Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/8fbb32f3-db59-3e9f-bc79-57191d40b8d5.roa
File:                     8fbb32f3-db59-3e9f-bc79-57191d40b8d5.roa (raw, json)
Hash identifier:          sCnlqp38OQLIT7fta3jGKaKBe5N5RKMiU+6EiyuxOoA=
Subject key identifier:   C1:C3:E6:4A:F3:BA:BB:64:BB:85:3D:CF:06:06:E1:03:03:10:0B:65
Certificate issuer:       /CN=87ec2265-8bb4-4fdc-91d8-de682ab374ad
Certificate serial:       010D0C9F4328584F2F46776E6F010FCFB1D811DC
Authority key identifier: F2:F7:46:26:DD:E5:85:F9:A8:2A:04:53:8A:26:94:11:41:BF:E8:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/8fbb32f3-db59-3e9f-bc79-57191d40b8d5.roa
Signing time:             Tue 15 Sep 2026 16:00:25 +0000
ROA not before:           Tue 15 Sep 2026 16:00:25 +0000
ROA not after:            Mon 14 Dec 2026 17:00:25 +0000
asID:                     402977
IP address blocks:        2602:81e:b001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/87ec2265-8bb4-4fdc-91d8-de682ab374ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/87ec2265-8bb4-4fdc-91d8-de682ab374ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:46:77:6e:6f:01:0f:cf:b1:d8:11:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ec2265-8bb4-4fdc-91d8-de682ab374ad
        Validity
            Not Before: Sep 15 16:00:25 2026 GMT
            Not After : Dec 14 17:00:25 2026 GMT
        Subject: CN=ee408368-0533-47d0-b865-4ec7af40ded8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:18:c4:4c:79:5b:b3:d3:cf:68:07:48:04:
                    fe:21:d2:bc:a4:6d:56:04:05:72:84:ae:ff:56:de:
                    c8:88:91:b3:79:cd:81:e3:ca:38:28:2e:50:26:24:
                    92:8b:fe:ed:b1:9c:0c:03:af:f7:98:15:b3:b8:72:
                    9d:b7:0f:f9:50:5c:a8:20:80:04:8b:0d:43:7b:74:
                    b1:11:b6:87:92:4d:4f:88:f8:c3:b2:8a:88:93:35:
                    cb:db:42:9b:65:bf:7a:00:58:2a:ad:de:ef:46:c1:
                    ce:ae:be:f5:1f:b4:4e:3b:b1:44:d6:ec:f1:e8:f7:
                    c4:42:36:4f:3c:d9:d5:bf:3f:85:7f:05:8c:e9:3c:
                    14:bf:59:4e:54:01:13:43:31:9a:0b:86:7d:88:d1:
                    f1:53:fb:8f:b6:e4:49:42:3e:f6:87:af:d5:c9:8b:
                    71:6e:12:4f:6e:ed:2a:9a:1f:5f:b0:9c:73:6a:f1:
                    29:ab:f8:e3:06:b5:86:ed:a9:0f:0f:23:3f:78:ea:
                    d8:e8:ed:e0:aa:c3:f3:88:44:88:c2:bb:67:70:6a:
                    5b:22:1d:9b:ed:57:73:82:ff:c1:42:a7:9c:de:e5:
                    28:bc:02:99:82:61:2d:51:15:30:72:aa:05:06:30:
                    de:c0:d5:31:0f:7e:28:05:47:80:5e:49:25:11:c5:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:E6:4A:F3:BA:BB:64:BB:85:3D:CF:06:06:E1:03:03:10:0B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/8fbb32f3-db59-3e9f-bc79-57191d40b8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/87ec2265-8bb4-4fdc-91d8-de682ab374ad.crl

            X509v3 Authority Key Identifier:
                keyid:F2:F7:46:26:DD:E5:85:F9:A8:2A:04:53:8A:26:94:11:41:BF:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81e:b001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c9:ba:e9:f3:fa:e3:54:83:5a:c1:f1:32:c2:a7:84:96:91:
         c2:1f:dc:d6:f9:b8:60:9f:80:54:eb:14:27:b4:7c:cc:de:40:
         73:a7:8d:14:fc:a4:a5:db:d0:11:90:9c:59:d5:b3:b6:00:5c:
         23:6a:b7:ee:df:f3:c4:78:fd:96:ae:d7:41:ad:03:c4:73:87:
         60:14:07:32:84:47:26:61:8d:1d:99:92:4a:63:29:b3:85:e8:
         87:0e:92:73:83:07:01:5b:7a:2f:ad:04:cd:0c:3f:e5:f1:f3:
         65:3d:fb:29:83:59:b0:22:9a:48:52:b1:2d:ea:7a:da:b9:2b:
         84:0e:94:3a:4e:94:8a:f5:64:66:da:1f:22:d2:bd:ec:45:c4:
         a2:74:9b:1d:53:3e:df:15:51:74:cf:48:bb:53:4e:49:df:0a:
         75:f3:82:5f:ef:d7:ef:84:8c:2d:38:b9:50:a5:17:47:37:c0:
         a3:10:95:c0:33:e3:05:26:5e:27:06:ed:77:a0:b2:c7:fd:89:
         5f:d1:21:32:85:02:f9:39:f6:4e:9e:31:d8:21:be:95:af:f0:
         1b:33:42:47:a1:e8:61:38:fa:f0:94:91:81:65:f1:48:d8:94:
         71:29:21:60:a2:64:4a:c1:73:1e:62:08:b4:ef:3e:4f:2d:1a:
         f3:c9:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 13:10:15 2026 by rpki-client