Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/ac4b8aff-a461-36c1-908f-2b2cb77b0644.roa
File:                     ac4b8aff-a461-36c1-908f-2b2cb77b0644.roa (raw, json)
Hash identifier:          pwnyKSW3BcbKr3MeLUFV8eaiPw3dabJLhNsOCuQs1pE=
Subject key identifier:   BF:0C:1A:C3:2A:5F:E1:78:BB:8B:65:B4:89:42:CA:8A:B5:9F:7C:AD
Certificate issuer:       /CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
Certificate serial:       010D0C9F4328584EFDDAD99078D625011BAD9B98
Authority key identifier: 4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/ac4b8aff-a461-36c1-908f-2b2cb77b0644.roa
Signing time:             Fri 28 Aug 2026 23:08:59 +0000
ROA not before:           Fri 28 Aug 2026 23:08:59 +0000
ROA not after:            Fri 27 Nov 2026 00:08:59 +0000
asID:                     7124
IP address blocks:        2602:ffa9:fb00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:da:d9:90:78:d6:25:01:1b:ad:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a
        Validity
            Not Before: Aug 28 23:08:59 2026 GMT
            Not After : Nov 27 00:08:59 2026 GMT
        Subject: CN=24d057e3-18d3-4ec1-af88-db634adfde22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:32:e5:5e:b4:b2:5c:50:62:e3:25:69:ff:a2:
                    33:08:9a:17:87:fe:dd:c3:04:4b:bb:c1:c1:2e:93:
                    5c:9d:2e:7f:21:36:b0:47:58:0e:db:08:bd:cb:d3:
                    cb:25:f3:ba:d4:8c:b7:b5:cb:1c:c1:cb:18:a1:48:
                    63:44:91:20:cf:31:1d:44:5f:85:4f:1d:65:6e:f6:
                    e4:87:d1:e3:d6:91:b9:21:35:a3:d5:1b:00:82:9e:
                    17:b0:c0:ec:65:60:d9:5e:0d:87:82:8d:db:98:90:
                    b4:bb:76:48:18:38:e1:a0:81:48:7f:89:b7:60:4d:
                    70:00:af:d8:94:41:17:ce:0d:60:02:59:ac:19:0e:
                    a8:35:5c:4e:0d:4d:67:f3:b4:ff:10:d7:c3:d4:00:
                    09:31:d0:29:1b:13:22:95:f6:69:49:aa:1b:92:6c:
                    0b:e5:03:3b:a8:c1:1e:5d:ee:43:13:e5:eb:52:6d:
                    0e:58:8d:03:27:3a:8f:a7:37:8b:68:c8:8b:72:0a:
                    3c:18:b2:01:b4:55:1c:70:01:9a:d0:36:eb:2d:1f:
                    0e:91:52:e0:ef:44:1b:13:75:e5:9d:de:0e:d0:96:
                    67:ea:69:09:d1:79:74:75:28:67:49:a6:68:6d:23:
                    0e:bf:03:a9:1c:66:d4:9b:80:99:a8:40:51:b1:f6:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:1A:C3:2A:5F:E1:78:BB:8B:65:B4:89:42:CA:8A:B5:9F:7C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/ac4b8aff-a461-36c1-908f-2b2cb77b0644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.crl

            X509v3 Authority Key Identifier:
                keyid:4F:6B:7B:30:46:27:45:61:0E:5F:90:3B:C9:25:DA:5B:54:76:FB:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/292c5a4e-8002-4b1d-a0e8-fc4b55a5cb6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffa9:fb00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:62:af:83:39:87:89:64:42:47:8f:38:dd:7c:b2:61:42:
         02:5b:44:18:a5:a8:b5:2d:55:73:0d:77:3f:32:4a:ab:4d:0b:
         0c:36:52:0b:07:50:5b:d7:02:a0:dc:96:39:71:e7:78:91:56:
         37:f9:99:2b:80:aa:4c:f3:99:d0:ba:bc:38:b0:7e:f6:9a:43:
         0f:53:ef:86:db:6f:fd:b9:90:ca:57:04:09:fe:c6:24:b4:2e:
         72:0c:db:ec:3f:61:ac:12:0e:bf:16:60:2d:63:d1:50:0b:11:
         19:df:86:07:d9:66:24:0f:89:9f:18:ff:07:a6:28:7d:65:23:
         9a:2a:fd:c2:cf:a1:20:b2:b0:5a:24:15:f6:95:ab:6d:d3:b1:
         95:4d:11:3d:90:cd:ef:89:50:67:3d:20:24:40:f3:d4:e7:ee:
         e6:97:90:21:6b:25:e1:e1:32:e2:2c:ed:f2:63:42:c7:7a:65:
         b2:34:0a:66:6f:9f:b8:31:0b:05:04:5c:3f:54:e6:d3:39:9a:
         6f:b9:a8:5a:ed:5e:be:4c:43:5f:cc:80:ab:e2:b4:b2:22:ab:
         34:5b:8b:d2:ca:e4:75:67:32:cf:09:dc:7c:27:c9:fa:2e:f0:
         93:e5:30:f3:50:1c:2e:c1:2d:cf:6c:df:90:30:a6:3f:be:93:
         b1:fe:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:38:14 2026 by rpki-client