Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/0b2f08ba-9934-35bb-8e40-721b5c37c5c8.roa
File:                     0b2f08ba-9934-35bb-8e40-721b5c37c5c8.roa (raw, json)
Hash identifier:          m/XFCKTlLwRXv0vVDg2P5Y3jLTJfmY0saET1ncV1krU=
Subject key identifier:   A7:F8:F8:48:65:81:4D:36:D4:B6:97:77:42:44:2B:2F:C9:14:34:57
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584F1467A4602DF7579334940100
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/0b2f08ba-9934-35bb-8e40-721b5c37c5c8.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     18526
IP address blocks:        2602:fd6f:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a4:60:2d:f7:57:93:34:94:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=3b9344a1-341e-4b43-ad5a-7dad2e0bf898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:61:b9:58:73:28:f1:b2:52:fe:ad:e8:df:
                    2b:f0:28:d5:34:b3:2a:85:ce:47:1e:01:c6:6e:cf:
                    2c:d6:c8:3a:ef:42:0c:04:e2:5c:d6:ce:63:83:68:
                    c3:4f:04:11:cc:32:ab:b2:68:b6:ff:ac:9f:c8:2e:
                    20:3b:85:b2:65:89:1e:21:44:5d:02:0d:81:6d:88:
                    e8:c8:5e:f3:8f:ac:5a:95:97:16:5a:ff:93:47:ce:
                    f9:d0:c0:17:ed:53:d9:28:ec:d0:3c:68:18:9c:dc:
                    0f:c1:a7:cb:3f:a5:2f:99:b9:11:ef:79:3f:2e:94:
                    f4:94:fc:12:aa:39:36:9a:f4:e0:c0:1c:a5:16:3e:
                    af:9d:98:1c:1a:ca:6f:47:d4:19:2e:8c:ee:32:d3:
                    a3:17:b8:96:be:52:86:65:36:a3:1f:f8:1c:4c:f1:
                    0f:7f:3f:f3:76:db:99:9e:cf:9a:ab:e7:88:d7:26:
                    63:14:0f:fa:b9:72:15:6a:2a:0b:af:bf:87:39:ad:
                    61:55:08:46:42:97:ac:41:98:0b:86:47:d5:ce:36:
                    d9:61:bd:1b:88:7e:4b:1c:c1:0f:99:1f:b8:57:58:
                    12:33:e3:6d:00:4e:01:b5:dd:94:37:4d:2c:6e:dd:
                    ea:b7:38:90:a0:e4:1d:47:f7:1e:dc:46:ac:27:9e:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F8:F8:48:65:81:4D:36:D4:B6:97:77:42:44:2B:2F:C9:14:34:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/0b2f08ba-9934-35bb-8e40-721b5c37c5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:78:b5:0d:7f:13:9f:b8:ac:f9:a6:5a:9e:2c:bb:86:46:c4:
         0c:73:61:ba:98:0b:56:74:1e:ea:37:00:11:28:33:c9:24:05:
         a3:11:e0:21:f9:db:3e:ea:69:a7:03:9a:d2:4d:5d:4f:a6:d0:
         0d:f1:9d:fe:55:a9:b8:b3:c5:36:b2:84:41:13:74:5b:e3:83:
         cf:95:c7:e6:e0:0b:32:01:24:e9:fc:5b:08:45:82:b2:d9:80:
         4c:f6:82:7e:4a:69:a7:9c:69:80:df:1f:f4:87:e1:2d:c3:0e:
         70:f5:56:67:8b:e5:e7:34:fd:5f:d2:41:30:13:9a:cc:50:0b:
         ba:a7:65:97:96:31:cc:4b:c1:d5:ae:75:1b:7e:79:f7:b9:70:
         60:ed:fd:1a:8a:e9:ce:50:e8:5b:6e:13:1f:a1:ef:a5:ea:38:
         fe:5d:5c:bb:3c:35:47:29:de:a5:b6:1f:84:a3:c4:f5:87:c3:
         aa:c2:a1:2b:17:86:8d:00:59:5c:eb:83:8e:17:20:df:ac:9c:
         c7:56:af:57:cc:f1:60:48:f4:85:c8:76:74:5b:2e:cf:c3:16:
         23:98:55:82:34:b4:eb:5e:97:94:aa:cc:f5:c2:b9:97:cc:ba:
         27:2d:da:57:4b:bb:7f:3d:c2:fc:1c:23:9e:81:70:b6:ed:e6:
         67:79:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:20 2026 by rpki-client