Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
File:                     1c903dbb-5b56-3ede-a164-06247de4e016.roa (raw, json)
Hash identifier:          xYI3RL3PPWwDtXNk177crG3kCkfw1GFGa+u/3UXMVKI=
Subject key identifier:   1E:7B:4D:72:80:0B:78:C0:32:6A:27:89:A9:C8:48:59:9B:7F:69:41
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584EC63C79539645F00CA3F980B8
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     401100
IP address blocks:        2602:f972:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:79:53:96:45:f0:0c:a3:f9:80:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=6a3bc1af-3b3c-49df-9f4f-d854710b5331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:30:28:40:b2:21:d3:60:5c:ac:8d:dc:d6:
                    af:49:ea:6c:50:0d:3c:f7:4c:5c:0a:87:70:e9:21:
                    2b:0e:d1:d8:bc:b3:b6:a2:02:fc:0b:d9:03:56:f4:
                    d6:54:d7:4f:cd:0b:53:09:ba:91:ad:86:8b:4f:fc:
                    bf:cf:53:ca:79:0f:c5:15:71:d3:2b:e9:bf:34:f9:
                    f2:59:9b:35:11:fd:8a:ed:95:7a:38:2b:5f:f5:ac:
                    f4:25:d2:e6:a5:9d:85:54:aa:d2:8c:22:97:1c:0f:
                    4d:62:c9:99:5f:92:ef:8f:58:d9:f4:f8:9b:45:32:
                    bd:a7:8e:c1:c4:50:86:1c:c8:8c:30:b2:fc:6e:4e:
                    f0:bf:bb:1e:8f:93:46:db:25:d1:1b:bc:be:08:7d:
                    c5:aa:c3:9f:f2:18:a7:7f:e5:01:26:7c:1e:8d:b4:
                    5f:0a:d5:13:6a:f1:e8:3e:3d:2e:8d:b9:a7:c5:db:
                    13:fe:b8:44:33:90:f5:0b:f9:ba:26:e4:cb:d3:09:
                    28:31:43:60:fd:28:bf:ae:cb:fc:a6:99:ee:a9:4e:
                    dd:01:dd:4f:24:ba:d1:0c:57:cc:b7:cc:20:8a:25:
                    3e:ae:79:1b:4f:64:d9:a9:4d:5a:fc:1f:ba:12:7d:
                    fb:f8:c4:d3:b0:89:0c:f7:cf:f0:b7:2d:23:09:9a:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7B:4D:72:80:0B:78:C0:32:6A:27:89:A9:C8:48:59:9B:7F:69:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:f5:79:0d:73:1b:38:57:eb:2b:ba:16:15:f3:64:d5:31:
         c0:4e:7a:51:c4:22:38:6a:24:12:60:30:9d:58:ad:26:4e:76:
         e1:ca:de:e4:5c:3d:cf:45:56:aa:67:85:71:b6:aa:b0:b8:a8:
         fa:d4:7b:9a:1f:43:ef:e8:45:88:2b:4a:96:c4:ee:88:2e:45:
         ec:0b:d2:81:ed:9e:7c:06:f9:ea:2a:90:4e:71:8e:9a:78:f3:
         5b:4f:c8:5c:4b:44:5c:c8:2b:2d:93:b4:e6:75:82:98:1e:aa:
         18:d1:68:2b:8a:45:9d:8b:25:e7:00:3e:03:bc:fe:02:06:b8:
         a4:87:44:db:ec:6d:23:33:1a:6c:6b:78:3e:f6:23:b3:0c:0b:
         16:d3:02:a9:47:7d:5e:91:87:c1:ac:4a:7c:8c:f6:92:ff:8b:
         3f:91:b6:18:08:39:7f:e5:88:48:bf:b1:6f:ec:2a:38:58:5b:
         c6:e6:26:ec:17:51:fc:05:77:ba:1b:1c:d0:80:6a:1f:6d:15:
         16:8c:e3:8d:40:7f:40:2f:a9:3d:10:7e:a7:dc:12:ba:87:80:
         55:84:f5:55:50:86:4b:e4:af:58:39:ef:5e:48:ed:32:8b:44:
         df:c8:06:ed:ce:92:b3:a3:9e:87:bf:d6:96:7e:c9:86:d8:60:
         b1:76:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:24:49 2026 by rpki-client