Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa
File:                     9fa4f415-973f-323a-a294-77ec6ecf0080.roa (raw, json)
Hash identifier:          5oYun9acspN4CzhdUyk5lMlKxIaw3+nQvSCGh70WVN0=
Subject key identifier:   88:FE:78:B9:7B:0A:82:17:C8:93:6B:5D:0E:13:30:0B:F6:CE:06:F7
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584F20F7AA29F3A86D8DB3B201A0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     13627
IP address blocks:        2602:fba3:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:aa:29:f3:a8:6d:8d:b3:b2:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=e17bc980-6842-4f5f-92b7-d1593bb98afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:34:be:8a:b8:15:f9:3e:eb:25:88:3d:48:
                    54:d8:6a:ae:81:6b:7d:2e:e0:2c:e5:ce:7e:69:d5:
                    88:1a:a9:6b:b9:04:57:40:aa:c5:32:c2:22:74:20:
                    57:44:2f:8f:30:2d:b3:2c:ca:a9:4f:b6:3d:15:b9:
                    33:25:89:be:dd:6a:c0:f2:ee:44:1a:81:10:8c:2d:
                    1e:5d:54:bf:94:a9:36:32:73:5f:96:6c:3d:a3:73:
                    2d:bd:e9:c2:d6:3a:cb:2f:a3:02:d4:5b:9f:27:73:
                    f4:10:20:bc:09:4c:e0:8f:c6:a8:16:12:b1:34:11:
                    d4:08:f8:c7:65:a3:aa:7e:a3:58:23:75:0e:ba:04:
                    bb:b0:fd:df:fe:f5:79:30:d0:4c:2e:a9:55:ec:d9:
                    83:0c:bc:6e:26:01:d1:4b:4e:82:7b:ed:a0:d2:6a:
                    ae:66:be:f1:f9:d2:94:7e:94:43:04:fd:36:cd:a8:
                    d6:44:67:b2:8f:2e:71:fe:25:1b:c0:2e:0a:79:9d:
                    9a:d4:f4:68:50:6f:db:c2:a9:f0:5d:bb:b2:6a:50:
                    43:d5:e9:cc:65:f5:f5:09:07:d9:3e:dd:57:cd:f1:
                    1e:b8:35:00:96:68:11:97:ff:fe:31:76:0d:1d:d9:
                    d7:f8:13:8c:69:39:8b:bf:8f:d2:90:97:25:bd:85:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:78:B9:7B:0A:82:17:C8:93:6B:5D:0E:13:30:0B:F6:CE:06:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:ef:7b:7d:ed:c7:1f:cd:0e:e1:3e:98:6b:50:42:aa:b6:
         e2:c5:b4:fa:4d:e8:d1:3e:26:61:f6:88:47:cb:0a:22:37:24:
         b1:53:6e:59:17:d4:fe:f1:50:1c:67:fe:56:63:91:80:0c:25:
         64:de:d1:f8:95:65:cf:19:15:ce:4a:2d:be:db:0a:73:28:2e:
         3a:4c:2a:08:fa:3e:fa:dc:d6:4e:90:b4:92:97:fe:7d:ee:a4:
         6b:01:66:ed:48:29:b5:29:76:3a:39:9b:bc:e8:b8:0f:da:e5:
         96:cd:5c:05:92:54:56:7d:83:0f:f0:1c:25:6f:2c:81:d4:48:
         bb:0e:65:d7:6d:cf:5c:50:86:6d:d5:96:e1:8d:b4:25:e5:87:
         43:e9:fd:44:c1:e0:f3:72:9c:c8:8e:67:f9:58:5c:49:f5:cb:
         3b:85:54:14:62:f6:53:b1:3b:fd:a0:e6:b5:ec:70:0a:31:bb:
         29:c0:43:12:5b:1a:7a:34:85:1e:39:e0:2f:68:6d:70:9e:4c:
         69:66:1e:ab:79:7e:c4:b5:e7:4c:21:23:7d:1a:ed:25:e2:c7:
         ae:1e:14:6f:18:80:99:fb:56:5b:13:9a:ad:86:df:2d:6c:ca:
         5a:cc:79:d3:8f:cd:a2:1f:83:5b:fc:e1:45:fb:88:57:d9:f3:
         e8:27:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:10:38 2026 by rpki-client