Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a/4b881e84-a1cf-35b3-9bfe-73e2fcdc9d83.roa
File:                     4b881e84-a1cf-35b3-9bfe-73e2fcdc9d83.roa (raw, json)
Hash identifier:          d7yFsMrbuk/w6U6ykoShTV+LH3yTiCHl/PxsdGs9lwI=
Subject key identifier:   DA:8F:13:AB:B4:18:A5:97:3B:71:E8:E7:FE:55:C2:B7:23:79:9D:BA
Certificate issuer:       /CN=36381275-bddf-4e27-a1d6-26bbf8af786a
Certificate serial:       010D0C9F4328584ED6FC8530332EF3BC9E918DA0
Authority key identifier: A9:3B:2F:18:FB:A9:43:F3:5A:88:7C:AF:20:FB:96:29:82:2D:62:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a/4b881e84-a1cf-35b3-9bfe-73e2fcdc9d83.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     402648
IP address blocks:        2602:81e:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a/36381275-bddf-4e27-a1d6-26bbf8af786a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a/36381275-bddf-4e27-a1d6-26bbf8af786a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:85:30:33:2e:f3:bc:9e:91:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36381275-bddf-4e27-a1d6-26bbf8af786a
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=b531b3b4-7949-45cc-bfdd-0c7a10cbe881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:37:93:34:5b:52:7f:c2:eb:d0:3f:ba:fe:48:
                    82:fd:f0:42:dc:4a:30:7d:98:8f:01:28:e1:d3:a5:
                    2e:2a:74:1c:b0:30:4d:8f:8e:0b:68:08:af:b8:07:
                    0e:14:22:9f:cc:b2:b5:a2:46:09:93:f6:44:2f:6f:
                    25:df:66:89:2f:88:c2:99:d2:6d:08:6e:6d:10:51:
                    2e:c8:76:9e:fd:54:58:37:91:45:19:84:c9:64:a0:
                    87:8e:42:69:cc:4c:88:12:fb:ac:b7:4b:16:79:ae:
                    8d:bf:15:bc:ad:4b:e5:e1:86:80:fd:da:0c:bc:89:
                    0b:4a:eb:d8:41:1f:36:cb:78:27:1f:21:e3:7e:85:
                    86:f8:d2:f6:8c:e6:b0:c9:64:a3:8a:d5:51:5d:6d:
                    02:44:21:77:c5:3b:cc:98:39:21:32:9f:06:a5:a9:
                    45:34:c9:3e:d2:a0:bd:35:43:6c:1f:65:ad:02:db:
                    6c:f4:bd:bc:58:31:f3:5a:ff:84:6b:e0:ea:fe:ee:
                    1d:74:42:e6:ea:33:b3:c8:96:4e:27:66:ee:87:f5:
                    df:1a:bc:fc:95:0b:28:69:20:e9:d3:61:13:e3:87:
                    58:85:94:c6:85:bc:a9:1d:7a:ed:75:d6:73:34:e0:
                    c9:1f:39:e8:b1:3b:4e:f4:3f:be:09:81:8c:52:36:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:13:AB:B4:18:A5:97:3B:71:E8:E7:FE:55:C2:B7:23:79:9D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a/4b881e84-a1cf-35b3-9bfe-73e2fcdc9d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a/36381275-bddf-4e27-a1d6-26bbf8af786a.crl

            X509v3 Authority Key Identifier:
                keyid:A9:3B:2F:18:FB:A9:43:F3:5A:88:7C:AF:20:FB:96:29:82:2D:62:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/36381275-bddf-4e27-a1d6-26bbf8af786a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81e:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:59:95:dc:50:22:8e:91:b6:2c:c2:c7:9d:e9:e1:7c:b0:23:
         3b:db:1e:48:55:9e:99:c8:58:78:1b:28:aa:c6:e7:26:5f:a4:
         05:df:25:4e:c0:3a:dc:bd:70:8a:9a:ec:cc:e4:f2:24:85:4e:
         8b:e7:4a:7f:48:af:ae:47:ad:5e:0d:57:c7:13:78:40:d1:dc:
         24:d9:cc:45:42:d9:22:84:ff:6a:e6:79:fa:fa:e2:74:97:47:
         e6:41:96:32:e2:d4:cf:f8:9a:3f:2f:40:ad:18:39:1b:91:1c:
         5c:a0:b6:9e:ff:44:35:1c:b9:5c:05:14:88:c2:a2:01:54:3f:
         64:71:52:2e:65:2f:29:a6:32:81:4e:8d:83:08:7d:57:8c:27:
         bc:d5:66:76:9b:cb:a0:9c:cf:b3:f8:2b:1c:95:8e:c6:58:b2:
         f5:bc:03:7c:ac:3e:73:14:54:37:10:48:81:8c:4d:c8:ce:89:
         63:e8:5c:5f:e2:29:bc:1d:0b:b7:a8:c3:5f:61:62:fc:18:fc:
         8e:92:c0:54:aa:e2:a7:07:66:04:10:87:41:fb:ba:2d:fa:6f:
         58:53:df:d2:34:df:5c:87:80:23:69:dd:57:4d:dc:ae:e1:bd:
         bd:bc:3a:e2:16:5c:3c:de:6b:e5:89:77:a5:b5:69:04:f2:29:
         1d:d8:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:31 2026 by rpki-client