Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/1ca78e5b-a48b-3ae3-abc0-826290d07025.roa
File:                     1ca78e5b-a48b-3ae3-abc0-826290d07025.roa (raw, json)
Hash identifier:          gnrKLiz3o1CbngCbknhtGNSnGaGZBWOPBmChxeJscPU=
Subject key identifier:   EC:0F:D7:60:D7:1F:5E:48:56:E6:54:A8:0E:F5:18:47:34:F2:CF:2B
Certificate issuer:       /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial:       010D0C9F4328584EF46C48FE1D2C493880608600
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/1ca78e5b-a48b-3ae3-abc0-826290d07025.roa
Signing time:             Tue 25 Aug 2026 14:03:56 +0000
ROA not before:           Tue 25 Aug 2026 14:03:56 +0000
ROA not after:            Mon 23 Nov 2026 15:03:56 +0000
asID:                     401368
IP address blocks:        2602:f82d:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:6c:48:fe:1d:2c:49:38:80:60:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Validity
            Not Before: Aug 25 14:03:56 2026 GMT
            Not After : Nov 23 15:03:56 2026 GMT
        Subject: CN=9908730e-7fae-4a2d-a18b-2be3d1ddf322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:a0:0c:b2:f5:e1:fb:db:dc:9b:89:7c:f8:
                    5b:e6:47:29:f1:01:84:14:62:76:3a:0a:c6:24:24:
                    b6:b4:59:4e:06:48:9f:2e:fb:8a:30:cf:6c:b2:24:
                    9a:71:e7:8a:af:fd:fb:bf:0b:d2:b6:de:2f:6a:b4:
                    ed:26:5e:32:75:27:8a:3a:4b:10:fb:1a:7e:c8:8d:
                    4c:b7:ea:37:14:4b:17:33:cb:21:9b:89:89:d6:c7:
                    ea:05:f1:7c:5c:04:7f:94:c5:02:77:96:d3:6c:91:
                    00:6c:db:ad:ef:b0:6b:4f:a4:01:f8:4f:18:d9:db:
                    52:b6:e0:05:3d:2e:18:32:63:cf:fc:40:82:0d:9a:
                    e1:58:63:2c:bf:18:6a:e3:07:1a:d6:e6:15:c3:16:
                    0d:a8:e8:b4:e9:a5:d5:d7:6e:1f:a8:e2:b4:56:bf:
                    37:f1:96:ed:dd:f0:50:8b:c7:b4:0c:84:83:4d:6a:
                    da:cc:92:a7:79:ce:a8:64:8a:e6:4c:30:93:f9:e9:
                    a7:a2:de:66:a8:63:0c:6d:98:93:0b:c8:47:7e:fd:
                    19:b2:bb:07:71:fc:10:b0:37:72:b6:21:72:2c:09:
                    cf:6c:57:34:a6:27:b7:0f:dc:1a:4c:db:d9:d6:33:
                    e4:cd:c5:a7:d9:6f:8d:e0:0d:5e:28:c4:86:22:77:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0F:D7:60:D7:1F:5E:48:56:E6:54:A8:0E:F5:18:47:34:F2:CF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/1ca78e5b-a48b-3ae3-abc0-826290d07025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f82d:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:57:7b:02:ba:7a:2f:08:86:70:f6:7a:11:0f:22:4d:9a:c5:
         ae:e5:db:89:8c:08:07:16:89:04:8b:48:8d:0b:5a:ed:fe:25:
         ca:4d:f4:45:b7:0e:ab:7c:27:72:84:94:05:fe:68:a4:cc:50:
         36:f9:0d:fb:4c:6d:f6:8b:fe:66:ec:f0:18:43:a6:c6:7a:e8:
         35:48:2e:88:09:9c:46:e5:c0:09:18:ef:b6:b9:84:e8:e4:c2:
         5a:37:ae:59:bd:f3:e4:fe:26:61:43:b3:95:4a:09:a1:2c:2b:
         0a:bc:69:82:80:bd:ac:53:de:32:c4:3a:d4:00:3c:5c:d9:d6:
         09:21:08:d4:3f:f1:61:8b:19:4c:16:8f:38:56:f2:0a:ea:25:
         0a:2c:5e:c0:db:30:ee:b3:5c:6d:35:3d:6c:27:02:e5:74:f7:
         18:c7:a4:d3:5c:ab:ed:a4:80:7a:f9:57:fe:b7:d0:a7:1f:bc:
         24:06:2c:cc:69:5a:7d:71:64:b6:d1:6d:a8:4c:14:3f:24:7e:
         36:b9:94:8b:dc:fd:80:e7:f8:51:d8:cc:e7:d9:d2:9b:90:16:
         ae:c4:89:1a:e0:da:60:ef:58:c7:ad:f6:45:60:4a:1e:84:74:
         32:35:61:77:d8:5c:eb:d8:7e:47:c9:80:ec:85:1f:31:59:99:
         2c:5d:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:30:16 2026 by rpki-client