Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa
File:                     0dddb317-e068-304d-a813-9a6f7126fb75.roa (raw, json)
Hash identifier:          YwsdeAFwzRd41whOHJoYA2WJLYwixBGb1Ilk0jZ5i1s=
Subject key identifier:   B8:6F:6F:16:3F:3E:D6:26:FD:C4:A2:DE:96:85:DD:22:5C:67:99:A9
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584EA7978F567816B96D4A928780
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401243
IP address blocks:        2602:2b5::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:8f:56:78:16:b9:6d:4a:92:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=41d11325-2017-4e0f-bf96-dd36632192c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:f7:03:27:8f:9e:83:83:2f:43:9a:56:f4:
                    4f:96:d7:ef:22:dc:2b:1a:c5:f1:b7:2f:cc:ab:2e:
                    24:c4:ef:8e:eb:a9:b8:6f:7e:c1:19:45:00:6b:39:
                    f6:3e:21:47:e8:73:8d:51:6a:5b:72:2d:ce:88:91:
                    90:3a:45:b5:13:84:ab:86:2e:b4:ce:11:0d:07:b7:
                    a9:e9:b8:c7:9f:35:37:ae:0c:6b:1f:3f:5f:02:b2:
                    9d:f2:25:8e:a3:a7:d8:f1:cc:c0:2d:83:b1:04:63:
                    a7:48:3b:a7:30:b9:5c:0b:ea:e0:da:62:25:2a:51:
                    d8:9d:34:3b:9e:2a:9f:67:88:42:46:1c:98:f3:07:
                    06:81:ec:31:8e:7b:3b:07:c4:e7:99:6d:bd:c1:3a:
                    76:92:07:ad:c7:54:2a:fc:39:0e:e4:12:2a:6e:f7:
                    2a:41:54:51:ec:e0:ee:76:25:fd:43:04:66:82:36:
                    b1:ed:43:6f:9b:fe:8d:00:43:78:54:64:96:c2:d3:
                    f4:e6:a0:7c:7e:99:b6:69:b8:76:86:3a:5a:90:68:
                    9f:8b:ec:6a:a7:33:15:f2:85:2a:f1:19:96:a7:d0:
                    d1:4c:dd:80:82:a7:28:4e:79:9b:07:49:fc:55:61:
                    1a:62:1d:f4:d9:cd:49:a7:1a:3f:9a:fc:6b:46:e9:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:6F:16:3F:3E:D6:26:FD:C4:A2:DE:96:85:DD:22:5C:67:99:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0dddb317-e068-304d-a813-9a6f7126fb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:1c:5f:a0:66:4c:cc:86:ca:a2:80:67:10:67:0d:4c:ab:
         bd:0a:85:90:4c:ca:3d:4f:6d:c0:c2:09:0f:3d:d3:23:aa:56:
         40:40:e8:f4:21:1e:3f:17:b5:03:8e:98:cd:96:4b:ad:56:31:
         71:cc:17:fa:f4:f4:5c:bf:5e:01:c6:1d:b5:d4:42:f7:1e:aa:
         22:f5:81:fa:53:b1:34:73:c1:2c:87:1c:3e:f2:8e:dd:1c:d3:
         be:ff:89:b1:c7:99:ab:d7:f7:a5:db:71:95:b5:ca:53:98:48:
         87:47:5b:87:a5:d2:e7:9e:c4:bc:dc:46:2f:12:80:01:d3:ab:
         1d:87:9b:2c:a0:d6:b1:12:d2:c5:02:6e:a6:78:37:30:48:e3:
         4a:e3:65:6e:46:25:b3:2d:f0:ab:b1:23:70:3a:27:0b:9f:1d:
         c6:54:b4:43:53:4c:5e:93:a5:fb:54:55:10:e3:37:ce:af:f8:
         8e:89:90:81:4a:d8:7b:36:0c:b7:c0:15:09:40:b8:b5:ab:b4:
         a9:49:4b:a7:c8:be:ff:23:f1:c2:1c:a6:44:9a:34:6a:57:53:
         dc:cf:2b:07:81:59:2b:1d:61:50:db:8b:57:22:82:65:bb:b9:
         e0:04:7f:ab:92:70:b3:59:c2:45:19:c3:68:e8:e5:c2:8e:e7:
         23:23:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:33:53 2026 by rpki-client