Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa
File:                     79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa (raw, json)
Hash identifier:          on3Z0hYs4+Qc+B+KwUUIuPEl23mgQgGLNXRYQkKUwZA=
Subject key identifier:   5D:10:E4:AC:0B:1B:18:D0:64:19:94:4D:4F:3E:32:EA:34:ED:F0:F7
Certificate issuer:       /CN=02e3db6d-40b5-4639-a499-a02b80a4befe
Certificate serial:       010D0C9F4328584F4C3D7834B8780F713AC7DB20
Authority key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     62488
IP address blocks:        2604:cc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:78:34:b8:78:0f:71:3a:c7:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e3db6d-40b5-4639-a499-a02b80a4befe
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=728ff09a-6150-46d0-bb95-7d0869cee350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:aa:49:8e:83:82:b6:07:4b:43:f2:29:a1:
                    58:9d:c2:8a:98:e4:3c:52:f0:05:88:71:7a:b5:9f:
                    54:a1:f1:88:73:87:bc:2f:6d:07:1f:ce:0e:b7:6a:
                    bb:4c:bc:c5:3d:95:2c:67:6d:03:9e:72:ee:2c:10:
                    7d:f2:b6:cc:2a:8d:6b:ea:90:79:a7:12:cd:ba:0c:
                    dd:ad:fa:36:1f:21:76:66:06:9e:a6:27:11:56:1b:
                    8f:90:43:3e:80:01:55:84:3a:66:91:e6:23:7a:7d:
                    c8:63:c0:2a:0c:36:bc:39:16:c8:8b:21:db:72:3f:
                    49:ec:36:85:9b:9f:0b:e2:15:1e:f2:41:75:62:fe:
                    5d:35:d2:ca:ad:2a:6e:28:fe:b1:da:6d:f7:7c:ea:
                    8d:d3:72:17:9a:04:2b:78:e6:c0:c4:5a:5a:47:c5:
                    09:3c:ab:cf:a1:f4:03:ff:48:43:5f:56:b8:70:ca:
                    25:c5:89:b3:b2:4d:89:17:72:b1:10:9a:10:d6:35:
                    67:a3:07:e2:70:26:63:6b:6b:17:f6:c2:bb:5f:32:
                    98:8e:e0:cb:73:46:84:64:ad:31:f9:b3:b9:4f:a1:
                    2e:11:44:95:ad:d1:c0:f8:cc:f5:17:08:e7:e8:f8:
                    02:da:79:24:3d:29:b0:76:28:46:f8:8b:f3:04:f8:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:10:E4:AC:0B:1B:18:D0:64:19:94:4D:4F:3E:32:EA:34:ED:F0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl

            X509v3 Authority Key Identifier:
                keyid:CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:01:8b:b8:76:f9:7c:37:46:1e:4a:f1:29:5a:58:9b:e6:af:
         1c:1f:80:6c:04:ef:7b:ed:f5:cc:6f:41:9a:83:e7:f4:51:dc:
         1b:f8:44:dc:fe:f5:b1:f5:51:59:3e:9a:09:93:5a:d7:b6:12:
         83:16:7b:fe:cb:c5:e3:3f:86:9d:fa:e9:fd:88:d9:9b:1e:44:
         e7:23:e6:3c:d2:9e:e8:3d:6e:92:36:a8:bc:20:87:33:07:dc:
         de:5b:f8:46:b9:ea:c6:77:31:33:50:9e:16:26:4a:9a:d7:93:
         96:09:ad:1c:22:48:05:b7:e8:c5:b6:6c:48:9d:6e:2c:a5:71:
         03:81:f5:e1:24:2f:73:4b:0d:e4:e7:cd:08:2a:a9:c6:03:44:
         99:c7:92:08:c8:e1:d9:bf:3b:87:64:73:9f:52:16:5b:c6:f1:
         d8:df:33:fd:da:34:38:c9:8d:ea:4d:5e:86:0a:98:ae:02:2f:
         c9:3d:ba:a5:49:09:81:0d:d8:be:7e:66:3c:10:29:33:5a:96:
         cc:1b:fc:5f:3f:5d:45:e0:dc:47:61:de:02:8d:6f:21:55:a1:
         02:b4:55:fd:5c:82:f1:04:28:37:ee:83:14:33:f1:c9:ff:13:
         80:31:37:1a:57:50:a6:f6:0d:68:62:17:65:cf:77:dc:e6:15:
         73:a9:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:22:13 2026 by rpki-client