Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f86a148c-82ab-31f3-8ccf-5ede218c975d.roa
File:                     f86a148c-82ab-31f3-8ccf-5ede218c975d.roa (raw, json)
Hash identifier:          tUeQ+TeTsHoqh8n5w/cEp1f0v4ZZj+LqTu/9LOUuNF4=
Subject key identifier:   95:F1:E1:0F:EC:0E:02:0E:7F:7B:77:B8:11:4A:1E:44:44:52:CE:D3
Certificate issuer:       /CN=f9962fb0-221d-459e-957d-b8a95fae9d35
Certificate serial:       010D0C9F4328584EDCB163FB69549CC4D97DD880
Authority key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f86a148c-82ab-31f3-8ccf-5ede218c975d.roa
Signing time:             Mon 17 Aug 2026 02:03:46 +0000
ROA not before:           Mon 17 Aug 2026 02:03:46 +0000
ROA not after:            Sun 15 Nov 2026 03:03:32 +0000
asID:                     402654
IP address blocks:        2602:f382:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:b1:63:fb:69:54:9c:c4:d9:7d:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9962fb0-221d-459e-957d-b8a95fae9d35
        Validity
            Not Before: Aug 17 02:03:46 2026 GMT
            Not After : Nov 15 03:03:32 2026 GMT
        Subject: CN=d302bc3c-327b-4542-a5c1-62bbca749323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:65:91:d5:07:31:24:8b:e9:36:ca:1e:39:
                    83:d8:21:30:ec:be:1a:55:35:e7:a0:07:96:e3:a7:
                    3e:75:6e:f2:fe:02:94:77:d4:58:b2:0c:0c:e0:ca:
                    40:b4:95:8b:9d:26:e2:d6:28:3c:7d:8a:57:4d:88:
                    c7:cc:97:49:74:bf:53:da:ea:9d:df:d5:d5:95:d0:
                    1a:d4:08:61:28:58:4a:1a:8b:5b:76:bb:d3:6a:e9:
                    d5:d7:d9:95:65:12:7f:88:99:bf:7d:b9:e0:e4:38:
                    3a:c3:7e:7b:a8:b3:63:55:b5:7c:34:75:00:7b:b2:
                    fd:ef:a8:07:64:a0:a8:da:c4:15:25:ad:f5:b2:14:
                    dd:70:2e:8d:58:ed:77:38:51:93:28:e3:6a:fe:15:
                    36:ef:33:44:0e:c7:7b:33:1b:93:4f:5f:23:db:f7:
                    3f:11:5a:53:73:84:12:3a:fd:f9:20:75:66:21:d9:
                    24:3d:86:5c:2f:23:f0:45:d2:3a:66:21:c4:13:8e:
                    a4:80:7e:87:ae:ea:53:1d:85:cb:47:15:ea:ca:2f:
                    93:44:57:2f:88:18:e4:ea:26:4f:29:6b:34:93:cf:
                    f3:c0:41:92:95:c8:b4:65:2c:38:d5:fd:34:e0:7c:
                    50:87:7d:4b:3f:72:60:0f:26:5d:3c:08:12:d4:9a:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F1:E1:0F:EC:0E:02:0E:7F:7B:77:B8:11:4A:1E:44:44:52:CE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f86a148c-82ab-31f3-8ccf-5ede218c975d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl

            X509v3 Authority Key Identifier:
                keyid:A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f382:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:74:09:2a:71:69:6f:19:f9:0d:5c:3d:4c:ec:80:40:27:70:
         1c:46:8b:d0:be:70:ac:d1:8a:f0:15:49:45:f1:46:ef:c0:f3:
         b5:07:0b:5f:40:45:ff:9d:88:9b:08:c3:2d:df:6f:13:a9:ee:
         79:b1:88:43:fb:08:a1:18:41:15:32:28:3a:69:36:21:48:eb:
         45:f0:51:a5:38:cc:16:ca:9a:6e:54:20:ce:41:ec:c8:23:94:
         e6:eb:4f:f0:01:80:8c:4f:2c:85:b8:89:2b:68:f8:97:fc:48:
         25:be:fd:d3:03:e9:99:e7:11:cb:69:16:25:a3:d0:d4:64:f4:
         8f:a6:b4:6b:8b:4f:e9:02:0d:6d:5a:f1:32:76:ad:e4:52:6f:
         da:d8:f7:2f:a4:ca:f5:37:fa:20:99:1f:fc:42:e4:e3:1e:26:
         f8:35:4f:e9:ec:08:23:40:36:d9:28:36:b2:82:28:49:26:3b:
         21:c9:10:92:e5:49:6f:d1:a5:15:71:0f:4c:48:2d:9a:79:84:
         60:cb:82:73:7b:ff:91:61:10:12:78:ee:7c:dc:c8:2a:be:21:
         df:b9:55:35:5e:1a:aa:a2:65:dc:4a:0d:aa:04:ea:68:5b:a5:
         66:03:b3:db:cd:26:36:93:8e:8b:99:f3:74:70:2a:05:d6:c4:
         c0:c0:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:34:06 2026 by rpki-client