Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
File:                     8772ccd6-b189-3648-86b4-02b297d28b4d.roa (raw, json)
Hash identifier:          QGHHxXXj82IWOUlW5jx88hmHTsI1wiA6tohUOLaLIEg=
Subject key identifier:   CE:4C:FB:80:6E:EE:E5:53:27:F1:99:05:3D:CA:65:9B:8B:AC:54:2E
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F4328584F82AD9CCF641F1CF74ACC0580
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     19168
IP address blocks:        2602:fd23:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:9c:cf:64:1f:1c:f7:4a:cc:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=2c1c2f3a-dce3-4fe2-a23d-ccc053ee689c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:73:3b:f0:8b:52:66:82:4b:d1:24:d1:53:
                    a0:01:4e:31:b1:1f:9e:b1:84:67:59:f1:3e:1f:4c:
                    d6:a0:18:b4:9c:9d:d6:40:06:ef:cf:c6:fb:85:bb:
                    2f:6a:2c:8e:b3:e3:07:d3:08:80:d7:3d:d6:1a:2b:
                    9e:11:dd:8d:2e:5d:84:a1:58:7b:a4:60:0a:84:d8:
                    d2:38:d5:bb:cd:05:d3:7d:fd:49:1c:e5:b1:d5:8e:
                    54:fa:f4:d3:d1:88:c1:b1:f1:17:54:17:0b:9c:11:
                    b2:38:bb:b6:60:61:ae:1c:4e:91:7a:71:c8:d4:e7:
                    1a:82:92:b6:1e:b3:0a:22:20:5b:98:9c:af:b9:a2:
                    40:16:17:11:ab:03:43:f6:ee:94:0e:9b:a6:cf:eb:
                    de:46:5c:c4:3b:02:03:37:80:0c:39:3c:33:0b:15:
                    87:f7:e2:c4:dc:e5:d6:c0:d6:0a:69:de:bf:87:f2:
                    ce:ed:05:47:27:1a:f8:1f:d4:dd:04:75:f9:28:63:
                    d5:89:95:ac:51:58:1c:e7:8b:6c:f0:95:0a:4c:0f:
                    dd:f7:15:30:c0:f3:93:8e:f2:52:cb:9a:b0:10:79:
                    43:32:b7:7a:bf:4c:fb:84:aa:ea:8f:67:74:eb:4e:
                    c7:9f:2a:86:ad:e5:96:d0:57:9c:87:63:c1:23:0a:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:FB:80:6E:EE:E5:53:27:F1:99:05:3D:CA:65:9B:8B:AC:54:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:ee:e9:d7:a8:70:ae:55:2f:86:bb:36:11:0c:26:8f:63:
         8a:27:b2:6a:ad:21:81:1b:6e:e4:5c:ff:4e:8f:83:2e:5f:bf:
         0b:f1:54:a5:61:91:26:ff:5c:cc:50:0d:f3:6a:c3:fd:c3:32:
         bf:55:ab:f2:98:d2:90:c2:b8:25:d6:56:2b:85:4c:7e:b5:b8:
         63:90:2c:35:65:da:0b:30:6d:19:48:2b:50:fb:0e:ed:38:9b:
         e7:c3:f0:a3:c7:31:55:d6:62:a6:ee:7e:b4:a1:e6:2b:0e:0b:
         c6:a0:d8:9d:ca:88:63:77:8b:be:cd:27:1d:26:81:34:25:1c:
         8d:db:73:4c:69:26:6c:9b:9d:80:d7:a6:b2:e3:00:43:2f:5f:
         2d:56:09:af:34:46:17:61:b3:aa:a1:cc:c8:45:5a:f0:a5:6b:
         27:e1:e8:2c:e6:ff:4d:3a:99:36:7c:f1:dd:9d:43:fa:41:8d:
         e2:e8:4b:b7:1e:df:7d:6d:ba:64:84:73:fb:20:85:33:dd:cf:
         e5:c5:b9:1f:43:66:de:3e:6f:46:43:72:14:e8:73:92:74:ed:
         cd:81:47:98:24:f5:36:f3:bb:ae:69:9c:b5:b2:b2:84:54:19:
         b6:19:05:0c:6d:f8:a5:31:5b:17:32:43:d2:c6:ac:a9:61:49:
         5b:85:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:55:00 2026 by rpki-client