Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/8ed371ce-8d38-33a5-b0f2-42add1e41e97.roa
File:                     8ed371ce-8d38-33a5-b0f2-42add1e41e97.roa (raw, json)
Hash identifier:          eLhvUykdKkdhWBwLs0wKQ7yN3JZ3/14vyq0fw6x7RWo=
Subject key identifier:   A7:3A:9A:05:F3:32:AE:F6:8B:33:A0:05:56:47:30:9E:00:43:B4:24
Certificate issuer:       /CN=fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9
Certificate serial:       010D0C9F4328584FD43A981B98868C5E7F19C980
Authority key identifier: CB:85:EF:4B:BA:22:1F:EE:E2:0E:4F:A4:79:54:23:CD:A4:D1:FE:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/8ed371ce-8d38-33a5-b0f2-42add1e41e97.roa
Signing time:             Fri 13 Nov 2026 18:04:53 +0000
ROA not before:           Fri 13 Nov 2026 18:04:53 +0000
ROA not after:            Thu 11 Feb 2027 18:04:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d4:3a:98:1b:98:86:8c:5e:7f:19:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9
        Validity
            Not Before: Nov 13 18:04:53 2026 GMT
            Not After : Feb 11 18:04:53 2027 GMT
        Subject: CN=1804b772-e365-4f10-8754-91c47f6313d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:ef:ab:8b:eb:25:85:41:96:43:2a:5f:97:
                    c5:fa:d8:5f:ed:23:76:6f:cb:97:65:d1:f4:d6:aa:
                    fd:d1:fc:d4:70:4b:40:b5:24:61:b5:3d:98:52:09:
                    45:d3:b9:e3:48:f5:b4:38:53:51:a5:de:05:4e:32:
                    74:8e:b7:dc:2f:ea:3b:b1:6d:07:5a:be:92:26:e8:
                    8c:70:06:c8:0f:d1:81:9c:27:4e:21:67:b1:8c:9e:
                    cd:10:21:04:b2:e2:2d:e0:15:54:8c:a4:3b:1e:3d:
                    a3:ec:80:8f:e1:2c:1d:1d:f0:c8:e7:0b:1b:e9:7a:
                    ff:f1:68:73:16:e8:b7:0c:47:2e:94:fe:14:24:79:
                    14:85:a8:ab:38:29:28:59:68:58:dd:72:6c:fe:77:
                    38:6c:44:38:7c:d4:ef:2b:6d:54:bd:89:4f:9a:ff:
                    a1:49:c1:bf:03:c9:a9:dd:cc:a6:23:70:ff:4c:1a:
                    34:d5:c4:d1:e5:e8:ea:09:e1:21:00:b0:8e:ec:c6:
                    23:92:d5:45:76:ca:9c:92:c1:aa:05:3d:f0:b4:0a:
                    8b:eb:ef:e3:2a:bb:b4:de:3a:26:31:ad:70:0d:66:
                    7f:3d:ea:f0:7e:22:cf:ea:d7:b4:99:e1:07:7a:61:
                    67:ad:fa:84:f8:82:0d:cb:2f:eb:bb:df:1c:c7:15:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:9A:05:F3:32:AE:F6:8B:33:A0:05:56:47:30:9E:00:43:B4:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/8ed371ce-8d38-33a5-b0f2-42add1e41e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.crl

            X509v3 Authority Key Identifier:
                keyid:CB:85:EF:4B:BA:22:1F:EE:E2:0E:4F:A4:79:54:23:CD:A4:D1:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:9d:3c:81:60:fd:ec:eb:59:e8:e7:5b:9b:b5:c8:e8:75:
         e8:39:37:ce:88:20:7b:67:e9:f3:fe:c6:e3:93:37:65:6c:90:
         a8:d8:c0:c8:32:f4:f9:05:15:00:7e:4b:92:3e:30:7f:c0:b7:
         30:b2:89:67:e2:0d:5c:83:26:16:a8:2a:83:50:2d:6c:c0:b0:
         36:b4:ed:6c:81:d1:ff:7d:19:75:c2:17:a0:81:46:6f:12:bd:
         02:ea:a7:c3:13:2f:73:5d:b5:9f:41:74:f8:22:99:aa:a1:0a:
         2f:db:aa:66:be:b7:21:da:91:16:5f:47:5a:2f:02:cd:ad:eb:
         64:86:18:d9:c8:3b:05:85:fa:58:69:e7:6b:02:a5:67:cb:0b:
         08:e8:47:ce:69:a0:d9:79:c2:9a:f5:29:73:b2:d1:da:99:1e:
         49:63:74:bd:1a:84:f9:82:41:e1:3f:c0:f1:5c:db:6b:27:ac:
         45:92:1e:fd:de:f9:3f:be:df:15:0e:03:ff:26:53:72:5f:ed:
         c9:81:de:7a:0e:14:f7:05:5c:a0:a7:6e:e4:10:1c:e2:b9:b1:
         1b:55:2a:b9:cf:ea:55:ec:cf:b2:05:9a:78:0d:03:fa:87:f9:
         73:72:31:94:46:fb:6b:36:ad:f1:0f:06:4d:30:00:d8:fe:75:
         67:f5:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:28 2026 by rpki-client