Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d05608e1-ad8f-3030-a16a-7896f5a0d319.roa
File:                     d05608e1-ad8f-3030-a16a-7896f5a0d319.roa (raw, json)
Hash identifier:          qtojTtRBKh9/CWctQV6+VXd7ujmQiq5bTzxo76TQSlo=
Subject key identifier:   20:7F:CE:C3:C3:08:40:6F:A1:AB:A8:7A:D9:14:CD:03:09:1F:57:D8
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584F119D10B8D9D47A9AAE630400
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d05608e1-ad8f-3030-a16a-7896f5a0d319.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     398493
IP address blocks:        2602:fd37:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:10:b8:d9:d4:7a:9a:ae:63:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=d4a39fae-93f8-40c2-b09d-1c4cc6227e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:4e:52:07:ac:c6:ad:df:1d:01:09:22:7d:
                    5c:d6:94:67:4f:a2:12:7d:da:db:64:42:e5:13:2c:
                    d3:84:b7:a5:40:be:f7:60:98:ee:15:20:ce:80:44:
                    13:51:d0:eb:ae:a7:b2:9a:97:75:d0:85:7a:b5:46:
                    e7:39:53:bf:d6:76:d0:11:a0:66:b2:d8:9a:42:55:
                    d7:f7:b6:03:0c:69:84:df:db:fa:0c:47:b5:d5:30:
                    13:5d:57:00:cf:fd:b7:55:89:c2:9b:c0:b7:fd:06:
                    b2:12:17:55:16:af:8f:53:0f:e1:1f:45:0a:b1:f7:
                    a9:e9:28:04:21:a6:cc:ac:6e:f8:96:94:82:43:cf:
                    86:a5:96:5b:7a:af:fa:27:d7:85:ad:99:55:71:e0:
                    73:4a:a1:f7:b7:bc:d9:aa:9c:3d:5f:19:97:5a:a1:
                    f2:66:11:6f:8d:9e:1e:9e:0d:74:3b:76:75:b2:2a:
                    fe:91:be:33:7b:ca:be:b2:23:5e:98:af:02:8c:a8:
                    8e:30:19:69:05:b8:a4:07:e7:0a:e6:e3:69:a4:61:
                    c5:ed:df:57:e2:4c:3d:2d:4d:10:09:76:36:31:97:
                    a7:3a:c8:1e:86:b4:5d:69:6a:b1:e6:86:a4:2b:65:
                    47:de:bb:2e:28:a4:9f:aa:b2:48:cd:dd:ad:c5:10:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7F:CE:C3:C3:08:40:6F:A1:AB:A8:7A:D9:14:CD:03:09:1F:57:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d05608e1-ad8f-3030-a16a-7896f5a0d319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:a9:8f:50:4d:36:d1:6b:62:56:17:2e:e5:d9:59:2e:7f:
         83:f2:3f:87:dd:d2:10:6e:29:29:b9:f0:01:4c:33:c5:e3:1d:
         ac:a8:38:cd:0f:1d:a3:bf:14:3e:3c:96:b7:a9:63:35:ed:5d:
         7f:1d:d6:cb:1b:f8:75:8e:9e:e8:ed:a4:ea:7c:3d:70:ed:4b:
         73:6b:e5:c4:41:34:08:71:56:07:07:7e:15:51:1e:f1:67:6b:
         23:de:1e:e3:1f:e0:ff:c3:66:83:e1:b4:9d:0c:bb:ca:f9:d6:
         19:73:ed:2e:00:55:ab:6d:bf:ac:55:0e:ec:42:28:25:6d:36:
         07:db:12:58:7b:95:74:64:5e:70:be:f6:da:c6:66:6a:44:65:
         ce:21:3c:98:33:4a:20:2f:59:7e:53:cf:31:29:07:20:47:b4:
         34:cc:99:c9:55:4e:24:d7:10:55:34:3a:52:97:84:1e:15:a7:
         f1:d6:ff:64:8a:fb:01:05:09:19:bf:72:70:e5:87:d5:cc:2e:
         13:90:5d:5f:3d:2c:03:2a:ad:45:f2:0b:85:d8:40:ec:f1:1e:
         ad:3b:69:94:55:0c:f7:8c:f0:ff:dc:1f:68:6b:b3:ba:2f:0f:
         aa:61:3c:d4:41:72:01:87:b6:0e:97:bc:56:52:a1:47:80:0d:
         e0:6e:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:40:03 2026 by rpki-client