Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
File:                     5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa (raw, json)
Hash identifier:          yd3aEIj/EsnXsSTzBlaThN17sO4U/29bn0Gcc+3risQ=
Subject key identifier:   0A:4F:8F:E7:4F:0D:33:69:B5:10:08:05:35:81:FF:B8:1D:46:98:30
Certificate issuer:       /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Certificate serial:       010D0C9F4328584EB2B1C0A29E4708D4D5F341C0
Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     13737
IP address blocks:        2602:f9ad::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c0:a2:9e:47:08:d4:d5:f3:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=611afce4-0569-4856-95ca-756390337bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:4a:9d:13:f0:da:50:8d:65:40:e4:2d:a8:
                    0d:21:31:dc:6d:88:f9:92:eb:54:92:f1:2b:f3:9a:
                    7e:27:89:43:ba:36:53:08:13:4e:df:a4:e5:8d:af:
                    7a:e0:86:22:9d:64:16:d4:7f:38:d3:9c:97:c7:5e:
                    ca:3a:0b:d6:38:00:a1:fa:19:f8:65:b7:e3:ec:9f:
                    9f:e3:55:68:d1:f8:be:9d:b9:cd:1e:1d:fe:33:f3:
                    84:8f:08:4e:18:c8:97:f0:a4:4f:34:d5:82:34:4a:
                    d4:30:3d:ae:a9:64:fd:e2:cd:33:d8:df:da:43:ae:
                    f8:65:8a:f1:e2:85:67:c0:2a:05:31:f0:bd:2a:7e:
                    c7:6f:5b:12:e0:ee:31:9e:93:17:d9:bc:7a:ad:b8:
                    55:11:63:b3:e3:a8:89:2b:08:dd:e2:9a:6b:8f:1b:
                    34:dc:71:71:36:ba:07:d2:24:7a:b9:57:26:16:da:
                    a0:a0:d0:6b:fd:bb:16:69:e5:3d:7b:a7:97:90:94:
                    57:70:0e:96:62:d6:76:e7:ab:f4:a6:43:28:f2:b9:
                    b6:85:08:a3:7b:02:c3:6f:ab:4d:bb:98:5f:bf:3e:
                    2b:74:b3:83:f9:b9:fd:d1:2b:25:bb:4d:2a:c8:3e:
                    91:61:df:7c:08:e5:a5:2d:1d:74:52:83:75:52:28:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:8F:E7:4F:0D:33:69:B5:10:08:05:35:81:FF:B8:1D:46:98:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl

            X509v3 Authority Key Identifier:
                keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ad::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:94:5c:d5:f3:f1:85:df:7a:d7:78:6d:cf:5a:35:76:f3:
         38:d1:0a:0e:7b:38:21:29:ae:6a:09:8d:cf:38:41:f6:7c:f2:
         0c:ec:5a:bb:ef:5b:00:13:9d:fa:74:9f:7e:0b:fa:8f:1c:66:
         0b:09:fb:57:43:c6:02:48:82:ef:dd:92:d2:bd:0f:48:02:66:
         aa:1d:f6:a3:a3:a3:5b:f9:c4:d9:b7:f5:1e:7e:48:83:c3:d4:
         12:78:dc:25:de:9e:de:4b:df:1b:ad:0a:22:09:8c:9b:58:2e:
         f1:91:7c:0f:0a:60:5a:5d:9a:3a:8c:02:53:b3:1e:3a:32:fd:
         ba:e0:32:09:49:fe:dc:a4:77:1a:e7:39:2b:73:4b:f8:c9:8e:
         d1:ed:8e:12:11:56:93:a8:ed:4b:19:c7:c4:90:4c:85:91:8f:
         cc:d3:5a:f5:73:88:82:3a:37:aa:ed:1d:f8:60:9b:cd:97:d8:
         9e:d9:37:9f:70:81:45:62:94:82:97:92:d5:cd:8c:43:7f:4c:
         ad:d0:0d:f5:7d:ee:79:2e:2b:ae:88:c8:17:96:fe:ae:d7:bb:
         d1:44:c5:25:6d:7d:cf:59:fd:02:a5:b7:a3:b7:5c:b6:c8:40:
         34:ae:e9:0f:43:d5:66:86:72:ef:5c:29:71:da:8a:bc:cb:06:
         85:64:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:27:17 2026 by rpki-client