Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/e9b9afb2-81ed-304a-b49d-462446d86d30.roa
File:                     e9b9afb2-81ed-304a-b49d-462446d86d30.roa (raw, json)
Hash identifier:          /IAMkhziqPLiZfiXPWVXK6l4DMfdPncaSONJaqcvfyQ=
Subject key identifier:   96:F6:42:9C:22:CA:04:E0:E3:EC:EF:0B:A1:81:91:25:92:54:7B:9A
Certificate issuer:       /CN=221fa56a-4e00-462c-9583-3f6493cb4c92
Certificate serial:       010D0C9F4328584F20F7ABF527559859FB1E8380
Authority key identifier: 59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/e9b9afb2-81ed-304a-b49d-462446d86d30.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     15020
IP address blocks:        2602:fc2a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ab:f5:27:55:98:59:fb:1e:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221fa56a-4e00-462c-9583-3f6493cb4c92
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=98735c87-ea2c-40be-b4e9-0ab142b8daab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:54:44:62:7d:68:93:1d:91:8f:aa:57:82:
                    5a:c3:2a:3e:48:d2:24:2b:39:23:49:71:a6:9b:38:
                    84:7d:3c:a5:e6:14:43:2f:3d:65:29:35:d3:dd:a6:
                    9a:76:96:3b:a0:6c:23:7a:a1:98:52:18:ca:46:3e:
                    35:69:5c:54:7e:1a:99:e3:df:77:77:d1:db:96:df:
                    fb:9c:f4:47:99:33:49:e0:bb:d6:43:23:6a:89:8c:
                    8c:cb:90:9f:c4:dd:c1:d8:00:a6:4a:31:96:e4:f5:
                    c0:dc:65:ad:d2:51:8e:db:1a:09:84:47:86:a4:cb:
                    c4:2c:3b:5f:51:c3:81:4d:fc:ea:b3:9f:ae:64:2e:
                    60:2c:1d:04:b3:99:4b:bc:0a:76:93:3f:a8:d0:9f:
                    7c:49:86:f8:31:2b:f5:50:7c:be:63:0f:06:e9:99:
                    e9:0f:52:cb:0f:bf:c3:93:50:6b:ba:1d:6d:23:95:
                    ad:6d:ca:cc:bd:e0:c1:3a:b2:3e:f8:ed:1a:a0:ec:
                    e9:28:f7:5c:e7:1f:be:1e:b9:75:42:82:16:7f:0f:
                    7e:60:67:63:8d:50:d2:5c:6e:d8:0e:d0:43:92:e6:
                    25:f1:7b:65:b8:9d:fe:6c:32:8a:54:32:68:90:f0:
                    f5:fa:58:55:d0:eb:30:23:29:c7:c1:3d:cc:d9:a8:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:42:9C:22:CA:04:E0:E3:EC:EF:0B:A1:81:91:25:92:54:7B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/e9b9afb2-81ed-304a-b49d-462446d86d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.crl

            X509v3 Authority Key Identifier:
                keyid:59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:f0:37:a0:97:75:14:fd:a7:4a:9e:78:61:dd:7a:bf:ef:
         91:9e:50:fc:4f:04:bc:19:9b:24:37:36:cd:bc:1a:42:98:d3:
         38:26:62:8e:27:e0:7b:a8:ed:89:c8:cb:96:00:d4:be:1a:af:
         9b:30:4b:a5:fc:7b:a4:87:52:8b:92:37:b3:04:9f:b4:b8:6c:
         18:d4:ef:96:06:b5:b2:6a:4a:01:c3:db:9c:8b:2e:ef:14:b4:
         03:39:ff:90:cb:ea:09:00:59:6f:c2:39:0b:83:cd:c8:d8:f6:
         c8:74:aa:f0:5b:31:a5:6a:b3:53:ec:1a:25:e0:96:1e:f1:83:
         f6:2e:0d:7e:8d:f4:69:4b:b5:1e:f7:69:04:07:81:5d:bb:11:
         c3:a5:95:6b:a6:c8:10:44:d3:7d:40:b2:bc:ea:31:e7:cf:d4:
         55:a5:14:e0:10:49:70:51:17:76:84:cb:f8:20:12:c4:97:71:
         75:cb:1f:37:de:3d:d9:fd:f1:8f:da:fa:57:2b:f4:7b:d9:28:
         f5:34:d8:d6:3b:b9:df:b8:15:d5:e5:f4:ea:17:4b:91:88:50:
         39:51:fb:57:84:6b:08:e4:51:45:5c:4a:f8:02:5e:b1:f0:b9:
         08:32:65:6e:1b:0a:f8:48:82:75:5a:99:f3:d9:69:0e:f8:85:
         1a:d8:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:28:54 2026 by rpki-client