Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/cc57fa71-1f5d-3bfb-9aa3-21b90dcacfe1.roa
File:                     cc57fa71-1f5d-3bfb-9aa3-21b90dcacfe1.roa (raw, json)
Hash identifier:          0W4rB9NKEUIHNbiCNVSddD+MrZd9Rw7lVC235pdjn48=
Subject key identifier:   FB:07:F6:BC:A8:D8:64:2D:91:61:F8:8A:BD:5D:F6:6A:E3:D2:C1:C3
Certificate issuer:       /CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
Certificate serial:       010D0C9F4328584F0672A86DEE919B9F54C0E210
Authority key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/cc57fa71-1f5d-3bfb-9aa3-21b90dcacfe1.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2602:81d:e002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a8:6d:ee:91:9b:9f:54:c0:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=37b2b546-66a2-48cd-afed-3dd11c50b6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:89:22:3f:bd:b5:ad:5f:94:cf:8d:0e:fe:
                    31:10:95:76:d3:37:53:82:f1:d4:b5:90:51:b9:4f:
                    8d:2e:cd:e5:71:83:c4:40:77:47:6b:2c:01:8b:9b:
                    13:4b:4b:5a:e5:72:c4:ed:cd:e7:e0:52:c3:dc:ee:
                    98:96:3a:9c:d5:32:d7:b8:60:20:3f:20:67:f0:d5:
                    c4:b3:65:f7:bf:e5:d4:87:a2:b1:64:74:6b:b8:b1:
                    39:02:cd:18:a7:f3:aa:20:9d:7d:18:7b:09:d5:38:
                    33:fe:85:77:cc:96:c6:e5:75:30:b9:58:ed:a5:a0:
                    0c:90:d9:d2:7f:21:58:ac:c0:7a:2b:9a:02:92:3d:
                    09:0b:2d:b1:4f:3b:04:b8:8f:8a:57:6f:e5:79:8a:
                    ce:54:ec:ea:af:20:ec:93:5c:bf:a0:08:4c:4e:da:
                    9c:cd:83:71:98:72:c6:1d:aa:ec:91:43:f5:56:e0:
                    bb:ac:12:2b:2b:3d:1a:57:1e:ba:5a:58:30:82:45:
                    54:4b:95:36:68:7a:31:0d:18:ce:ce:6f:dd:13:4a:
                    11:aa:c5:2a:e3:29:c2:29:72:ec:cf:b8:72:4f:53:
                    af:a1:de:60:a9:34:0b:7e:b2:24:a8:4f:10:fe:17:
                    2f:54:cd:15:90:76:e7:4a:e2:bf:ac:d7:b1:07:50:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:F6:BC:A8:D8:64:2D:91:61:F8:8A:BD:5D:F6:6A:E3:D2:C1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/cc57fa71-1f5d-3bfb-9aa3-21b90dcacfe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl

            X509v3 Authority Key Identifier:
                keyid:C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81d:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:64:ab:4c:08:e0:c4:7b:f9:53:6a:7f:54:76:15:65:b9:74:
         e0:e9:27:8f:84:bc:c8:da:b2:25:80:94:40:b0:1d:e3:c5:86:
         19:71:19:22:67:a0:73:90:41:83:52:9b:ec:42:a3:cc:1a:cb:
         da:ca:67:59:f0:15:f8:16:1e:d9:49:aa:96:5d:1c:29:4b:27:
         6f:3b:29:6a:e5:56:8f:dd:68:b3:e4:f7:7e:c7:cf:80:c3:33:
         9c:90:64:7a:54:42:55:68:c1:71:ea:f3:4a:63:2a:4f:8d:77:
         e8:82:8c:a0:4c:20:0e:55:f7:49:21:dc:e3:15:37:ca:cc:32:
         b3:e3:76:c6:fe:58:67:2a:25:78:11:9b:30:56:62:5d:19:47:
         b1:82:26:b1:f4:e6:ed:5a:16:dd:89:1b:d8:75:a4:1e:63:9c:
         a9:db:5b:6b:52:e2:40:b1:90:e2:d4:e5:f7:6b:02:39:09:ac:
         98:21:5e:a5:62:86:ae:08:2d:f3:3e:c4:5e:5c:13:0e:1f:ce:
         a5:52:3f:52:75:ba:c7:80:3f:6d:da:05:ea:ae:65:18:e4:6c:
         9f:71:db:a9:90:2c:06:a7:2a:bd:2a:5e:82:77:ee:e6:1a:30:
         4a:7d:3f:c3:45:bf:2f:30:42:a2:47:c8:93:da:b4:65:e2:44:
         7a:3a:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:15:15 2026 by rpki-client