Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa
File:                     6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa (raw, json)
Hash identifier:          zJ4wWWlcHoEdJxh4raoXEdZ4V2HVwi4oopwD53nyH+k=
Subject key identifier:   B6:72:94:0F:AD:8E:C3:62:5E:AB:78:E2:71:44:76:95:77:32:27:57
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584F2EED1364F9FB82E8871B7E00
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     399924
IP address blocks:        2602:fc53:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:13:64:f9:fb:82:e8:87:1b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=d76d6ecd-58d4-45fd-bff2-4f06dc9341cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:66:06:bf:31:93:2c:0d:6a:41:7b:0c:a6:
                    09:8a:33:16:e8:70:5e:d0:ad:f0:63:78:b3:cf:10:
                    f6:70:6c:08:20:e8:4a:31:81:30:e7:16:59:1b:3a:
                    c0:6e:d7:de:7d:79:ce:db:9f:0d:82:47:62:2d:5f:
                    1c:70:d1:75:9b:d1:cc:c4:3b:8d:83:eb:88:e2:f5:
                    fd:41:18:14:ac:57:c9:1b:40:c4:5e:0d:28:05:db:
                    f8:57:b6:bb:1d:8d:54:f2:20:94:55:fa:88:1a:ae:
                    00:1f:6b:2c:d2:64:0f:ad:08:f9:ec:22:b9:4d:b4:
                    7a:8b:7f:46:43:1e:14:95:57:ae:94:80:42:ba:a9:
                    56:43:c2:9b:81:fa:7d:6c:c9:9c:11:7b:6c:5d:f5:
                    d2:9a:d2:69:75:b0:c2:90:0e:d3:ae:dc:e4:2d:e4:
                    24:18:a6:a8:af:9c:4d:fb:8f:5d:b8:17:07:c7:c6:
                    b9:43:b7:14:7d:f2:c9:d6:6b:dd:55:d7:64:4b:ed:
                    46:bf:24:d8:98:09:3f:17:a9:b0:37:86:4e:14:7f:
                    da:1e:d8:ac:8b:9f:90:ff:91:1a:61:23:29:f3:5d:
                    0d:d2:91:f7:d7:88:43:a5:e9:f5:fd:3d:a7:41:ce:
                    18:85:cd:d7:69:e9:80:24:e6:45:d5:d6:4d:c6:71:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:72:94:0F:AD:8E:C3:62:5E:AB:78:E2:71:44:76:95:77:32:27:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:f7:0b:6a:50:89:b3:36:95:96:7d:15:26:2b:78:1b:20:
         1b:bf:0c:38:99:1f:d0:7f:31:86:dd:a3:a6:58:4c:c8:2f:d6:
         e5:5b:a1:50:fe:4a:9c:4b:a3:9e:4c:c1:19:47:d9:93:8a:d5:
         5b:db:ca:46:b9:76:86:11:25:32:6c:7c:e0:c1:19:7b:f1:05:
         d7:d3:26:82:e9:17:6c:f9:30:3e:53:1d:92:6e:10:12:34:9a:
         bd:df:ac:44:8a:71:69:9f:83:39:81:ba:11:33:41:22:62:2e:
         e2:25:57:29:e6:eb:54:14:6e:39:86:a3:e5:3f:a5:bd:17:e9:
         00:31:e8:20:fa:32:99:8a:45:d1:5c:75:9a:ef:bc:17:e4:8c:
         21:6d:b1:32:be:fd:34:51:ba:ea:8a:35:71:96:d2:30:18:ed:
         7f:cd:10:8d:e7:c4:e7:9f:e0:b5:91:eb:90:74:a9:8e:e8:1f:
         68:12:c8:4b:df:5b:05:f9:a4:68:4f:6a:e8:fd:76:8f:b1:63:
         6c:22:51:43:91:18:cd:b0:10:ca:46:09:27:6e:6a:e8:dd:16:
         98:2f:3b:a1:1c:9a:eb:2b:7c:19:03:57:4f:59:ee:7c:1f:82:
         8d:9a:23:1c:16:14:42:bb:c2:1e:4e:af:47:11:6b:c3:89:7a:
         da:bb:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:17:12 2026 by rpki-client