Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
File:                     c005238f-e667-357a-9bf5-bdf33e9305cc.roa (raw, json)
Hash identifier:          6+u1uW1h5/LLQrHuBfJcJ+49ZPWz80I1Z8+XUKcU1Yo=
Subject key identifier:   1C:5F:83:E1:68:45:1A:52:6E:A5:15:D3:0E:B4:33:30:98:3F:E5:5C
Certificate issuer:       /CN=cda047c8-1dc9-4cca-b1de-b651af254414
Certificate serial:       010D0C9F4328584EB417002AE13F13D893B98480
Authority key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     36832
IP address blocks:        2602:f91d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:17:00:2a:e1:3f:13:d8:93:b9:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda047c8-1dc9-4cca-b1de-b651af254414
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=b2c8c9ab-d5e3-4e50-a074-6840712af7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:1e:df:14:13:5b:24:bc:9a:42:ee:2b:56:
                    80:5a:db:62:1c:9a:64:4b:88:40:af:4b:a8:53:87:
                    7e:1b:45:e2:4b:fb:81:cd:d7:d1:d3:6a:7d:e3:f3:
                    14:29:6a:3b:d0:1a:25:1a:b7:f8:92:71:fa:b6:98:
                    05:f8:7a:32:69:59:38:08:00:75:39:2e:41:a5:b8:
                    53:a9:9c:3e:ec:7c:7c:bc:30:fa:52:35:2e:03:78:
                    6b:88:e4:ad:60:64:38:aa:ff:9e:7d:f8:a3:d2:ee:
                    29:f5:b7:89:d4:05:c4:6d:df:d6:5d:bb:fe:e4:32:
                    c9:1b:1a:1e:b7:a8:4c:d5:fc:55:74:e5:33:eb:0f:
                    e9:ca:de:11:a0:4c:0f:24:27:77:c7:ff:e0:d1:9c:
                    ba:a4:f2:87:e0:b6:39:fb:cd:96:19:73:1b:51:f9:
                    e5:0c:50:fe:6e:ba:d2:57:16:94:e0:bc:94:1a:ae:
                    e4:5f:30:f6:7b:03:07:f0:9f:fb:0d:55:dd:85:e4:
                    05:18:76:34:01:47:c4:d7:90:19:a5:4f:dc:74:44:
                    de:ff:bc:23:36:65:be:7c:77:f8:21:10:41:ad:c6:
                    99:00:48:60:6f:7f:22:e3:d5:c6:9b:5d:b3:30:ed:
                    68:31:55:4b:52:ca:4d:a2:4b:f7:fa:79:b4:c6:09:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:83:E1:68:45:1A:52:6E:A5:15:D3:0E:B4:33:30:98:3F:E5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f91d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:00:bd:eb:10:af:10:f6:c7:8e:f0:35:c3:a0:e1:23:c2:0d:
         21:0b:c2:cd:96:8f:ff:e3:00:ba:54:3f:25:59:37:5b:6d:41:
         55:ef:7a:83:01:42:9f:5b:e3:62:0c:74:fd:30:35:cb:d8:ca:
         1b:b4:3d:74:86:7e:52:bb:4d:57:4e:03:c8:1e:70:53:29:6e:
         fe:14:05:61:cb:e2:8c:c2:08:7c:0a:98:45:ff:55:9a:5f:4a:
         d1:61:2c:d9:8a:68:07:75:4c:63:04:2d:2a:50:e2:aa:ca:b5:
         14:b1:4e:1e:97:ff:17:b2:ee:3b:a2:8c:07:88:19:42:c7:36:
         dc:46:9d:8e:58:ea:bb:4d:b9:b4:65:39:8e:5a:77:74:33:39:
         b7:d8:e2:f6:56:c1:0f:e6:45:bf:40:66:1f:6c:c5:33:08:4f:
         cb:3d:a3:18:b2:4c:d0:26:4b:3c:f8:3f:31:82:ae:e4:cc:fc:
         8c:c3:22:30:e4:1d:8b:e2:8e:dc:22:f6:46:c4:8c:ee:37:c5:
         aa:df:04:8e:36:50:af:53:cf:4b:9c:88:28:45:9f:d4:e4:e5:
         07:e0:ca:59:a9:f0:c4:a8:8f:f2:5d:e3:86:9b:65:d0:10:f6:
         2d:a4:0a:92:df:23:9f:d1:ab:58:39:e1:90:d5:d6:6b:50:72:
         ed:ad:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:44 2026 by rpki-client