Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa
File:                     a477901f-5a7c-3596-8981-3046fca64b4e.roa (raw, json)
Hash identifier:          HQNdv4Ryd7QjJniVuve00gisJrrEnzEuhJ0zrJdQW/o=
Subject key identifier:   57:69:03:9B:72:6E:6F:8F:24:7D:5E:F8:C2:F0:5F:E9:8D:85:F8:69
Certificate issuer:       /CN=17c52074-58cb-4941-b609-0f5d1e4bca32
Certificate serial:       010D0C9F4328584EE7BCB030F90B1BF87F81D980
Authority key identifier: 81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     399772
IP address blocks:        2602:fc5f::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b0:30:f9:0b:1b:f8:7f:81:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c52074-58cb-4941-b609-0f5d1e4bca32
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=b63fb5bc-2b11-4e98-9229-d68c4730d608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:61:f6:2e:4a:9f:b9:4c:0d:33:89:ea:56:
                    10:9d:05:83:66:f8:08:bd:d1:d4:60:a2:10:6b:cf:
                    be:52:34:e6:54:f9:5c:31:6f:4f:c8:80:1a:7f:24:
                    1a:00:59:18:01:27:20:1e:3d:e1:a9:d2:ac:77:8b:
                    7c:d6:65:e1:ec:44:bb:3a:f6:2d:b1:ee:c3:7e:14:
                    c9:c1:14:52:bc:00:e6:d2:b4:ad:c1:c1:0a:46:cc:
                    6f:71:a6:23:7a:e8:22:04:c4:73:ee:38:90:4d:8d:
                    68:f6:1c:fd:01:fe:49:3d:34:5a:41:0d:ac:4c:a4:
                    75:e3:1c:9c:37:24:4c:df:67:79:1b:5c:9f:91:e1:
                    5d:09:27:4a:5b:05:48:c0:c3:1a:e2:74:30:5c:bb:
                    1b:87:51:0c:a8:b5:3f:4d:e4:23:c6:75:4d:d1:4d:
                    5a:f4:42:a4:42:66:7d:4e:4b:fd:bb:39:3e:7f:c2:
                    a2:6d:9d:b4:8d:fb:8c:5c:b4:00:a0:41:96:cc:7e:
                    61:96:a8:0e:2e:05:35:8e:f1:07:21:97:1e:27:8b:
                    db:0a:22:0d:5d:ad:0d:fb:63:7b:ed:2e:a0:ca:bd:
                    83:eb:77:6a:86:a1:9d:04:01:26:70:4a:6a:19:e9:
                    a2:e9:fd:96:87:36:d6:e0:69:bf:33:59:a0:f8:f9:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:03:9B:72:6E:6F:8F:24:7D:5E:F8:C2:F0:5F:E9:8D:85:F8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/a477901f-5a7c-3596-8981-3046fca64b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32/17c52074-58cb-4941-b609-0f5d1e4bca32.crl

            X509v3 Authority Key Identifier:
                keyid:81:63:71:9C:94:98:34:07:0F:1F:64:E2:0E:C9:FF:79:D1:AB:DF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17c52074-58cb-4941-b609-0f5d1e4bca32.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc5f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:89:8e:c8:7a:76:12:c6:f4:95:c6:8d:80:90:b1:9a:3e:c8:
         47:38:3f:43:47:95:12:b0:1b:16:f2:6b:b4:23:62:c9:d3:bd:
         31:c9:1b:79:5f:6f:91:0e:aa:60:dc:83:c1:d6:c1:59:8b:17:
         8f:c9:3d:0f:ca:f2:11:0d:a3:5a:83:80:47:fd:a9:af:bc:19:
         68:5e:7c:47:6a:c9:ac:33:3e:a8:1d:6e:3d:bd:79:f1:41:8d:
         d8:76:38:a3:a8:ba:99:a3:2f:91:48:23:65:c4:a3:8c:c2:07:
         d2:19:3e:0f:5b:0b:5d:44:c2:0a:77:bc:5b:03:fd:d4:87:6d:
         eb:69:68:40:e7:1c:a8:76:79:d6:2f:48:06:ab:a7:12:85:bc:
         46:c0:1c:7c:05:db:16:22:3a:b0:ed:6f:e3:59:d1:a3:38:8b:
         d8:d6:7e:65:62:f4:60:86:a2:e9:bd:95:e8:60:4a:29:f6:f5:
         f3:4f:db:fc:24:11:1e:15:ca:03:2c:5d:e7:f4:56:17:b9:1c:
         f5:57:78:f1:2d:ff:d3:6e:62:7f:db:86:5c:e0:a1:5d:f6:4b:
         a7:2f:40:b1:b6:e5:51:ea:4e:6d:d2:32:99:d9:0c:ba:99:fc:
         67:e7:18:40:6d:14:89:0a:37:cb:97:15:d4:7e:7e:fb:ee:09:
         e9:5c:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:28 2026 by rpki-client