Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
File:                     1e11158d-d12e-3742-bcfd-5fbe33e79773.roa (raw, json)
Hash identifier:          wbQ57HkexQIlbGd8HE1VHoYvd8QLD3JYnMIMt1dkuAw=
Subject key identifier:   9F:E7:05:84:0A:9D:A1:62:F1:C3:66:C8:E3:B1:09:D7:0F:FA:36:A7
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584EA79749878CFD859A100A3BA0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29802
IP address blocks:        2602:f972:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:49:87:8c:fd:85:9a:10:0a:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b70070ba-044d-42fa-ae1e-b657127319c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:6b:d2:9e:bb:23:c1:16:06:98:98:ec:9a:
                    d1:4a:cd:e3:59:6c:93:c0:a0:39:51:d6:17:b5:a2:
                    57:cf:7f:1c:3a:bb:66:d3:99:95:1c:fc:1d:1a:a1:
                    e4:22:b6:94:85:99:5c:f8:f3:0d:f0:85:3e:80:d2:
                    d0:a4:78:84:ef:ef:48:43:66:1c:d4:aa:d1:65:a9:
                    90:b8:c8:b6:b0:7d:16:4e:77:77:6a:c9:1f:ef:c1:
                    4c:0f:2c:45:9a:b4:3f:d7:84:70:40:47:aa:5e:77:
                    fc:69:63:d0:ad:4b:dd:c1:df:f6:92:49:b1:13:ad:
                    cc:a7:b9:41:40:4e:3c:c8:24:b9:77:32:57:ce:63:
                    43:73:15:7d:f4:9f:e8:e4:0d:cf:f2:17:55:c8:80:
                    12:db:8b:fc:ca:bd:07:e4:d4:a0:4d:91:b8:fe:6d:
                    32:0e:0a:1a:41:9f:2a:32:58:ae:83:f6:96:10:98:
                    04:83:14:55:26:c2:fc:ae:ed:88:bb:8b:42:5f:6d:
                    4c:62:22:6a:9d:9f:13:16:9b:e3:d7:bc:3b:fd:67:
                    5b:15:d9:4f:7f:ca:be:ee:3f:33:c9:cd:02:44:c4:
                    d9:32:da:bd:a6:08:de:b2:56:4a:d0:76:28:7c:ca:
                    3d:97:a8:3a:e0:27:3b:97:57:29:a6:2c:08:b0:33:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E7:05:84:0A:9D:A1:62:F1:C3:66:C8:E3:B1:09:D7:0F:FA:36:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:6e:c9:03:89:22:93:bb:4e:b4:0d:45:16:51:5d:c0:1f:
         7c:f8:e5:4f:d3:bb:2d:25:6e:9f:48:0b:a1:48:a4:d7:ac:98:
         cf:b6:06:36:7b:8b:d9:98:b5:31:2d:c4:0c:48:d0:d3:b8:ad:
         09:41:cf:26:83:12:d4:ba:1d:b1:b4:3f:48:58:21:70:e5:ee:
         73:3c:45:81:b3:0a:5e:52:39:03:23:7f:a2:99:80:ee:9d:9c:
         e5:f0:f0:7e:23:76:9c:aa:77:db:b0:3a:96:5a:47:bf:b3:54:
         13:2e:3d:05:23:c2:65:22:70:c6:26:92:51:9d:d2:9e:31:f0:
         8e:a5:1e:19:c6:c3:c2:5e:30:be:aa:18:59:f4:7a:70:70:b5:
         f4:1e:f0:6b:d2:b0:62:36:95:67:72:fb:e1:2b:d7:61:0a:89:
         2b:8a:a1:0f:0f:d5:bb:db:31:d4:ef:a7:82:f4:4a:2b:5b:45:
         77:07:62:37:1f:bd:2f:e0:bf:0f:a3:61:80:44:be:af:95:79:
         38:24:21:c1:36:ce:d3:f6:98:bf:e3:29:5f:3e:93:de:77:73:
         66:ae:38:2a:8a:e2:8a:04:af:1e:10:68:c9:e0:85:49:8a:12:
         6a:d8:c0:4f:b7:3d:24:89:b8:99:62:d7:1c:0c:66:e8:32:e3:
         40:6f:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:38:48 2026 by rpki-client