Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa
File:                     2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa (raw, json)
Hash identifier:          +i9mAYyutY+v/CW4sWDXMECYg5VM7bpWTLXrJHdkdlM=
Subject key identifier:   91:12:B7:71:E3:8A:DC:68:FD:60:AD:8A:00:C8:D9:01:EE:D8:C9:C3
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F4328584ECBD1D93B05115D8E492B3080
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     400013
IP address blocks:        2602:80c:100b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d9:3b:05:11:5d:8e:49:2b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=3ffb40b6-b07a-4d9f-8bc6-217909cf7b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:1c:52:94:52:56:54:e8:ad:f2:fb:55:a4:
                    c4:4f:41:a2:e6:92:67:9e:5a:47:66:12:80:f2:ee:
                    cb:52:ff:19:3c:ba:99:3a:c3:4e:36:dd:40:9d:c3:
                    d6:fb:47:db:8b:82:5e:8f:4f:ab:fb:9a:e4:cb:3b:
                    ad:91:b0:f7:c7:90:7c:4d:98:b3:cf:36:e0:60:08:
                    f7:e5:bb:63:30:76:84:0f:09:14:0a:69:84:bf:3b:
                    c1:99:55:13:2c:f9:1c:65:aa:05:26:1d:04:f3:9e:
                    e3:0f:59:39:57:1a:c4:1d:8c:6e:3d:15:b1:65:2d:
                    66:fb:ee:b7:9a:c6:cf:0a:d7:47:7c:34:fd:2e:66:
                    ff:5d:6b:65:d1:ff:5d:6b:4b:1b:2e:27:1b:9c:9f:
                    6e:85:2b:bc:b7:fa:b9:8a:79:68:83:03:c8:44:7d:
                    fc:b7:3b:bc:1d:8c:e4:3f:d0:c7:f0:a3:67:be:85:
                    e5:e0:ec:0b:35:ae:15:99:56:4d:fd:a5:d8:06:ce:
                    57:9b:08:ec:91:65:1e:47:0a:4d:dc:d1:4b:31:e4:
                    83:1e:c4:2c:bb:f7:26:11:1c:27:36:5c:43:0f:1d:
                    93:c4:48:64:3a:7d:8f:a4:e8:f7:85:8a:70:bd:b1:
                    9f:e1:74:25:7b:7b:92:24:70:2d:ac:a4:a5:03:56:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:12:B7:71:E3:8A:DC:68:FD:60:AD:8A:00:C8:D9:01:EE:D8:C9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/2d21ff92-bd3f-3e7d-b039-55a0bf83d66a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:100b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:d5:d8:7e:1e:6f:b4:7c:88:86:ca:63:2e:fa:7f:d7:26:
         81:9f:0d:b3:9d:22:e0:e9:7c:3d:b4:87:81:c2:89:2c:3a:52:
         4e:dd:07:49:ba:ce:5b:b9:ef:b1:43:45:37:13:10:ae:2f:9c:
         2e:60:5b:60:e9:e8:da:43:3c:d5:24:b8:9e:e6:07:2c:7a:98:
         ff:40:55:8e:0e:b3:01:d6:b3:d6:d8:45:70:de:69:92:0b:e3:
         b0:af:14:94:1d:1f:70:fa:17:97:21:f9:07:5f:7a:e6:bb:38:
         71:78:cb:c0:81:a2:d3:8b:d6:55:10:5f:9b:2c:ff:c7:56:ee:
         98:38:4b:4f:5c:c1:09:04:d8:72:df:85:d9:d7:b8:f2:5f:bd:
         47:05:66:ec:e8:de:67:f5:2d:53:fd:a0:07:7f:c7:e8:ae:7b:
         1d:49:aa:c1:e0:c1:4a:9b:6b:ed:d2:a3:e6:43:b9:65:1e:57:
         34:d6:cb:a2:c4:e2:24:00:80:02:d7:68:5b:1f:50:24:3a:56:
         c7:df:76:bc:92:b5:c2:ef:b1:72:26:61:61:ab:e9:f1:de:15:
         01:03:d5:75:aa:06:82:bc:6b:51:13:14:7a:88:7d:8d:8e:22:
         1a:ba:a6:c9:5e:38:42:79:f3:6b:ab:98:aa:43:aa:6f:fa:2e:
         35:bc:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 21:39:18 2026 by rpki-client