Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa
File:                     443655ef-5569-341f-af55-dfa490d592be.roa (raw, json)
Hash identifier:          eMi1rMF9L52EyigM5ZfnpDXvy/qXDnL3XMNsMDj+5jY=
Subject key identifier:   22:C7:5A:9F:9D:7A:8A:CC:F8:B1:60:FD:E6:91:C2:A1:3E:C1:A0:AF
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584F4976B666AAC7CB48B72D8480
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     29802
IP address blocks:        2602:f972:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b6:66:aa:c7:cb:48:b7:2d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc816a6b-fd86-41c2-bbb0-c56aaea15df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:b3:8c:2f:7c:c6:56:e7:02:d2:d8:4c:6f:
                    79:d2:89:d2:52:67:c7:2d:3d:0a:8a:4e:3a:a7:8f:
                    2c:5e:5d:02:4a:cb:32:e5:9e:ab:f2:fd:47:9c:44:
                    63:9f:00:10:80:36:48:f9:24:06:81:de:db:9d:dd:
                    ea:28:3e:45:8f:b8:37:f0:64:f8:ad:d5:90:db:ef:
                    83:62:a8:05:bd:41:e5:bc:51:91:6e:60:5a:75:98:
                    96:b5:3f:e8:5e:a9:0f:fe:3b:11:37:c8:03:8f:dc:
                    aa:13:1a:98:80:eb:2c:ec:fc:5b:b3:1c:4d:11:bd:
                    f3:3a:b0:77:a8:3f:b6:f4:dd:7c:60:0a:28:b6:16:
                    b7:d4:8d:1d:31:0a:0c:c8:6e:60:8d:21:85:d7:be:
                    08:ed:d2:27:87:16:fa:fe:cf:7e:8e:61:cc:77:d9:
                    9d:67:e3:e8:7e:6c:a1:45:ab:b6:b0:ab:90:f0:76:
                    b7:f1:7d:00:53:12:dd:50:39:0d:b8:01:bd:1a:c9:
                    46:2c:43:65:d0:33:e7:dd:62:4c:c4:f0:45:d3:bd:
                    f3:38:e9:4f:ea:56:df:22:58:b5:5f:91:ab:d4:27:
                    8a:80:85:87:44:c6:1c:cf:c6:a4:4d:c1:e4:68:9b:
                    73:ae:d0:d4:01:61:90:ac:67:9a:fe:e4:12:da:c4:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:5A:9F:9D:7A:8A:CC:F8:B1:60:FD:E6:91:C2:A1:3E:C1:A0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:1c:e7:04:0b:1d:8e:0e:75:cf:96:97:59:87:6c:f7:2f:
         87:4a:f8:5c:ed:54:93:63:90:0c:ac:d3:61:34:12:9b:b0:8e:
         8b:a6:d5:15:ed:4e:c7:14:e1:71:2b:9d:de:b5:93:79:9f:39:
         97:a3:1e:a8:6d:25:57:6b:f1:38:fd:4d:57:89:66:26:be:96:
         bd:f0:0b:4e:b2:62:cf:95:6b:89:51:fb:4e:d0:c4:5d:31:0e:
         5a:e5:43:84:d1:b2:df:eb:f6:54:fa:ec:2b:90:79:6c:94:91:
         5f:0b:31:b6:80:95:43:55:b6:ad:dd:20:3e:9d:da:74:b4:23:
         55:5d:76:ce:84:65:74:f7:92:f4:74:f7:09:f6:0e:55:83:f6:
         9f:d7:85:f3:4e:f0:9f:de:b3:0f:8b:a3:d4:89:4e:7c:cc:95:
         53:e2:85:f4:47:81:bc:17:8d:62:bd:0d:5e:1a:cc:38:11:f2:
         7e:f4:2b:c1:5d:ee:1a:d3:33:c8:8d:f9:11:7a:b7:51:d1:0f:
         10:5f:57:1e:32:7c:33:de:66:52:8c:36:24:b2:ad:54:56:4b:
         54:88:8e:60:55:ce:73:d3:fd:52:5e:32:22:79:f0:bc:fb:28:
         0a:1c:7c:a7:8f:f8:7f:06:d0:c3:b1:a4:79:dd:91:4d:93:51:
         a8:47:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:14:41 2026 by rpki-client