Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/ed9aba20-5ad6-3936-ba1f-09aced5582ab.roa
File:                     ed9aba20-5ad6-3936-ba1f-09aced5582ab.roa (raw, json)
Hash identifier:          5fP/xlebzZNcHsecQdt47LrLL4Orz1HBRopY+n26jqY=
Subject key identifier:   09:45:A8:3C:86:21:0C:DB:A2:38:0C:57:3C:F1:4B:1E:CD:78:38:C3
Certificate issuer:       /CN=f9962fb0-221d-459e-957d-b8a95fae9d35
Certificate serial:       010D0C9F4328584EDB2C97CE71D93B474113C680
Authority key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/ed9aba20-5ad6-3936-ba1f-09aced5582ab.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     402654
IP address blocks:        2602:f382::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:97:ce:71:d9:3b:47:41:13:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9962fb0-221d-459e-957d-b8a95fae9d35
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=95344fa5-c975-49e1-b416-71a66d9b494f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:e6:e9:e5:dd:6e:cb:0f:a3:38:48:5b:dc:
                    18:ac:12:7c:2a:da:f1:50:1f:e7:80:e8:95:83:ea:
                    e1:5e:bf:8c:7e:9c:93:65:1f:b3:5f:bb:8c:ad:9e:
                    ac:f3:6d:86:c9:49:d4:d0:ff:f5:4b:aa:c6:da:b9:
                    7d:0d:20:91:66:23:70:62:9e:8b:76:a7:88:1f:c8:
                    e3:da:22:42:b8:51:11:e3:fb:1e:1e:99:39:bd:5c:
                    9c:48:06:39:6e:3a:dc:ec:5e:71:0b:f4:6a:c1:07:
                    bf:7c:18:29:cf:4a:f2:9c:58:ed:cc:88:7e:95:d3:
                    8a:60:cb:6b:0a:03:b9:d2:22:ad:09:85:4d:f7:cb:
                    d2:27:3e:c4:40:fc:db:cc:8a:8e:88:f4:c0:b4:40:
                    d5:b1:b1:96:53:16:d0:31:2d:9a:9c:e3:86:36:be:
                    13:f2:e8:fa:63:b9:30:33:e1:3c:d9:57:17:e1:1b:
                    23:08:02:4d:a2:e2:16:5d:45:bd:ad:34:6d:ed:7c:
                    0e:35:a5:6a:99:ef:e2:f3:ff:61:db:bb:6f:28:10:
                    ee:2f:dd:e4:8d:c1:8a:7a:69:09:be:92:a7:a2:e8:
                    22:65:9a:0c:85:dd:d1:43:e4:80:7b:a3:c8:76:13:
                    33:9b:e0:4d:06:4a:5e:33:41:8a:a9:76:16:a4:5b:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:45:A8:3C:86:21:0C:DB:A2:38:0C:57:3C:F1:4B:1E:CD:78:38:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/ed9aba20-5ad6-3936-ba1f-09aced5582ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl

            X509v3 Authority Key Identifier:
                keyid:A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:71:66:3a:62:18:d3:2f:f4:d0:36:78:4c:4b:2f:07:85:c6:
         c7:8e:be:a0:27:1b:7d:8f:eb:d5:5e:01:f1:b3:44:90:5a:55:
         12:bd:9b:1c:3d:d9:d3:29:b9:9b:31:ee:6e:96:97:bb:2e:dc:
         e4:50:ea:20:c6:1e:af:56:e2:9a:0b:77:84:52:cd:fe:26:f4:
         7b:fa:a0:01:aa:58:e7:22:8b:03:c6:4a:9a:f3:cf:c4:78:48:
         68:c6:3e:90:6a:bb:76:18:49:fa:d4:c7:35:0c:df:3a:43:d7:
         07:90:48:86:41:84:03:54:94:05:91:12:72:4d:de:34:2e:ed:
         77:38:37:66:de:8a:17:51:33:5a:04:04:ec:e0:85:e2:16:55:
         ce:7f:05:1d:96:6e:56:64:69:a7:13:4c:d8:7d:3f:01:4c:7b:
         ca:ef:e2:e6:24:64:08:fd:ac:65:63:8f:6d:f1:00:ac:2a:4c:
         a0:ab:52:7e:8f:bd:e6:01:aa:6e:a0:29:a8:50:f3:3e:bb:f9:
         08:0e:78:9f:a7:c3:1b:4c:9a:76:07:e2:77:15:6f:99:36:79:
         2b:32:6c:ab:fb:f3:ab:63:4e:bd:24:8a:c2:24:f8:69:9c:6d:
         e3:0c:a9:12:4c:87:03:e1:04:19:97:00:41:2e:d1:d0:da:97:
         8d:b5:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:22:17 2026 by rpki-client