Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
File:                     44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa (raw, json)
Hash identifier:          h+Y9Q+va6KRDnFXLi90DCBPI4W29odMebkn60cjKkEs=
Subject key identifier:   72:85:EF:40:82:26:D4:FD:F1:ED:F5:E4:DD:3C:5E:52:2B:FB:E1:8C
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584F5A32FF7ED70877EB720F9680
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     12198
IP address blocks:        2602:f919:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:ff:7e:d7:08:77:eb:72:0f:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=88da1f5b-58a2-4364-a182-5e4e0c097862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:30:cc:e2:88:02:ed:c5:29:f3:df:a5:04:
                    8d:c5:18:f1:bd:6c:c2:4e:af:68:88:6c:6d:57:7c:
                    36:84:b6:0b:8d:1e:13:ea:a2:a6:df:2a:94:6c:76:
                    dc:0f:a3:d7:f1:89:55:ca:0e:88:69:c2:b0:7b:68:
                    8e:d4:87:ed:42:75:9a:fd:2e:5c:96:ed:77:ee:b5:
                    e8:54:75:bc:73:08:e9:fb:68:53:3b:a5:63:b2:11:
                    7f:ef:a4:e3:28:e1:14:e3:25:3f:e4:95:ed:47:48:
                    28:5d:f4:3d:66:fe:00:5b:50:32:92:ba:ef:6a:da:
                    c1:1c:c4:ca:1f:d5:57:af:e0:2e:ab:12:49:6e:5b:
                    e6:d0:3a:a0:0a:0b:52:f7:c2:8c:1a:1e:3f:01:05:
                    36:34:3c:04:d0:b4:38:a0:41:6a:a5:d0:50:41:03:
                    1f:35:72:4f:5b:0c:4c:5e:6e:79:5c:db:de:5d:ea:
                    ff:49:8a:4b:df:13:7a:4e:3b:8c:5a:58:a3:8a:e3:
                    1d:f1:72:9b:a0:c4:8a:65:ff:7f:ff:95:a3:4e:5e:
                    89:ce:d7:74:8e:f2:bb:bc:5c:2a:58:a9:ef:2e:cf:
                    11:35:70:ef:e3:9b:c9:fb:60:dc:65:5e:27:b9:18:
                    54:aa:56:fd:f8:e1:76:d7:d5:ae:5a:87:ce:e7:a5:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:85:EF:40:82:26:D4:FD:F1:ED:F5:E4:DD:3C:5E:52:2B:FB:E1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:6e:49:b8:43:d2:50:7f:68:96:29:2d:b6:54:8d:fe:2a:
         05:7a:91:bc:20:81:c2:15:8e:72:70:94:67:1c:90:c0:6b:33:
         10:71:19:46:f9:20:1e:d2:0c:52:2b:f0:fe:9a:5d:5a:5f:2a:
         4e:b5:f6:aa:2d:d7:16:be:09:91:9e:a5:4b:05:1d:4c:f6:a7:
         b5:46:9e:a2:de:3d:79:48:7b:24:29:f2:52:94:48:86:66:38:
         cf:cb:ad:54:93:93:77:a7:38:54:87:90:df:00:89:ba:87:a2:
         1f:05:88:86:63:3f:a8:bd:7d:95:05:d3:f8:8f:49:1b:28:f2:
         42:0a:ae:6c:10:e2:dd:d7:6d:87:c4:ba:ec:6d:0f:a1:5c:8c:
         74:fc:39:84:b7:f0:40:ff:6c:12:b2:0c:46:53:ea:cf:8b:37:
         a0:6b:35:56:f9:93:89:58:20:33:b1:1b:fc:52:0d:46:2b:43:
         93:a2:fc:99:76:d3:93:ae:02:2b:74:bb:57:fb:8a:87:64:10:
         aa:02:e6:8a:39:ff:78:e8:38:12:fc:b3:7b:58:64:f7:0b:17:
         bc:8d:3d:44:e1:83:a4:9e:3a:31:6a:a4:bf:f9:f3:92:25:b1:
         3e:24:ec:5c:8a:63:2a:06:00:de:6f:be:7e:27:28:2e:7c:f9:
         b8:e5:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:18:23 2026 by rpki-client