Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa
File:                     a1830fbd-80fd-365e-833e-215463a0658b.roa (raw, json)
Hash identifier:          6p2Zq2cn4x78+h7Wcp4iFrCYnnpZ5FjU6pUHQul9YY4=
Subject key identifier:   BF:41:FA:65:21:D1:7A:F5:EA:6B:73:4F:7A:39:0E:5D:98:CD:7C:A3
Certificate issuer:       /CN=d7c75743-409b-41fb-b744-8345baaf599b
Certificate serial:       010D0C9F4328584EC0A72B83E46404D2F9F7E840
Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     20373
IP address blocks:        2602:f939:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:2b:83:e4:64:04:d2:f9:f7:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=0b22a33e-e2c8-41aa-8d5b-e81a9d4234b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:b2:d0:c5:a5:67:82:19:6c:98:55:c5:ad:
                    9b:db:79:c5:fc:60:7c:55:21:6a:e7:50:b5:90:47:
                    29:fe:88:92:f5:89:fd:7c:cc:8d:f6:12:2e:f2:e7:
                    44:98:47:20:fb:39:b2:62:73:87:d3:cb:3b:8e:c5:
                    1a:a6:62:15:74:4b:bd:57:08:6a:22:fc:46:bb:6b:
                    dc:6c:61:c1:0d:f7:18:18:78:11:96:44:bd:e9:af:
                    3e:99:8d:2a:7d:67:5f:ea:5f:08:28:86:a9:83:08:
                    a8:a2:f6:37:88:51:d6:bc:16:fe:91:38:a4:4b:bf:
                    62:bb:da:36:4d:e3:e5:0e:c2:08:d4:1d:2c:a0:1b:
                    09:a4:91:28:98:a3:49:e4:c9:1f:35:d7:cd:a7:ea:
                    f0:90:4d:e1:39:fa:f2:47:51:d0:2e:89:81:87:03:
                    a1:8c:ee:22:56:75:11:e2:55:ac:7d:7e:44:67:77:
                    4e:c9:fb:92:12:7e:94:76:be:40:f0:09:ce:3d:21:
                    08:e9:3a:cc:26:d8:4b:f4:32:44:73:2a:56:77:e6:
                    b2:13:c8:93:1d:c6:83:68:f6:bf:61:39:a2:e5:88:
                    41:4a:8e:05:ab:13:b7:2e:9e:f3:b6:35:2f:0d:89:
                    f4:c0:35:51:7c:26:ad:46:ec:54:c4:dc:81:7d:cf:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:41:FA:65:21:D1:7A:F5:EA:6B:73:4F:7A:39:0E:5D:98:CD:7C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl

            X509v3 Authority Key Identifier:
                keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f939:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:24:10:8a:da:de:22:de:ae:ff:30:50:bb:a6:8b:8c:05:
         12:7f:60:8b:3a:d9:55:89:5b:c9:10:de:4f:0d:26:1b:7d:ad:
         ab:50:71:89:cd:e2:70:30:26:ea:0c:22:c1:90:67:9b:64:67:
         3f:8d:d8:51:33:6c:ff:21:ec:dd:aa:b3:01:0e:40:3b:17:ac:
         88:6f:cb:a5:82:81:ec:68:7a:0c:d1:7a:08:be:f9:2e:b3:df:
         13:dd:85:4c:b3:6b:05:53:fc:7a:c2:a1:7e:5f:ec:91:e8:ca:
         2a:34:42:53:c7:ed:a7:cd:b6:bb:79:59:32:15:43:c2:1d:1f:
         d6:db:45:f4:e5:07:b5:c9:f0:bf:7e:83:89:4b:c2:a5:3e:d7:
         82:8e:01:3f:8a:6b:0f:29:03:5c:11:41:1f:a1:ec:fa:4f:a0:
         e8:15:36:1d:31:b3:78:5d:cc:d5:e0:28:8e:3a:89:10:66:bf:
         83:29:27:bf:8f:3c:a1:9c:3a:49:05:04:3a:10:be:d4:4c:fe:
         85:a3:c0:f8:ed:9b:47:03:ca:12:6a:c4:d7:04:c9:09:1c:a4:
         81:7a:7f:18:c5:18:96:b3:27:1f:28:cf:89:33:6e:52:af:ba:
         f8:c2:90:bc:bf:31:4f:e6:67:8f:6d:c9:fb:d9:c0:41:c6:89:
         6e:92:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:23:58 2026 by rpki-client