Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
File:                     3bca3994-29ef-3370-82e1-27cd8e63489e.roa (raw, json)
Hash identifier:          AdHVIoOJmcxjgH6uUCHbuTjIEeMt9Fk8vk+irZTN6ag=
Subject key identifier:   6D:CB:E8:58:EE:F0:4B:6B:38:A7:7D:16:7C:0B:71:51:B8:5A:3F:C0
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584EFF7782AD5B7EC82C9FADF600
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     0
IP address blocks:        2602:fd10:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:82:ad:5b:7e:c8:2c:9f:ad:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=9d0a28a2-4671-486e-a245-bd96f35d4a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:aa:79:05:1b:be:df:86:02:0e:46:61:53:
                    96:45:ff:2f:08:4e:2b:84:1d:f4:00:6a:04:57:f4:
                    e4:48:0f:19:73:22:f7:47:0f:99:84:c6:1e:8a:f3:
                    4e:1c:99:3e:df:b2:40:09:22:15:09:f5:d6:77:a3:
                    20:3c:2c:7e:86:23:87:5c:f2:3f:1f:1c:0f:6a:66:
                    9b:01:e3:10:fe:ed:f1:1c:2c:37:78:92:4f:08:8f:
                    d2:5c:39:cc:91:23:46:0d:84:06:56:fd:d1:82:21:
                    51:cb:62:64:d6:1c:20:22:5c:2d:bc:d1:04:a8:17:
                    2e:ea:cc:99:17:8b:18:bd:32:49:64:ed:0c:de:f5:
                    b6:d0:b5:dd:80:00:13:58:9c:1f:ee:ff:3b:35:4b:
                    46:88:a9:66:fa:cb:52:a0:f3:e4:24:25:95:29:5f:
                    16:cb:cd:f4:a4:8a:31:47:7f:da:9f:2b:7f:4b:69:
                    a9:e0:47:44:64:c8:c3:c5:94:09:09:96:b1:b9:28:
                    20:a5:b7:de:26:da:23:1a:bc:1a:6c:2a:84:7e:bb:
                    3d:6a:54:04:bf:6a:80:12:63:01:6b:41:d8:34:0f:
                    4c:88:3d:bd:c6:b2:91:72:10:34:b6:cc:7e:8d:48:
                    d2:d7:43:b3:9b:fd:32:f7:15:80:e4:7b:0d:44:17:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CB:E8:58:EE:F0:4B:6B:38:A7:7D:16:7C:0B:71:51:B8:5A:3F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:89:e0:b1:10:73:71:48:98:f5:f9:4a:4c:67:ab:37:39:
         c9:f7:0d:fe:b7:44:81:f2:f0:44:cc:19:45:b6:40:05:9a:d8:
         e9:f8:1c:d0:88:ca:92:c3:be:23:3c:64:92:4e:40:bb:59:90:
         bf:ca:8d:fd:6f:0d:34:7c:52:0e:4c:fd:07:2e:d7:05:e1:f9:
         2e:4e:4f:fc:5d:9c:e8:b5:29:8a:83:0a:28:03:d2:db:3c:62:
         9e:4b:51:ae:ca:45:f7:6e:af:c5:68:d9:26:6f:16:d6:b2:da:
         c0:ed:5e:b3:07:09:7b:87:26:84:f9:cc:3d:d3:43:29:df:c3:
         a1:5a:51:b6:54:15:89:bb:a5:48:05:30:e4:7e:d3:08:4f:6f:
         df:31:aa:fa:23:1b:53:07:41:32:57:6c:79:b5:9a:f2:50:f5:
         3b:86:2c:b9:0b:ff:ab:4e:1c:05:7b:32:73:af:36:a4:b2:b5:
         e1:5a:43:7c:3c:f5:d5:85:61:47:c5:6b:4a:d1:7d:1a:63:23:
         39:02:74:ec:0e:67:1a:c2:7b:4a:b5:ba:38:a2:0f:82:54:51:
         77:5a:56:94:98:75:d6:ce:eb:60:7a:96:5c:96:67:eb:a2:18:
         82:5f:bd:9e:3d:4b:56:14:1f:47:1e:71:c8:7b:76:7e:c7:b2:
         af:45:75:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:25:18 2026 by rpki-client