Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa
File:                     c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa (raw, json)
Hash identifier:          lPLknJxMOr+MVPXWP+JaEoaZX/f4jpIxoJAI4WfMb5c=
Subject key identifier:   35:75:5D:00:E0:2C:86:78:5C:ED:90:71:E3:99:99:B9:2A:E8:99:46
Certificate issuer:       /CN=b54185ec-11f3-4557-af8b-4c967c5d4ebb
Certificate serial:       010D0C9F4328584EA79200FEEA53FFDB75A09720
Authority key identifier: 3E:76:DA:0B:E1:8C:CA:7A:86:7F:FA:A2:72:AD:63:36:B6:70:EB:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     402003
IP address blocks:        2602:f54f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/b54185ec-11f3-4557-af8b-4c967c5d4ebb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/b54185ec-11f3-4557-af8b-4c967c5d4ebb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:00:fe:ea:53:ff:db:75:a0:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b54185ec-11f3-4557-af8b-4c967c5d4ebb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=941db28f-ac88-4241-90bd-b4b261ec49cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:d9:fb:8c:8d:4d:ed:ed:98:e0:12:c4:ba:
                    7d:e9:3a:64:23:50:54:82:72:c2:bc:2c:52:ca:f0:
                    d4:14:db:f6:08:c5:44:e6:a3:70:7e:a7:98:b8:0c:
                    ed:c7:4a:a7:4b:94:c6:a5:a2:40:e5:c2:d8:8b:b5:
                    e9:d8:b6:88:05:26:8b:a9:72:fb:8b:bc:1f:4c:96:
                    4d:2e:ef:8f:d1:83:a2:d0:75:bb:50:f4:e8:bc:22:
                    0c:57:18:2a:47:23:b4:c3:b4:63:c5:b8:ed:0f:e4:
                    dc:39:6e:4b:30:7b:39:73:e0:df:fe:ab:49:9c:77:
                    ef:87:9b:74:c8:46:c8:58:8b:40:99:0a:7d:94:2d:
                    31:c1:e2:61:2f:ac:c3:66:6f:db:67:66:e4:e1:e1:
                    9a:4b:0c:58:1f:76:d3:4b:4b:65:3c:f8:5b:1d:80:
                    8d:c6:64:9c:15:d1:ec:9e:d9:88:02:95:06:3b:f8:
                    47:05:a7:a9:29:17:b9:f5:99:d0:d8:1b:86:74:a7:
                    30:c0:16:5e:03:bd:7d:73:bc:38:c5:4f:81:8b:93:
                    2a:93:19:63:c8:58:f2:bb:d5:ed:d2:b5:0c:56:06:
                    c8:50:a9:e2:e4:87:e1:6c:d4:74:09:8b:7d:3b:65:
                    9c:90:b3:13:09:f3:3c:de:29:44:b1:56:9e:0e:18:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:75:5D:00:E0:2C:86:78:5C:ED:90:71:E3:99:99:B9:2A:E8:99:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/c1bfceac-c1ef-3bc8-9417-6ee48577ed30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb/b54185ec-11f3-4557-af8b-4c967c5d4ebb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:76:DA:0B:E1:8C:CA:7A:86:7F:FA:A2:72:AD:63:36:B6:70:EB:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b54185ec-11f3-4557-af8b-4c967c5d4ebb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f54f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c5:f5:f7:6a:53:fa:19:8b:2c:39:aa:93:40:7f:be:ab:e3:
         c0:6a:40:f2:36:91:e1:03:a0:fd:14:19:8e:d6:ac:44:6f:1e:
         a3:e0:4a:26:b3:59:72:5f:b8:b4:a7:71:c6:97:51:79:e8:a0:
         8a:93:ad:75:db:f0:74:44:31:57:dc:e9:e0:71:11:69:6c:86:
         61:5d:b3:56:02:83:fb:80:ec:79:d2:c5:b1:fc:49:97:6a:3b:
         fb:62:7c:d5:80:08:34:f1:a4:69:d1:23:19:3e:de:2d:c0:93:
         5c:c2:8e:ac:5a:8b:a1:f5:07:ef:98:c7:55:9e:a8:08:c1:fc:
         2f:17:4c:0b:bc:e5:1a:7a:f1:9f:06:3b:ea:43:29:48:e4:45:
         6d:dd:48:70:46:6f:74:30:43:af:4f:16:c0:68:77:07:cd:27:
         5d:15:96:de:83:e1:77:84:22:44:26:a2:fa:ed:02:37:37:81:
         10:51:f0:a2:54:97:48:c0:41:fd:62:67:e2:52:c0:11:68:cd:
         96:24:89:ba:31:87:86:80:cb:d6:4d:a7:24:99:9d:c2:0d:e2:
         69:45:f7:e2:9e:34:3c:62:d1:b3:2d:19:8e:f3:9d:5f:04:ed:
         96:e8:d5:05:cb:e3:60:1e:cf:b4:e1:6f:d6:26:ec:76:a9:c7:
         d6:3e:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:19 2026 by rpki-client