Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/ec1a3bba-9491-3c8a-ab10-370b1160b039.roa
File:                     ec1a3bba-9491-3c8a-ab10-370b1160b039.roa (raw, json)
Hash identifier:          Z0YD0nX/g8qphykOpS3qQ17o5X73owQg2EhZ8GD7w9Y=
Subject key identifier:   31:D3:38:10:AC:DE:EB:6B:68:9B:E4:2C:49:5F:FF:A7:51:94:02:17
Certificate issuer:       /CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
Certificate serial:       010D0C9F4328584EE4F1EB03863FE884196ED980
Authority key identifier: FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/ec1a3bba-9491-3c8a-ab10-370b1160b039.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     402173
IP address blocks:        2602:f660::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:eb:03:86:3f:e8:84:19:6e:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=331fb047-9655-48c3-893d-6f8796e772dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:db:d7:77:d0:4d:75:0b:81:c3:a1:d1:a1:
                    ca:d6:98:b9:e9:0c:15:ef:cf:da:09:3a:89:74:da:
                    37:f6:47:ef:27:cf:9f:b5:62:60:99:0e:a2:b4:8e:
                    53:84:52:8e:af:85:91:4d:2c:69:c9:66:2c:e1:fa:
                    ea:eb:6b:68:d2:4d:dd:32:2f:49:f7:0a:53:ef:2f:
                    86:d8:30:a1:96:7b:50:32:44:74:b6:af:31:d6:67:
                    bd:b1:66:ae:f1:9a:1e:a5:d1:97:72:d2:c2:32:79:
                    f6:0b:34:b8:70:44:d2:ac:78:b8:16:9e:84:4f:5e:
                    2e:6c:b2:b6:21:32:c6:4e:29:cb:36:12:7a:f4:78:
                    c8:db:0a:fa:7d:22:25:8a:99:5d:f7:9d:96:86:f0:
                    84:eb:13:fe:f9:e6:00:b5:c3:32:e0:0d:60:3e:4e:
                    fc:7d:35:31:65:ef:3e:ed:ef:e8:9a:67:9a:d2:53:
                    18:28:21:82:11:35:f5:79:61:1c:3e:b4:87:c2:6a:
                    c5:a3:a7:da:be:bc:da:18:81:06:6e:7c:13:3b:c7:
                    c9:26:5d:81:06:c0:4f:09:0b:65:c1:82:85:9a:5f:
                    e4:6c:b3:d8:6c:25:a1:c0:71:af:ae:39:51:35:f2:
                    b2:ab:70:32:d6:d7:3b:38:bc:40:14:48:b9:c1:3a:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:38:10:AC:DE:EB:6B:68:9B:E4:2C:49:5F:FF:A7:51:94:02:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/ec1a3bba-9491-3c8a-ab10-370b1160b039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl

            X509v3 Authority Key Identifier:
                keyid:FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f660::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:20:96:e3:82:11:3f:8f:e7:e2:ab:c2:a6:88:47:a4:e2:
         2c:3d:82:f9:d3:88:94:60:72:b7:2c:81:c4:71:9d:fc:f3:77:
         1e:fe:a5:0b:47:62:19:23:4a:54:ae:9b:d5:53:d1:ac:26:38:
         b4:3a:97:2a:d1:35:69:9b:78:1c:1d:1f:fe:6f:f7:ed:d6:e2:
         20:04:3b:c9:ed:e2:f9:44:f1:56:94:17:3e:d0:63:ce:49:b7:
         01:9a:04:bf:4a:81:e4:45:c9:6c:cc:c4:b2:bc:31:b7:f9:be:
         8a:53:19:7a:9f:e0:1d:33:5c:39:80:69:fc:9c:d7:d2:e4:95:
         4a:0e:b1:4c:cb:26:33:63:30:62:b3:5f:21:bd:85:9e:a5:c3:
         f6:c9:a5:01:6e:a9:da:ad:fa:7c:b1:c4:89:ae:a9:37:db:01:
         0f:c3:34:74:d5:4b:3a:d1:e6:71:ad:ac:8e:c2:bd:f2:8c:a1:
         41:0a:8c:a8:5b:60:94:13:c7:6a:e8:92:30:43:57:b3:9b:3f:
         50:48:f0:7a:a1:6a:00:bc:1e:ca:95:20:ef:75:12:7e:3b:e1:
         4f:78:b5:71:28:de:ae:46:9e:c8:83:c8:9d:24:e6:22:75:b2:
         e1:97:c5:ec:6c:e2:b8:c6:6c:4e:71:7c:a5:d1:1c:8e:8c:3d:
         c6:dd:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:11:04 2026 by rpki-client