Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/7738cfbd-228b-37a1-955f-967d05afc623.roa
File:                     7738cfbd-228b-37a1-955f-967d05afc623.roa (raw, json)
Hash identifier:          1ur3KwqvdodwKdB1gYb31bGlne1GCe3u5GGYJtK8r54=
Subject key identifier:   23:8D:D6:8D:EA:C9:5D:A0:5D:28:CE:29:11:9B:EC:B0:B3:EE:D8:EB
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F4328584F4F0832D22E0966ECA9E06F40
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/7738cfbd-228b-37a1-955f-967d05afc623.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     400941
IP address blocks:        2602:f66b:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:32:d2:2e:09:66:ec:a9:e0:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=21055f2c-9463-4e8e-b4c6-08c67267e3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:49:1c:da:9d:79:a6:10:e5:2b:58:09:f0:
                    d4:bb:32:0d:9f:ad:db:bd:9b:dd:da:a7:80:3b:7f:
                    1c:67:1a:79:c3:30:c8:9c:37:3a:5a:41:7c:64:ed:
                    8c:21:f7:d9:41:21:63:16:18:ff:09:4d:47:d4:ff:
                    da:b5:b9:bf:b8:87:1a:3b:ba:d6:55:10:89:24:f5:
                    71:66:ee:4a:26:73:fa:90:58:03:06:2f:dd:8f:f8:
                    7b:1f:bc:f4:ad:08:21:4e:68:60:e1:04:26:82:6e:
                    8e:05:ed:05:6f:53:65:57:ad:9e:80:f2:4b:c0:97:
                    ef:8d:ce:46:20:f3:d7:c5:77:70:0b:1d:78:ca:83:
                    84:c6:bf:20:97:f7:f8:0e:90:e5:4e:b4:e4:36:34:
                    6c:dd:bb:10:f7:50:8e:eb:a3:14:5e:01:9c:ea:dd:
                    d0:90:82:91:a2:03:81:f7:60:6e:43:93:d4:42:be:
                    8a:79:20:7d:cb:5d:9b:85:e7:c8:ea:35:56:03:23:
                    94:f7:d8:41:bc:68:70:83:f0:fe:c7:e0:88:2c:12:
                    50:77:ca:01:ff:f3:23:6e:84:4e:58:26:f2:24:2c:
                    7f:b8:39:c6:4e:6b:94:42:7a:9c:8d:8d:88:c1:40:
                    15:2d:51:ed:b2:83:bc:e6:75:37:89:98:4a:12:ee:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:D6:8D:EA:C9:5D:A0:5D:28:CE:29:11:9B:EC:B0:B3:EE:D8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/7738cfbd-228b-37a1-955f-967d05afc623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:41:1e:76:a5:6b:b2:a1:5c:95:85:c4:74:8b:85:6d:7b:b2:
         6b:64:cd:48:88:5c:06:fa:69:16:89:5b:27:4d:53:d5:cb:e7:
         23:5a:9a:f6:06:ed:80:b3:3c:ed:03:62:a3:80:be:f6:72:f4:
         fe:5f:42:f4:ac:29:8f:73:68:1b:88:1e:df:1c:9e:11:7c:90:
         9a:68:75:7f:1e:ad:83:72:52:22:78:de:5b:25:16:47:5b:74:
         c4:d8:99:80:ab:db:b5:f2:cb:34:e5:92:dd:c0:52:18:4c:04:
         b7:e4:66:56:f6:87:71:d7:0d:d6:64:fe:50:b8:14:63:19:97:
         08:09:26:2d:fd:c2:d8:8d:6b:2e:ff:f9:91:73:a3:06:82:9b:
         05:cd:3f:12:2a:9b:08:cf:61:62:ee:44:cd:dc:e4:32:eb:70:
         63:a3:9e:a8:e9:9d:fb:ed:61:e3:5d:b4:31:ae:03:80:af:de:
         71:4b:2b:8b:14:07:de:ee:e0:cf:18:89:0d:ff:f3:ee:44:a2:
         ae:4e:03:31:46:19:dd:56:77:ed:94:f8:78:61:36:4f:f1:ab:
         81:81:f3:d5:0b:2d:b0:01:13:5c:85:02:49:db:ef:d6:94:e0:
         e1:51:31:8e:50:f5:8b:2a:a8:d8:cb:35:4d:bb:8c:ca:15:94:
         ac:60:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:31:15 2026 by rpki-client