Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa
File:                     1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa (raw, json)
Hash identifier:          FVgNPaKhBaJBFetHy3e03u7/EA97/SxQOODu/dzp3NU=
Subject key identifier:   E1:3F:2D:66:19:47:83:68:F1:66:6B:65:26:8D:18:FE:40:76:F6:BB
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584F7E7DCC079EE1664796F2D1C0
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     400919
IP address blocks:        2602:817:2000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:cc:07:9e:e1:66:47:96:f2:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=32b67633-e20e-4bf5-b673-2a88441f38a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7e:97:a0:99:74:a9:79:f1:c3:be:a2:58:80:
                    2f:9d:95:1f:0d:e3:78:62:a2:9c:79:0f:34:ee:0d:
                    82:24:14:19:05:b4:78:71:95:17:c9:08:52:eb:e7:
                    ed:63:33:98:ca:47:bc:53:c2:84:87:05:1a:9c:b8:
                    4b:2a:be:80:de:a8:29:19:b7:49:42:c3:93:c9:89:
                    43:2f:13:d2:4a:df:2a:b2:00:0b:b7:0e:a7:a4:8d:
                    01:d3:64:f8:e2:6a:d0:77:bd:76:35:af:0c:9a:4c:
                    6f:82:e8:a8:cc:38:e9:fa:9f:1a:56:71:7b:14:a3:
                    f0:ce:45:1a:42:91:ea:8d:12:bb:7f:41:5c:13:c5:
                    91:39:6e:bc:45:fe:1b:95:4c:aa:7d:c3:d3:2d:b9:
                    0a:7a:f7:20:75:44:70:6b:84:2a:6b:ae:fb:4f:93:
                    90:a3:12:ef:1d:79:46:ad:5e:0b:99:6f:70:f3:bc:
                    59:64:18:71:d0:cb:8b:ac:3d:64:a9:d3:fd:c2:dc:
                    a4:12:b7:cc:4d:2a:0f:d3:ba:39:8d:ef:c7:c1:a7:
                    2d:88:e2:cf:5b:e5:04:c4:2a:ab:32:14:22:81:e5:
                    8e:a3:96:25:17:a2:d7:3e:c0:f5:09:41:ae:05:fb:
                    39:0e:9b:ad:4c:33:67:9d:61:7c:34:e1:74:6c:b3:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3F:2D:66:19:47:83:68:F1:66:6B:65:26:8D:18:FE:40:76:F6:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1b83cec9-d72a-399f-8798-eca9e3a6ba3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:5c:f9:42:f1:c4:e9:e6:a7:f8:bf:52:55:a7:5e:4b:d4:45:
         31:32:ce:a0:4f:7e:cb:50:82:12:05:ed:6d:06:d7:86:e9:e3:
         2a:a7:c2:b8:b4:27:41:54:7f:46:1b:48:9b:57:31:85:a4:5c:
         e9:d6:ef:2a:f0:43:21:29:78:2b:dd:2e:62:1d:b7:0f:86:1f:
         a3:05:d1:49:a3:16:39:65:43:80:97:8e:0e:62:cd:00:b5:39:
         93:39:4e:9f:a7:4e:59:33:8f:dc:fa:89:bb:6d:dd:cd:72:1f:
         e8:b3:47:40:55:1c:7f:1e:9c:1f:5e:18:57:6f:69:89:1f:62:
         5d:b3:82:91:e6:2c:df:af:94:56:13:3b:37:8c:20:f2:b7:da:
         46:2a:fc:b1:e0:28:97:58:f2:e3:cc:c7:2a:33:d9:db:7e:ea:
         25:b5:8c:ef:33:d9:4c:84:3a:47:a4:aa:13:7d:be:c7:cf:a7:
         0c:f4:d3:f1:f4:91:fc:c4:65:c0:78:01:45:c0:b1:33:a2:8b:
         2a:7b:ec:6a:72:1b:40:ed:71:97:a3:5c:fd:ed:1e:5b:f2:c0:
         f6:b0:5d:34:bd:99:eb:34:58:53:6c:44:cc:0b:d1:87:c7:bc:
         ba:22:5e:7e:f4:32:8f:6f:4f:5a:7f:44:d4:9a:01:c2:59:98:
         0d:cc:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:28:37 2026 by rpki-client