Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa
File:                     3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa (raw, json)
Hash identifier:          UUW0hGiKpeqWoaf2lt1K7LPm8sYg6CqT0AT1/cOb21Y=
Subject key identifier:   83:D3:B9:CA:0F:AE:E1:1E:79:B5:B8:FF:11:9A:88:5F:17:92:06:29
Certificate issuer:       /CN=8c1e504b-f881-4524-a98f-2a623e4a476d
Certificate serial:       010D0C9F4328584EC0A72706171C63D8064F0E80
Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396952
IP address blocks:        2602:fec2::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:27:06:17:1c:63:d8:06:4f:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=4e95a482-243f-4dda-a353-28a6e19d045e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:46:26:e5:40:10:a8:1e:cf:5b:aa:03:0b:
                    37:7e:51:eb:1e:79:b8:6f:07:d6:4d:be:be:18:af:
                    8a:d2:c9:81:0e:d3:31:43:77:20:bb:95:af:11:2b:
                    f6:78:70:50:10:35:d6:ee:2a:7e:1e:e5:1f:eb:e9:
                    58:dc:30:e1:fb:e4:48:62:45:bd:99:cb:ed:a8:c2:
                    7f:69:35:93:e2:ad:57:7e:6c:df:11:24:8b:e0:8c:
                    76:db:67:17:aa:5e:5b:dd:b7:c9:50:6e:6c:fd:40:
                    56:79:0c:2d:4e:e7:e6:0a:09:2a:b5:3a:96:10:db:
                    1c:eb:e8:79:f5:6b:08:98:14:66:ef:ac:00:3b:bb:
                    ae:27:15:08:83:2e:0d:2b:48:f6:29:36:fa:91:b7:
                    56:ed:9a:59:45:ae:37:b7:b4:75:f3:de:8c:c8:36:
                    a1:7e:ed:77:0f:e4:85:78:9c:53:78:04:8e:eb:31:
                    bb:df:0b:09:53:01:67:3a:aa:9d:46:a3:35:d0:13:
                    a3:4b:f8:81:d2:0e:28:a1:4f:87:d6:f3:a7:19:d0:
                    c5:ba:76:fa:4f:1b:43:fd:28:35:ef:ed:75:b5:73:
                    3a:a4:52:57:7b:a3:59:75:27:9b:55:51:6c:c3:e5:
                    d0:93:7c:02:b5:9a:d1:a4:17:44:fd:21:0e:35:2a:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D3:B9:CA:0F:AE:E1:1E:79:B5:B8:FF:11:9A:88:5F:17:92:06:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:8a:8c:0b:1f:df:f2:1f:3d:28:a2:6b:aa:1c:7c:9b:c2:
         29:5a:a2:8a:f7:12:e1:d1:da:98:9a:1a:48:4c:e5:5e:7c:e4:
         7c:62:de:d9:f0:dc:82:69:f8:fd:43:31:23:68:5b:5d:f0:9f:
         e2:b8:0e:61:7d:1a:01:0e:25:78:ba:9f:a6:96:e8:eb:fb:ff:
         c8:21:25:cf:07:f7:ba:19:49:a0:46:d2:f9:d5:ab:3c:e9:1e:
         6f:0f:bb:12:45:13:1c:fc:f9:9a:17:66:61:31:75:c5:0d:8a:
         7e:68:3d:de:c3:24:a4:c4:2e:cf:8a:99:ea:54:33:8f:74:4b:
         38:74:6e:0b:17:fe:68:9f:80:80:c8:98:0a:2b:61:de:15:f1:
         c8:48:b0:6f:be:96:9a:78:9a:c0:a5:b1:ed:56:ba:ab:43:c6:
         b6:33:bd:fb:09:36:ce:95:4f:54:38:4a:5f:4f:d0:57:82:49:
         11:cd:e8:97:df:66:cc:12:16:9b:41:05:1a:1e:34:6f:1e:ce:
         21:00:d6:75:8e:48:95:88:f7:61:a8:b0:4c:62:69:6b:01:b2:
         c9:9f:c5:80:94:0a:dc:ff:75:24:ff:c3:04:4f:06:ff:2e:ca:
         00:d8:df:6d:fe:e0:6b:d8:34:79:90:61:69:d4:63:bd:2c:6c:
         21:f7:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:41:58 2026 by rpki-client