Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/3cab8303-9559-3930-b796-5e37f372afd9.roa
File:                     3cab8303-9559-3930-b796-5e37f372afd9.roa (raw, json)
Hash identifier:          ni5BnLTSqiq2YTOQcqiOSYRx3WR43YfE3GuogRVJ0XM=
Subject key identifier:   B2:81:02:92:74:24:EE:73:72:12:F3:BD:97:64:FE:B1:B8:0E:6A:36
Certificate issuer:       /CN=e0687cea-be52-4639-b2ec-92c799316a27
Certificate serial:       010D0C9F4328584F541AF9B27FDF02990BC24C80
Authority key identifier: 3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/3cab8303-9559-3930-b796-5e37f372afd9.roa
Signing time:             Mon 28 Sep 2026 20:37:42 +0000
ROA not before:           Mon 28 Sep 2026 20:37:42 +0000
ROA not after:            Sun 27 Dec 2026 21:37:42 +0000
asID:                     200950
IP address blocks:        2602:f2dc:a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:1a:f9:b2:7f:df:02:99:0b:c2:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0687cea-be52-4639-b2ec-92c799316a27
        Validity
            Not Before: Sep 28 20:37:42 2026 GMT
            Not After : Dec 27 21:37:42 2026 GMT
        Subject: CN=6ba0e167-4734-4e17-a21b-d2d26ee231ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:fb:7f:c9:76:83:d7:7e:28:0d:16:ba:f3:
                    81:04:c9:03:62:da:49:17:18:47:bd:d8:dd:43:20:
                    1d:ea:57:91:fb:cb:e9:34:97:ae:e6:03:c5:94:fd:
                    66:21:e7:58:45:32:a7:3a:cd:29:b3:8e:f5:ee:a7:
                    f7:99:6a:9b:f8:57:b4:46:df:8f:8b:bc:62:fc:ba:
                    31:56:be:74:b4:0d:74:58:83:ce:f8:2e:7d:ad:af:
                    fb:be:99:53:4e:86:a2:ae:65:2f:0c:8c:54:36:c0:
                    ae:e3:dd:ee:62:3a:ae:05:8e:4a:e6:d0:92:8f:ff:
                    94:f6:97:59:4d:7b:59:c8:9b:0e:4f:9c:ef:ec:04:
                    ba:12:95:58:8b:c1:ae:1b:ec:ba:b5:27:5d:5e:af:
                    9d:32:91:6e:93:94:c1:52:44:a6:e3:9a:b0:89:20:
                    76:54:44:39:26:28:3a:a1:77:2a:2f:79:fa:cb:5e:
                    6b:5b:d3:f7:1f:2d:c7:d1:92:55:40:b9:27:ee:7f:
                    10:8b:e7:db:c7:ef:4e:b3:ea:65:29:46:02:e0:78:
                    69:e5:a5:77:74:25:da:cf:b4:28:53:95:55:9a:1a:
                    d6:86:4c:45:2c:bb:c3:c5:e9:23:ef:e3:8f:fd:15:
                    af:9d:03:65:53:6d:9f:20:99:75:71:5f:69:d4:91:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:02:92:74:24:EE:73:72:12:F3:BD:97:64:FE:B1:B8:0E:6A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/3cab8303-9559-3930-b796-5e37f372afd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl

            X509v3 Authority Key Identifier:
                keyid:3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2dc:a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:e3:c8:51:da:b0:66:7a:f6:15:28:66:88:83:19:cc:53:
         0d:6a:c8:34:88:e3:7f:fc:24:75:b8:e8:66:79:50:a1:40:bc:
         97:b6:5c:1a:ce:f4:f4:b3:99:0a:3f:55:66:97:30:df:95:e7:
         56:a2:de:0c:db:71:17:d5:e7:58:d1:37:b8:25:35:b5:ce:64:
         d9:f4:f7:94:b4:32:77:a7:03:17:42:09:1a:3f:2f:d7:b8:53:
         e0:22:5a:38:17:99:27:f8:d0:93:80:c0:71:e3:a5:ac:0b:65:
         59:44:95:79:90:fa:3d:33:1a:9c:b1:89:ad:4f:1b:73:e7:87:
         e1:ac:46:49:67:d1:cf:77:bb:da:fb:b5:e6:10:f1:c2:58:9b:
         64:5c:29:b3:6b:b9:6a:34:e1:f9:5c:a6:9d:36:c9:3c:97:68:
         a3:97:f7:44:c0:80:71:5d:02:f2:b0:10:83:e6:11:6c:8a:b6:
         42:e2:81:39:cf:6c:e7:1e:11:11:eb:0d:d8:7e:51:45:5f:40:
         c6:ee:47:09:52:e6:ad:b5:90:6b:47:1f:e8:3e:b2:3f:e2:37:
         ab:2a:27:ea:00:32:9a:c1:42:bb:bf:fc:82:45:7b:63:10:54:
         a3:4a:e0:c3:cc:c4:3a:d3:b3:ba:ed:74:65:36:0f:f5:08:a6:
         de:1c:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:35:27 2026 by rpki-client