Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa
File:                     f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa (raw, json)
Hash identifier:          Lf1bhOXipTt8Zzxv9AIMbgp4bamRyYcvs0EnuWrSaKM=
Subject key identifier:   2E:33:6A:31:75:94:3B:98:B0:3B:AB:C5:F4:AA:73:2A:6D:D8:9B:A7
Certificate issuer:       /CN=3c79d01a-3026-45da-a74e-6fc6517ec213
Certificate serial:       010D0C9F4328584EA79B2A0A5BB52FC221595200
Authority key identifier: 38:03:85:35:02:D3:9A:24:CF:76:A2:21:15:88:E3:F8:53:B7:4B:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397954
IP address blocks:        2602:f541::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:2a:0a:5b:b5:2f:c2:21:59:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c79d01a-3026-45da-a74e-6fc6517ec213
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6dbcd3aa-7080-4adf-bba7-1894277cd93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:2a:69:5b:79:89:a8:70:ea:3c:ea:0d:79:
                    0d:d6:f3:4c:a7:3d:0f:28:6f:d6:bc:4c:d9:44:5e:
                    21:6d:ae:d6:78:26:7c:83:2e:91:2c:7f:ac:3a:82:
                    1a:87:7f:8a:2a:72:bc:b3:bf:3c:db:1a:0e:07:e8:
                    83:68:80:37:a3:7e:cb:84:c9:d1:9b:bd:ad:b5:02:
                    90:bf:1e:ba:77:4c:69:00:3a:79:57:77:55:47:d1:
                    1d:2c:a8:d2:5e:4c:d8:c5:a1:04:6a:f7:57:c9:d6:
                    74:58:b0:8d:62:cd:99:45:8a:94:ba:aa:57:20:40:
                    d6:ce:7d:11:7c:c0:25:8b:ce:d5:17:6f:e9:54:58:
                    25:9e:3b:d8:c8:b7:a3:72:92:75:35:db:ec:3b:da:
                    bf:e8:f1:89:a3:36:06:93:fd:19:58:8f:38:54:c9:
                    07:10:4e:18:07:c7:99:45:f8:fd:00:45:cf:91:5b:
                    32:ab:44:55:8a:cf:52:71:75:52:e4:ac:9b:8e:1c:
                    96:ff:5a:98:5e:1b:e3:b8:a7:95:79:21:62:fd:3b:
                    b5:87:17:7a:3a:7b:69:18:dd:cc:e1:67:06:b1:ea:
                    e2:31:de:33:17:dd:0a:8f:bd:3a:5c:d4:d4:da:94:
                    bb:f4:3e:d4:00:94:01:c9:08:14:83:30:4f:20:61:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:33:6A:31:75:94:3B:98:B0:3B:AB:C5:F4:AA:73:2A:6D:D8:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.crl

            X509v3 Authority Key Identifier:
                keyid:38:03:85:35:02:D3:9A:24:CF:76:A2:21:15:88:E3:F8:53:B7:4B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f541::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:27:dc:80:eb:a5:51:68:2b:98:34:51:2f:78:11:52:e9:b0:
         e4:e9:59:6f:c7:70:d7:c2:6f:67:46:4d:d2:f2:dd:a5:a7:2b:
         43:f7:56:f2:d2:69:ac:c1:7a:91:83:37:fc:bc:d7:be:a2:b9:
         08:dd:34:6e:c8:0e:60:8f:7b:03:cd:29:f4:d9:80:85:f5:ae:
         ae:e0:0a:5f:5b:15:70:eb:0a:04:aa:8f:08:c8:cd:2e:7d:d0:
         24:d1:ff:a6:a1:53:18:70:88:dc:eb:e6:8a:e5:37:7c:3a:ea:
         00:18:77:1b:b7:d1:fe:b8:3f:28:42:c9:ac:c2:ad:f8:bd:4e:
         ae:d3:2c:ff:4e:d9:bc:05:d7:b0:ab:34:f4:1a:94:ea:fe:c6:
         7e:7d:57:8f:ad:f8:4b:fb:39:78:3b:19:43:25:6a:f0:a5:5d:
         a4:89:96:cc:a4:36:db:eb:bb:aa:55:cd:dd:91:ff:fd:81:76:
         3a:f0:2e:b4:86:5d:ad:94:90:4a:67:58:27:4e:24:be:c3:f6:
         6d:dd:0b:a9:cd:dd:48:4b:4d:b0:72:de:7a:26:b1:88:1b:f6:
         31:d8:25:02:7c:3d:b4:8c:65:3d:56:9f:0e:d7:97:72:9f:e5:
         02:62:a2:8f:c2:71:8c:9a:46:3b:11:4a:30:e8:42:e7:88:9a:
         6f:d2:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:38 2026 by rpki-client