Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa
File:                     c431513d-aaef-3485-b46c-d4c9e32372d8.roa (raw, json)
Hash identifier:          a81ZCrEtrb81uXsnq1wj/1hqOMfiTjfn/W89e5q/pus=
Subject key identifier:   88:2D:B5:7A:C1:06:B4:FE:56:FD:A5:42:67:61:3D:7D:77:F6:37:39
Certificate issuer:       /CN=938e1602-8093-4bcd-b527-f5d1756295fc
Certificate serial:       010D0C9F4328584EE0C20A008BA7127D075F1180
Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     401482
IP address blocks:        2620:cf:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0a:00:8b:a7:12:7d:07:5f:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=45311dd0-a30b-4fc3-a6ec-eef14e4cac45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:21:9d:6f:3d:ad:16:ec:a2:20:4d:af:20:
                    01:fe:42:8c:8b:6d:97:aa:ec:f6:df:90:dd:8b:ff:
                    a6:f1:8e:99:42:fb:42:e5:02:4b:35:59:71:af:00:
                    64:85:bb:90:8e:e9:99:36:1a:32:c8:bd:f6:0f:e7:
                    9c:15:4e:2b:2e:4f:25:24:03:de:3c:01:39:fa:2b:
                    fa:54:41:f8:98:a6:2c:19:75:d5:3c:e3:9d:33:5b:
                    4a:b1:ea:42:d6:cc:cc:1f:ce:bb:db:ba:de:70:77:
                    e0:28:0d:d0:13:b2:42:b0:37:b0:6a:ec:ae:21:3d:
                    6b:1e:7d:56:11:ac:1e:c5:a9:4d:da:7d:85:cb:68:
                    75:1e:14:99:91:e6:c7:e0:f5:5b:4e:2d:c9:76:c1:
                    31:12:37:29:c7:b5:16:80:42:7d:9b:ee:e9:00:d2:
                    99:fa:84:f5:55:2e:68:db:d0:19:b2:f6:6f:74:e6:
                    39:a7:64:39:0b:b1:e6:56:37:83:de:1d:d3:29:81:
                    43:d5:a3:25:69:16:df:19:86:b7:67:ec:b5:b9:59:
                    ea:4c:a3:99:15:44:5d:4b:b3:17:b7:bf:ba:2a:11:
                    ae:d8:30:8f:dc:cb:43:89:3a:e0:92:34:2c:f3:85:
                    c6:a5:cb:2c:6f:ad:f2:bf:b2:1c:7d:58:6c:9c:af:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2D:B5:7A:C1:06:B4:FE:56:FD:A5:42:67:61:3D:7D:77:F6:37:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/c431513d-aaef-3485-b46c-d4c9e32372d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl

            X509v3 Authority Key Identifier:
                keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cf:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e9:a1:9a:85:f1:0a:11:58:60:c0:6e:74:4d:36:1b:15:de:
         97:93:31:77:80:f3:ee:14:ee:ed:b0:b1:72:e9:80:db:f8:82:
         60:76:5f:0b:60:02:53:bf:b6:56:53:3e:26:38:e6:16:aa:93:
         8c:d6:40:d2:52:a2:34:ae:5e:50:8e:bb:13:fc:34:3e:04:ef:
         c7:e6:05:7b:79:62:76:22:11:2e:2c:45:c6:c6:13:46:42:f6:
         c9:ef:2a:0f:67:5b:12:53:ad:c6:f8:98:05:71:a3:dc:17:b3:
         15:4d:1e:c4:97:6f:26:74:7f:1c:bd:5b:9e:cd:ac:eb:31:a8:
         03:2a:55:98:d5:d8:48:b1:bb:aa:aa:fa:45:ec:c4:78:36:7b:
         92:3d:99:ab:af:fe:9d:28:06:ee:98:6b:09:dd:b2:9d:e2:5d:
         bd:97:e5:cb:6f:4e:ff:9f:7c:83:37:85:da:08:2e:d3:24:84:
         2b:30:dc:37:6a:17:98:60:57:24:40:da:46:5e:d1:d5:de:24:
         1e:ab:70:69:42:16:25:09:39:29:06:23:ef:4a:42:0d:89:3c:
         1d:7a:7b:cd:e2:bf:70:40:46:55:97:b5:67:79:12:5d:f0:c6:
         db:09:bc:ca:cd:70:2c:e1:8f:85:0f:9f:b3:d0:2f:b4:da:64:
         f6:8b:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:08:33 2026 by rpki-client