ea:f9:31:1d:78:0d:70:84:ed:8e:12:55:
                    88:1e:93:6b:a5:b7:63:0e:a6:72:69:a9:10:ca:31:
                    e8:aa:5f:76:56:44:c8:b7:1e:7c:3c:7b:a8:21:6b:
                    eb:b4:78:c3:a2:2b:5f:03:db:9d:1c:db:d0:da:f6:
                    c6:a4:13:de:43:3e:46:92:51:d7:56:5d:5c:ae:08:
                    89:8f:9b:fa:7c:96:a6:ff:b0:10:98:8a:55:c1:12:
                    7c:fc:d7:dc:ce:46:9d:bf:47:00:dd:97:a4:60:aa:
                    0f:fd:5b:50:6d:df:10:6f:89:2d:f2:e4:3e:8c:9f:
                    66:cc:b8:14:69:a1:1a:1d:70:65:ce:72:6b:d2:e9:
                    0d:e0:bc:9e:65:cb:53:51:08:bc:60:99:53:11:83:
                    7d:af:51:97:bd:f9:74:2a:e1:b4:34:cc:b7:18:ec:
                    c3:c9:60:d3:fe:2f:8e:d1:31:2c:c5:49:21:c5:fe:
                    f1:30:97:09:6a:9a:4e:de:1d:ef:14:02:72:5f:43:
                    91:f5:86:33:23:6e:4e:fe:61:93:c3:ed:a5:c9:ed:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B4:8C:0A:00:0B:38:45:77:D8:81:50:60:99:7E:A0:DA:43:A2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/ce0c7722-759e-370a-97db-df696609d036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.crl

            X509v3 Authority Key Identifier:
                keyid:11:F0:BB:48:66:EF:CD:56:DD:93:34:E2:22:56:D9:2D:D4:BF:F1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:44:5f:f0:38:77:ad:74:f8:f8:66:c6:ab:5f:54:92:20:71:
         5f:45:f3:28:20:e1:9d:31:2c:0f:5a:ce:33:2e:d8:1e:d2:34:
         51:ba:14:7c:7b:f6:7e:2a:52:b0:71:d1:9d:da:38:b6:12:40:
         d9:10:eb:e8:aa:1f:02:8c:8a:d1:0a:95:68:81:19:d5:16:45:
         d9:1a:80:8a:f8:17:95:18:d7:7f:f8:2a:b9:f4:c6:17:03:76:
         50:8a:2f:bc:8b:fb:6d:1e:51:20:e0:0c:3f:85:98:34:6c:8a:
         15:a4:91:75:ee:28:04:f7:b8:9d:cb:26:3e:14:ce:20:6b:38:
         79:c2:21:b1:6c:d1:01:cd:d2:21:4c:5e:5f:be:a7:e1:ad:a9:
         c0:74:93:da:ea:05:c6:1f:bb:b9:17:41:1a:23:51:f1:a4:cd:
         a3:58:26:86:2d:58:ad:cf:5f:ee:30:a2:dd:65:6b:a3:5a:ec:
         fb:88:7d:6a:dd:00:f1:7a:9f:70:16:a8:4a:6d:53:67:69:54:
         e2:fd:ab:3d:51:0b:31:6e:f0:ca:bf:01:80:88:0c:6e:a9:b4:
         f9:9c:03:3a:b4:46:d7:57:99:99:18:46:0a:3b:6d:fc:34:7b:
         3d:49:c4:1b:c0:31:5a:37:cc:ab:fc:a8:e7:4f:d8:c7:ec:3c:
         33:29:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:56 2026 by rpki-client