Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/4617bd1f-a7c1-3247-b5b6-de6c28377aac.roa
File:                     4617bd1f-a7c1-3247-b5b6-de6c28377aac.roa (raw, json)
Hash identifier:          SwTtXKUo+kxRPIVcgPavNllsS3HjHkMvCthWAVDirIw=
Subject key identifier:   B5:32:2D:E1:55:4E:54:19:AB:01:78:7A:35:C5:95:7E:28:15:CD:15
Certificate issuer:       /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Certificate serial:       010D0C9F4328584F49EE98687524B15557538D80
Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/4617bd1f-a7c1-3247-b5b6-de6c28377aac.roa
Signing time:             Fri 25 Sep 2026 05:10:12 +0000
ROA not before:           Fri 25 Sep 2026 05:10:12 +0000
ROA not after:            Thu 24 Dec 2026 06:10:12 +0000
asID:                     396982
IP address blocks:        2602:f6fc:100::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:ee:98:68:75:24:b1:55:57:53:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
        Validity
            Not Before: Sep 25 05:10:12 2026 GMT
            Not After : Dec 24 06:10:12 2026 GMT
        Subject: CN=8a96e1a5-e2a8-4a61-aba6-e142988ac0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:ef:56:51:d9:80:75:a9:36:24:91:9d:d1:
                    17:5e:46:79:1b:61:46:fb:78:13:56:37:18:ca:2b:
                    3a:93:21:a9:f3:23:7c:ef:e3:21:7c:db:94:5d:d0:
                    ea:15:b4:81:8b:5e:5d:5c:c9:57:01:34:62:e8:64:
                    b1:e8:ce:ad:55:66:c3:3c:54:7f:a7:89:29:ab:34:
                    7e:0b:09:96:16:8f:3a:41:83:30:42:66:26:00:ea:
                    b8:e3:41:09:31:f6:d6:e8:4d:86:bc:56:89:03:2b:
                    9d:63:85:e7:d5:9e:58:05:08:4e:41:b2:6f:52:c9:
                    af:c7:1f:fb:8f:3b:4a:ec:8a:9a:26:f9:8e:e3:8e:
                    14:3e:62:84:09:bd:5c:9b:4c:d7:e2:f6:c2:9f:3f:
                    ca:ee:1e:d6:57:96:de:37:ad:c5:f1:8c:db:42:b1:
                    c1:3e:08:ab:c9:cd:62:40:7e:88:97:72:f4:be:38:
                    01:ac:f0:23:ba:7b:ac:63:24:4b:c3:2c:81:39:aa:
                    d6:b7:7b:73:98:44:d1:16:0f:5a:b0:33:b2:80:86:
                    08:06:41:90:22:e1:40:84:c1:8d:53:3a:47:61:72:
                    44:dc:05:f3:8e:6a:4b:f1:d9:78:22:c2:0f:9c:2c:
                    3b:75:4d:c7:f6:3c:8b:67:87:63:00:95:a7:18:34:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:32:2D:E1:55:4E:54:19:AB:01:78:7A:35:C5:95:7E:28:15:CD:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/4617bd1f-a7c1-3247-b5b6-de6c28377aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl

            X509v3 Authority Key Identifier:
                keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6fc:100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:2c:e6:b5:9a:45:fe:74:c4:f2:1a:d6:3f:a3:fa:3b:c9:
         dc:77:ef:f0:64:75:af:d2:36:47:eb:11:6f:34:e3:04:a4:8c:
         ec:93:f4:7d:3c:0e:eb:72:dc:81:b9:63:8a:b3:16:9d:67:d9:
         e3:8e:eb:a4:25:53:38:d5:82:01:be:e4:23:c8:24:97:76:45:
         f3:18:74:f6:82:b7:bc:55:b8:f2:50:95:04:34:0e:29:68:2b:
         75:95:54:37:b6:50:62:f6:60:0b:5b:b8:a5:8b:81:51:48:5b:
         d1:d4:cd:a0:e2:f6:17:b4:43:7c:8f:9f:74:4d:9e:48:77:8e:
         1f:0c:48:f9:c8:4e:39:5c:ab:11:13:92:5b:05:9f:ed:ee:03:
         e5:20:b2:e0:45:94:5d:2e:6f:46:06:23:07:60:10:4a:3b:fc:
         f2:85:54:22:40:e4:90:74:48:6f:6d:e6:55:78:27:82:65:75:
         c2:38:4a:5c:cb:84:dc:1f:6f:a6:6e:f5:51:40:48:1a:76:1c:
         e4:71:6f:3e:e9:25:99:0b:2d:c3:de:09:5a:83:f0:70:32:c3:
         dd:86:50:41:e6:a3:c8:1b:44:b3:f9:ea:52:68:5a:4b:3d:ad:
         48:87:44:1a:8e:2a:24:8a:6c:73:3f:93:73:c1:5c:19:3a:ef:
         cc:30:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:51:59 2026 by rpki-client