Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa
File:                     dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa (raw, json)
Hash identifier:          S4mLIF8JPUg7cv4FMB2BU20s53IF6S16DuHDAXkhZfg=
Subject key identifier:   6F:34:C6:0B:4F:B0:D3:78:E2:AE:04:43:2E:6A:7C:BB:EA:07:BD:97
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F4328584EA44521DC33F12EFB376225C0
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     21659
IP address blocks:        2602:fdd2:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:21:dc:33:f1:2e:fb:37:62:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=3df89edb-036f-4800-88fe-9f50d4effdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f8:f1:3d:95:a9:56:81:3f:bc:61:69:ac:d8:
                    3f:c5:9c:d9:45:68:45:90:58:77:4b:a8:6a:67:2d:
                    6b:1a:7f:ba:ef:7c:64:6c:17:a7:4e:b1:41:62:e2:
                    f2:b3:ac:26:bb:7b:6f:1b:6c:8f:2e:b0:5f:20:e5:
                    ff:35:ce:f8:c4:17:db:be:96:2a:a1:93:37:5c:83:
                    63:b1:1f:27:50:86:dc:72:f9:fd:7b:da:d0:0e:4c:
                    7f:0a:53:68:e8:8c:54:25:73:29:3e:08:64:50:e9:
                    b1:40:c1:b4:74:c0:69:9a:d4:95:66:55:f9:52:b3:
                    b9:ee:15:5f:0d:64:14:c0:e0:e9:c2:c9:10:85:da:
                    c8:6f:ec:25:fb:d1:bf:82:d4:6e:96:ff:4a:bd:1b:
                    0a:79:d4:2a:d3:a9:6d:aa:7c:7d:62:b4:90:1e:be:
                    b6:08:e6:3c:0a:c0:08:74:d9:2f:de:4b:f7:0f:7d:
                    3f:03:ff:da:2c:f9:3b:05:00:15:68:74:f5:dd:75:
                    ca:ae:7b:60:16:00:70:4b:4a:98:70:0d:1e:26:3d:
                    35:81:84:0a:ed:a9:e9:a2:82:62:fa:d7:52:73:21:
                    7d:6a:b1:8c:fb:9a:e2:f8:00:d9:67:e9:1a:1a:72:
                    4f:e9:44:9a:7b:a0:1a:16:e7:8c:7b:8b:c3:86:10:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:34:C6:0B:4F:B0:D3:78:E2:AE:04:43:2E:6A:7C:BB:EA:07:BD:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/dbdd05d5-dfda-3f90-874d-bc45c93e2f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdd2:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:82:e8:43:0b:06:29:fc:57:0f:67:e5:1f:a6:8e:90:e6:b4:
         38:c8:d5:c3:34:f9:1b:1d:e8:96:ce:82:eb:4b:49:e8:6d:35:
         b3:9e:00:a6:83:d3:1d:a0:8c:88:d0:2d:f1:aa:ac:ce:ef:00:
         f8:8e:d0:23:fc:04:99:9a:df:b0:2a:83:16:20:5e:f3:86:d6:
         96:ae:77:e6:5e:b3:c1:94:ac:ec:77:f1:47:31:be:1f:fd:69:
         80:47:9c:cc:94:8e:31:86:4b:df:2c:ab:9c:88:a7:1f:04:36:
         d9:99:b3:c7:67:d6:05:5e:80:d1:d5:ca:93:ff:84:cd:ac:c8:
         0b:83:6e:dc:08:c8:18:93:e7:1f:77:a4:76:90:fc:60:fc:2d:
         30:d3:83:06:3b:2d:d1:88:5a:3a:c8:f1:e3:aa:6d:c9:ee:b4:
         41:a7:ac:8b:43:76:7f:2e:b5:f4:75:0c:c3:9c:c3:46:fa:d1:
         1f:8d:a6:a4:41:ec:74:35:44:fd:2d:b5:55:8f:55:bc:21:8c:
         ce:75:c1:24:50:0c:9c:f7:79:b4:2b:68:2d:44:fc:78:0f:25:
         69:c9:00:5f:b0:78:cc:ef:74:05:cf:df:c0:e7:00:36:c9:47:
         a2:c4:5e:15:94:0d:1b:4f:d7:9e:c6:d2:4c:06:4c:08:0f:62:
         85:a7:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:06 2026 by rpki-client