Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
File:                     a50faf7e-80ed-3540-8863-2e3533723c21.roa (raw, json)
Hash identifier:          WH+xygUTnd4ogTaljcCasp+gLJ/RGPzPPIeTd8SI9OU=
Subject key identifier:   CF:24:DB:BA:58:64:7A:79:94:4B:12:B8:93:5B:77:29:94:23:8B:D6
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F4328584F49751FFD049719C1B2076F80
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        2602:814:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:1f:fd:04:97:19:c1:b2:07:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7521fc71-0ad4-4310-8281-ae9d515e189f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:2f:b0:f3:12:53:60:8d:de:18:93:f8:d9:
                    2f:7d:8e:32:fc:7c:d9:fa:3e:01:b3:ce:2a:eb:2c:
                    e5:94:81:18:57:18:82:8e:6b:2a:91:2a:0e:9c:f6:
                    f2:a3:24:2f:53:83:f5:76:55:ef:7b:31:9c:48:92:
                    c0:8b:e1:d8:bf:64:eb:16:f3:1b:ad:37:00:78:41:
                    1a:e7:89:8a:a0:44:5d:b4:14:88:6d:b6:ce:ca:08:
                    98:30:16:83:d7:17:70:29:f5:4e:83:f7:37:a7:9d:
                    2e:d8:d1:7e:97:2e:0a:a3:eb:0c:c6:fa:9d:3b:26:
                    72:9a:33:3d:e1:d0:c1:3a:05:08:b2:32:3f:90:7b:
                    cf:48:26:37:5d:e5:ae:ad:31:1c:ec:91:5b:f0:35:
                    36:62:4e:6d:99:56:4a:7a:dc:0b:66:6c:0b:ab:2c:
                    13:04:c3:0b:b7:97:88:c1:95:13:19:ec:20:24:a3:
                    b5:f4:ee:6b:ef:0a:26:c6:67:67:d6:32:30:cf:81:
                    b4:f1:70:b3:0d:45:df:1c:10:2a:2a:8b:7f:87:98:
                    85:7a:1a:74:15:9e:69:56:2a:af:32:bf:36:93:e9:
                    64:5d:ce:83:1a:cd:4d:2c:fb:df:6c:f7:16:8e:16:
                    d1:56:0b:8b:61:75:41:49:b7:4e:dc:26:b4:25:09:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:24:DB:BA:58:64:7A:79:94:4B:12:B8:93:5B:77:29:94:23:8B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/a50faf7e-80ed-3540-8863-2e3533723c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:ba:86:91:55:12:2b:1f:28:14:80:b0:46:e6:02:90:83:
         85:8e:21:46:55:b2:8a:73:79:b4:6a:fa:ac:98:65:65:21:c3:
         1e:22:0c:bf:de:76:85:14:3c:d4:3e:74:5a:3a:79:ac:85:fa:
         da:3b:37:5f:c9:da:6c:94:0f:dd:3b:15:6b:33:03:22:04:9d:
         ce:95:e1:b0:2b:9c:f9:c1:b6:17:27:a1:b4:49:4c:f8:10:6b:
         9f:ef:2d:c0:4b:59:15:a8:77:38:2c:60:5c:d3:77:d8:ae:da:
         39:ea:ca:f2:df:83:da:9a:0e:86:18:bc:eb:1d:4d:75:27:f3:
         b6:37:56:c2:44:80:3b:40:b2:5d:c6:6d:82:f3:83:0c:2d:4d:
         01:34:22:53:8d:39:2b:10:17:6c:8e:9e:24:4d:c5:d5:be:05:
         62:95:a6:2d:d1:20:cc:85:d6:28:75:b9:39:b5:83:1d:85:fc:
         ae:97:c5:b7:28:4e:b5:04:e9:5b:e3:f4:f6:db:21:63:ed:01:
         25:d4:e3:3b:dd:a5:60:d3:20:dc:d8:b9:94:85:95:e1:0b:9e:
         77:47:56:15:10:91:0c:ac:07:d8:61:2b:59:a6:7f:8c:77:3a:
         65:96:d8:40:c5:11:ba:31:a0:c9:36:6a:e0:23:35:62:e6:04:
         e8:b0:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:26:20 2026 by rpki-client