Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e9338341-9dae-3be3-8e1d-70e62e0bebbe.roa
File:                     e9338341-9dae-3be3-8e1d-70e62e0bebbe.roa (raw, json)
Hash identifier:          Tba31G9UsZWC8mU5M34KctbuxZxCxpliqYQmJQODfco=
Subject key identifier:   9A:DA:CE:39:FE:56:3D:C5:59:19:E4:19:38:B9:4B:22:55:88:7F:49
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584F66C2C7430B196A0183C73A00
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e9338341-9dae-3be3-8e1d-70e62e0bebbe.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     11017
IP address blocks:        2602:f98b:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c7:43:0b:19:6a:01:83:c7:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=18cba96e-47ea-4fbb-85f5-10e25fe10e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:98:d7:da:e8:64:dd:93:80:13:ba:8d:96:
                    aa:5e:df:97:3c:09:c1:40:b3:46:79:47:b2:c8:d7:
                    c5:f5:02:39:7c:b5:4a:00:80:c1:d5:f9:af:06:de:
                    26:b0:21:a2:7d:88:ad:c6:2f:9d:0e:c8:ed:9e:4c:
                    88:59:08:98:fa:2c:98:7b:26:70:d1:a7:ef:ea:2d:
                    c6:65:22:d2:91:d8:67:54:a4:d3:cf:a7:94:a4:f6:
                    04:d9:29:77:d3:e0:99:73:7d:4d:9b:73:63:e9:24:
                    24:c8:5d:c7:e4:89:a4:ba:e2:ce:9c:64:f4:fc:f0:
                    72:b7:4f:2f:22:77:e9:be:35:32:d4:d4:0c:90:d4:
                    86:a6:5a:b3:88:69:3e:97:01:97:51:0c:34:ba:5b:
                    84:4a:02:58:bb:c2:4c:79:63:99:62:8d:fd:6b:0b:
                    c6:63:72:fc:ff:8a:b3:18:f6:24:22:6e:2b:81:f1:
                    26:af:dd:30:b0:e9:a8:10:88:1d:f1:99:1e:44:d0:
                    f7:ca:c8:8c:a9:f0:e0:d7:68:75:aa:00:1b:c7:20:
                    7d:3a:9e:ed:84:7b:95:f0:7f:3d:3f:51:dd:d6:0b:
                    b2:23:56:95:3f:ae:96:26:be:8f:03:ef:97:5f:3c:
                    32:34:f5:58:05:3d:85:51:a5:d8:b5:a7:4d:30:eb:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DA:CE:39:FE:56:3D:C5:59:19:E4:19:38:B9:4B:22:55:88:7F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e9338341-9dae-3be3-8e1d-70e62e0bebbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4c:75:52:91:dd:e3:c8:bc:0c:7c:16:52:b2:d7:82:e1:91:
         29:3f:a1:72:b9:b1:7c:fc:f6:9d:f0:2b:6b:50:a3:bf:8f:33:
         20:70:2f:e6:25:63:c5:b6:4c:75:21:be:c7:00:a5:f2:ca:9e:
         bd:fd:59:04:5e:63:15:62:ad:00:d7:3a:d1:78:18:16:38:24:
         3d:86:7a:06:2b:ad:67:9e:c7:22:1c:cd:7f:3b:31:06:71:10:
         50:39:ac:70:6f:cc:01:14:fc:fc:57:48:5c:ae:70:af:e3:19:
         be:d7:9c:ea:d4:98:c2:1d:9b:63:84:bc:ed:81:18:25:82:c1:
         42:a4:03:b8:fc:92:0b:91:ff:7c:22:b9:2a:3f:48:6a:41:42:
         af:fb:93:f1:f8:5d:a4:3b:28:67:5f:22:d5:e4:e1:74:c1:71:
         64:23:26:0c:34:ce:d7:73:33:b4:32:2a:c7:8a:ef:d0:ff:7a:
         00:f2:a8:93:31:12:4a:30:f6:d1:f6:c6:94:f1:a0:00:98:72:
         a1:85:44:bb:ed:bd:20:2d:e3:ec:89:5d:7d:06:5e:3f:c2:94:
         19:59:bd:58:58:28:91:1e:94:8c:37:d4:e5:51:84:4b:7f:8b:
         1d:58:8f:89:e4:3e:b4:36:3d:c9:94:eb:2e:4b:f6:a5:5c:17:
         85:de:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:13:59 2026 by rpki-client