Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd/48b5d60c-4e52-33d4-9fa5-b60f52309bae.roa
File:                     48b5d60c-4e52-33d4-9fa5-b60f52309bae.roa (raw, json)
Hash identifier:          UAmUaC5WTEZtmfaqWlGo6xrY/yHrr4DBPxz3U7PzgKw=
Subject key identifier:   F8:7B:F3:BE:3E:6F:47:90:4E:0B:B8:49:F4:2E:4D:A0:3A:1E:5A:A6
Certificate issuer:       /CN=ae873a5e-fba4-4545-97ae-557be20efedd
Certificate serial:       010D0C9F4328584EEA8746835DF5BA2EB7901680
Authority key identifier: 48:F3:BE:DD:A9:3F:8E:ED:1E:9A:95:73:03:48:39:3B:18:76:7A:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd/48b5d60c-4e52-33d4-9fa5-b60f52309bae.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     9304
IP address blocks:        2602:f390::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd/ae873a5e-fba4-4545-97ae-557be20efedd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd/ae873a5e-fba4-4545-97ae-557be20efedd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:46:83:5d:f5:ba:2e:b7:90:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae873a5e-fba4-4545-97ae-557be20efedd
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=d7b41608-4f34-4447-9ba2-bad2563f41a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:d4:c0:84:ad:24:2e:15:bd:9a:b4:f3:5e:
                    28:dc:cb:b6:5a:f3:e0:92:a2:fe:d8:6f:b8:af:7d:
                    a8:0a:44:b0:38:b7:37:ed:46:c9:dd:7d:ed:74:78:
                    03:21:61:86:df:2b:bb:3f:ac:c5:cd:d3:28:a6:38:
                    a7:b4:ce:d1:7e:1f:19:13:03:75:c9:31:be:97:92:
                    5b:7c:8b:7a:24:af:77:0e:f5:37:a9:bf:c7:e5:be:
                    92:c1:0a:f3:ed:0c:01:e0:4b:06:9e:de:d4:4e:5e:
                    44:03:4c:37:14:8b:e4:a5:b8:66:07:f8:c2:c3:02:
                    48:74:36:4d:97:32:4b:bd:dc:fe:3d:d8:c8:14:bc:
                    a6:7d:7a:16:09:1d:33:de:35:32:dd:2c:fd:b4:61:
                    8d:b1:4c:6d:50:5e:8d:cd:8b:e3:62:c3:4e:8c:31:
                    e7:35:cc:37:6f:cb:de:b0:54:36:d0:82:48:04:58:
                    24:10:f9:01:77:9b:11:b6:3a:7b:9f:30:a0:85:49:
                    21:09:02:b5:a2:06:b9:52:94:df:9b:26:a1:bc:2f:
                    f6:6a:ef:a5:4c:90:a8:9d:37:6e:b2:7d:bf:e5:2f:
                    bd:0d:eb:94:9e:a4:1a:ba:09:66:1f:6d:52:8b:5a:
                    7c:59:0a:32:2a:d0:69:35:fa:81:4b:0a:d8:74:a2:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7B:F3:BE:3E:6F:47:90:4E:0B:B8:49:F4:2E:4D:A0:3A:1E:5A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd/48b5d60c-4e52-33d4-9fa5-b60f52309bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd/ae873a5e-fba4-4545-97ae-557be20efedd.crl

            X509v3 Authority Key Identifier:
                keyid:48:F3:BE:DD:A9:3F:8E:ED:1E:9A:95:73:03:48:39:3B:18:76:7A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae873a5e-fba4-4545-97ae-557be20efedd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f390::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:47:29:76:a0:ce:56:ef:1e:83:7f:88:d2:c6:65:44:e6:
         0c:96:c5:f7:58:3e:3d:13:33:a8:70:7b:99:ba:5e:5f:d4:3c:
         5a:4d:e9:99:b6:5d:3b:07:03:56:15:6e:d5:e8:54:0c:fe:fe:
         eb:17:f0:2b:00:71:ce:11:08:83:db:05:08:b3:19:f1:31:19:
         b0:ea:d6:3f:85:74:c4:1a:48:04:32:9d:ad:3b:d9:2d:aa:12:
         7c:9d:f2:ea:2d:73:2b:7a:59:1e:c1:16:93:ed:ee:ad:9d:7e:
         53:a5:7d:3e:b9:d7:a4:21:57:d9:ec:f8:e5:19:f5:5e:f3:34:
         73:1e:38:74:e8:e6:c7:39:fb:e3:a9:75:f7:eb:88:88:6e:4e:
         59:da:e2:3f:7f:58:43:fa:63:c3:18:da:7e:50:4f:4c:f7:f5:
         4a:75:f0:33:fe:75:bf:93:66:b3:45:0b:82:d8:85:5d:fa:ec:
         04:44:a3:17:79:ef:59:c0:c6:6d:16:e3:c2:7f:b4:a0:69:58:
         9b:dd:8d:0f:af:e8:40:9f:9c:2c:c4:0e:a7:0e:1c:dd:e0:dc:
         59:52:fd:0f:af:b8:c5:d2:79:ca:94:51:88:4a:64:6c:18:66:
         f6:5a:41:25:e7:5e:de:1d:fa:37:76:a9:df:f0:76:5e:65:18:
         15:59:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:04:21 2026 by rpki-client