Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
File:                     7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json)
Hash identifier:          Abzg9WJJKigYYe5uX3YSWTHTYImUT+XkzbhT1CV4eZE=
Subject key identifier:   97:7D:0A:93:8B:BC:0A:DF:09:D8:6D:D8:3E:CE:BC:CF:50:39:86:09
Certificate issuer:       /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial:       010D0C9F4328584F8F3DCC756535587607122868
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     400918
IP address blocks:        2602:f999::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:cc:75:65:35:58:76:07:12:28:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=76db9f88-e228-4bb9-8dbc-fa28195d45d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:e6:3a:3c:bb:03:22:c1:1c:9e:9a:c9:1b:
                    18:76:6d:c3:ea:cd:88:5c:70:45:95:6f:15:c2:1c:
                    b6:a8:33:a7:5f:a4:f4:d8:06:bb:bf:a9:c0:6d:46:
                    5c:91:16:1b:07:fb:2d:8d:99:d5:f2:5a:53:9f:9e:
                    b0:83:69:13:f9:50:a2:a5:c6:2a:15:aa:d4:3c:93:
                    bb:07:d9:b2:6e:e4:91:83:51:50:f8:af:48:15:06:
                    1b:01:d3:2c:e0:15:85:ee:60:c7:76:c5:f6:49:ef:
                    ec:5d:84:c8:7f:7d:23:e9:e9:a1:fa:86:11:93:37:
                    5d:ef:d9:19:a0:c8:00:41:60:d8:15:e2:ac:d2:2d:
                    d8:bf:f6:e0:42:a7:2b:bb:67:a9:3d:a8:ab:6b:1a:
                    11:9d:59:d0:17:c6:54:ab:fb:82:0e:ef:4f:49:bd:
                    bb:f7:38:0e:35:65:43:0e:52:96:d4:e8:36:3b:de:
                    2d:dc:d7:2a:bc:e5:f1:82:cb:cc:a7:3b:53:36:a3:
                    c3:9a:f3:07:82:51:fc:6b:dc:c4:9a:8e:1f:d7:20:
                    01:a4:1f:39:23:55:8a:99:23:30:a7:c4:91:6a:48:
                    3a:0f:65:d0:e3:fe:d3:77:9a:63:89:62:8f:42:bb:
                    c5:5a:69:8f:11:67:d1:77:6f:a4:20:25:73:0b:7c:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7D:0A:93:8B:BC:0A:DF:09:D8:6D:D8:3E:CE:BC:CF:50:39:86:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl

            X509v3 Authority Key Identifier:
                keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f999::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a5:da:83:ab:91:2e:c2:21:ed:16:c5:1a:df:43:b2:07:d2:
         dd:e7:6b:8a:80:c1:c6:f9:82:8c:7e:d0:f3:21:b6:5e:19:be:
         52:0a:e0:b9:3d:6a:81:c6:c6:ac:b8:30:f6:90:9b:1a:0d:c0:
         30:7d:3e:69:48:5a:a0:25:b9:ed:7e:0d:aa:0b:3f:03:91:3b:
         48:f1:b6:6f:14:31:a0:ee:ae:32:9c:4f:d4:bf:25:4c:fc:6e:
         d2:d4:34:17:bf:43:a6:93:65:af:fd:ca:13:ab:39:9f:7f:ee:
         16:70:5c:61:83:d9:40:2c:64:82:16:67:b2:4b:5b:61:e6:00:
         2b:c7:ee:a0:46:35:db:3b:c5:47:61:cc:fc:be:3c:f5:05:12:
         95:20:a2:bb:54:0d:7f:19:94:cd:86:dc:33:01:50:a0:6b:b7:
         93:4a:6d:78:18:31:45:09:67:61:fe:8f:d2:c8:e4:2c:dc:ff:
         9c:12:e9:7d:85:08:9b:9b:47:34:1e:5b:0a:77:f5:c1:14:12:
         ce:1c:ea:1f:c9:6c:bd:c9:99:fe:f1:2c:d6:08:6b:b9:d6:27:
         82:7e:bf:d7:2e:00:d7:13:c8:b5:52:03:4f:52:56:ad:ac:ae:
         71:4b:2f:13:26:4d:61:b6:6b:59:19:d6:0b:1c:cb:75:0c:77:
         30:37:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:01:25 2026 by rpki-client