Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
File:                     7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json)
Hash identifier:          dAqdQGADjx5DTdvzhuHZVh8zoEmp/qjfPBfa4SVJizc=
Subject key identifier:   15:B9:9A:56:8D:5A:6F:5F:2C:C3:B1:1E:86:40:38:B3:6D:5F:1C:EA
Certificate issuer:       /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial:       010D0C9F4328584EED52202C909A5B7C583B7580
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     400918
IP address blocks:        2602:f999::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:20:2c:90:9a:5b:7c:58:3b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=e3b3bbc2-1b54-457b-8a78-51787d773ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:2d:95:89:5f:2a:f6:56:76:2b:df:e8:d4:
                    00:f1:34:9c:26:ed:b3:3e:32:d9:0e:5e:ca:6a:ab:
                    3b:fc:ec:65:d6:32:24:61:65:cf:9f:8a:36:4f:d3:
                    1d:27:81:30:c8:65:67:9c:15:9a:65:98:29:cf:03:
                    b4:2c:b5:11:32:3a:32:2b:18:4d:bd:59:88:85:99:
                    c0:5a:e0:22:8a:64:5b:43:76:43:fa:e3:90:2f:ea:
                    17:c7:2e:8d:32:ae:30:b8:eb:7d:ca:ab:4f:cd:66:
                    1d:29:a1:e8:f6:b7:30:6a:b2:35:9a:96:b5:de:b7:
                    fc:6d:3a:45:ce:62:50:79:c6:8e:46:88:e3:d0:41:
                    7c:a5:52:92:58:91:ac:4b:dd:e9:0b:49:46:9d:cc:
                    9a:0a:24:dc:db:79:d6:74:6e:6e:8b:25:c6:1e:b2:
                    81:2c:e0:04:5d:7e:82:76:82:00:c8:6e:c2:0b:cc:
                    8a:a4:0e:df:25:19:17:84:54:c5:35:a4:82:68:fb:
                    47:d8:5d:20:bc:8e:6e:f5:da:f0:ef:f8:1b:c9:6f:
                    91:d5:51:44:e9:96:b8:39:8e:09:43:33:ac:22:a9:
                    7c:cd:f9:1f:c6:47:0f:62:ca:fb:34:e9:d3:79:b2:
                    2f:80:d9:ca:b6:5a:84:27:0b:40:69:ba:06:b3:19:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B9:9A:56:8D:5A:6F:5F:2C:C3:B1:1E:86:40:38:B3:6D:5F:1C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl

            X509v3 Authority Key Identifier:
                keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f999::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:83:96:7c:66:89:6f:33:f6:12:42:7f:3b:58:29:df:d4:
         33:d1:18:c3:20:1f:46:b4:10:9b:2e:d5:4a:64:1d:42:91:2e:
         7b:a8:cf:0d:7f:1a:42:7f:b5:23:00:88:a0:b7:cc:5e:92:72:
         46:66:2c:85:5c:6d:4a:82:76:96:30:ae:4f:00:cd:39:dc:15:
         5c:ba:d1:1e:0f:d9:ad:e5:f1:04:23:14:3a:4b:7b:ff:ff:b7:
         9b:39:d1:11:9d:d4:df:c8:2d:37:26:a7:95:96:87:47:f4:56:
         63:99:df:79:26:e7:86:31:50:35:14:97:4b:a4:8c:3e:e3:d9:
         e5:1f:79:28:05:e0:cb:b4:48:c6:37:cd:6f:62:1f:fa:a0:cd:
         d2:da:65:5c:66:88:e6:ea:89:81:4f:ef:c1:74:9e:88:c7:23:
         27:ae:88:e1:d5:a8:07:aa:af:e7:24:bf:8d:e3:72:b6:e0:87:
         b8:3f:9b:79:32:45:16:bf:46:7a:b4:44:e8:d1:5a:0f:43:73:
         63:4d:d7:e0:16:d2:f6:dd:b2:2a:a4:4d:af:30:fc:fb:1f:d3:
         50:fb:4d:2d:ff:32:6c:e4:6b:7f:fc:c1:33:1e:b3:c8:e6:c9:
         b9:db:ed:fc:97:20:15:49:4b:4c:57:ed:8a:cc:7c:d5:9e:48:
         a7:a2:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:21:01 2026 by rpki-client