Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/49a21d73-cc1b-3928-8f61-51dfd25b8579.roa
File:                     49a21d73-cc1b-3928-8f61-51dfd25b8579.roa (raw, json)
Hash identifier:          Q0GPnWKeDDcRe/XnEMWxJnhG2z//5EvR/4vwqyY4o1A=
Subject key identifier:   F0:1A:E9:62:26:10:57:FC:36:98:DD:98:EF:42:6E:3F:A5:6A:91:CF
Certificate issuer:       /CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
Certificate serial:       010D0C9F4328584F936DA6371F69C0D7B65C5E78
Authority key identifier: 8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/49a21d73-cc1b-3928-8f61-51dfd25b8579.roa
Signing time:             Wed 21 Oct 2026 13:00:12 +0000
ROA not before:           Wed 21 Oct 2026 13:00:12 +0000
ROA not after:            Tue 19 Jan 2027 14:00:12 +0000
asID:                     219289
IP address blocks:        2602:f32a:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:93:6d:a6:37:1f:69:c0:d7:b6:5c:5e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
        Validity
            Not Before: Oct 21 13:00:12 2026 GMT
            Not After : Jan 19 14:00:12 2027 GMT
        Subject: CN=d04eb85e-1eae-4f0f-81fd-b2273f18428d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:f7:7a:40:2b:8c:39:ab:3c:07:d6:98:5b:
                    1a:70:db:a4:d8:51:29:a4:3e:10:91:dd:51:cd:5f:
                    c9:05:3c:c0:90:df:56:06:9e:83:09:dd:17:51:5d:
                    24:cf:13:05:78:47:3c:f8:16:46:c3:40:a2:ff:c1:
                    78:9c:e6:87:c2:c3:76:95:65:84:fe:54:5d:3b:7c:
                    5b:b5:07:e3:e8:1e:83:b2:0d:41:80:5d:d4:b2:5f:
                    df:39:1a:2e:2c:c3:44:af:51:a1:74:1d:98:22:e7:
                    b2:fd:03:e0:3f:5b:78:40:9b:ad:4c:b7:0c:04:fe:
                    88:92:f6:a2:a8:6f:7a:e4:90:22:01:a8:6d:97:df:
                    8d:8f:94:25:5c:20:f6:75:17:7b:0a:89:07:94:c3:
                    97:8a:ce:aa:88:93:87:5a:d0:11:8b:55:6d:de:99:
                    41:a1:e4:78:41:43:5b:bc:72:ab:77:f0:3b:68:3b:
                    dd:e5:77:8d:5d:77:35:97:ae:24:74:cb:d0:98:93:
                    f0:6a:55:ff:c4:67:e5:a1:16:7d:0a:5b:5c:55:d1:
                    a4:90:0c:da:38:05:1b:e1:7d:1f:b4:d0:2d:5a:04:
                    77:5a:80:62:5a:4c:ea:b2:25:c0:e1:57:15:07:d9:
                    ba:38:9b:12:ee:d9:56:85:49:9c:92:03:92:5b:4b:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1A:E9:62:26:10:57:FC:36:98:DD:98:EF:42:6E:3F:A5:6A:91:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/49a21d73-cc1b-3928-8f61-51dfd25b8579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f32a:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:b6:e2:02:0e:de:d7:52:05:77:83:e8:4c:cc:b9:dd:4d:
         85:2d:b3:49:aa:0c:bc:96:ec:0d:b2:6a:b6:92:aa:ba:e7:43:
         5d:c0:35:71:85:d4:c0:ef:38:36:a0:dd:75:c4:ac:b3:ee:68:
         55:f9:65:77:ca:7e:1e:38:1c:83:ca:1b:2a:64:24:11:d0:21:
         19:ca:f2:c8:1c:55:b8:7c:5a:88:0a:b7:ef:b8:ce:cb:4d:92:
         e2:66:ad:14:91:65:b4:fb:e9:ff:9f:f3:76:1e:c7:2a:da:db:
         1c:2a:e0:42:88:4d:76:5e:b7:21:52:d3:21:b7:35:b5:c7:c8:
         8c:2d:3e:14:18:18:58:bc:98:2a:77:22:a5:de:61:b1:5c:58:
         2f:72:56:37:a7:b3:50:15:39:cd:16:55:f0:dd:92:7f:f0:dd:
         02:c2:11:e9:0b:ef:7a:09:e5:55:6e:e1:e1:96:25:39:46:de:
         7d:f4:ec:6d:51:8a:1f:55:ea:51:97:c3:c5:67:48:31:de:ab:
         fb:df:99:97:d0:a7:18:a6:48:e9:42:60:0a:0b:a3:6a:97:21:
         3a:fb:8c:0a:2f:4c:f2:51:3c:1d:2f:52:fd:bb:07:cf:a0:6a:
         2e:ca:0f:cc:be:9a:67:30:3d:51:9b:77:d0:13:d0:94:ed:89:
         bc:da:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:39:09 2026 by rpki-client