Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
File:                     9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa (raw, json)
Hash identifier:          cM7PqNXeRo3zdSB1VXToqSBqUbkBuoFrzkFnxYc8dDk=
Subject key identifier:   38:CE:61:C4:A2:71:1F:FC:4B:D5:90:EB:62:DB:89:31:0C:E8:A0:C8
Certificate issuer:       /CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
Certificate serial:       010D0C9F4328584F02423F79287F7D04F3F1FB10
Authority key identifier: B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     398206
IP address blocks:        2602:fcab::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:3f:79:28:7f:7d:04:f3:f1:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=2dd71fbd-9b04-4866-b0e8-78a1b3ba02d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:9b:a5:f6:53:64:4b:9f:92:95:4c:1d:21:
                    a4:8e:fd:73:b6:f5:98:e8:56:6d:08:ae:dc:71:d4:
                    16:70:dc:8c:72:ff:ef:58:17:3a:db:17:09:65:4d:
                    55:72:a4:b6:fe:5c:9b:5e:3d:02:bf:90:0c:d3:94:
                    f6:96:1a:ea:7a:7e:ec:0f:0d:98:12:08:a7:df:ee:
                    5f:c2:5e:1f:fa:2b:c4:c7:70:eb:6f:73:5c:1e:42:
                    f3:c2:8a:a9:e7:83:58:2e:8b:a3:2d:62:ae:9b:92:
                    18:6c:85:35:44:e9:28:26:82:24:d3:bf:44:cd:07:
                    6a:73:17:c6:6a:50:b5:86:a5:0f:1f:0b:9e:04:8a:
                    89:86:2c:4e:78:84:2a:8f:0c:fe:8c:b5:9f:d1:e9:
                    85:55:ba:8e:f0:23:df:cf:41:f0:2e:5c:61:fb:4f:
                    0f:48:cc:a0:85:f4:d3:e1:4e:5b:eb:0a:06:22:6f:
                    91:96:13:08:2f:59:e2:62:02:0a:92:d2:2b:99:ba:
                    79:34:76:fc:5d:0e:ea:d9:6e:d5:86:a5:91:80:87:
                    a7:09:1a:b5:ca:20:fd:4b:11:05:98:a9:1c:36:7d:
                    39:13:50:17:85:13:fa:1f:a0:bf:40:c0:b8:fa:40:
                    7d:6d:94:fd:a2:d2:37:ea:c7:01:ec:e7:47:1e:d4:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:61:C4:A2:71:1F:FC:4B:D5:90:EB:62:DB:89:31:0C:E8:A0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl

            X509v3 Authority Key Identifier:
                keyid:B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcab::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:85:6b:1b:e1:c4:b3:d0:51:ac:d1:25:d3:b3:89:a0:fd:19:
         a1:2d:ef:b9:ca:ad:8c:5a:04:6e:a4:1d:e4:b4:d5:3d:32:c7:
         1e:3d:86:32:b1:6b:08:01:8c:94:94:04:19:cb:98:71:dc:bf:
         0a:17:be:19:05:11:3d:33:c7:25:79:55:07:6c:a9:13:bb:76:
         8e:41:1b:e8:3b:d0:fd:39:c3:99:35:8e:54:43:8e:6f:d5:ce:
         eb:3d:1e:b9:a3:d1:6c:3d:73:c2:48:2e:9a:db:20:89:17:83:
         fc:5e:81:fb:db:22:d3:6b:46:e2:19:e3:1f:5c:15:b8:c9:40:
         b6:6e:46:b8:73:83:82:34:bd:d7:e8:be:cc:db:35:2a:dd:2b:
         f9:59:0f:ca:02:a2:6d:de:10:70:6b:78:b0:6f:2c:20:fd:1d:
         ac:b6:4f:da:f0:58:fc:88:e7:08:7e:fa:03:d7:c1:c9:cd:3d:
         98:96:a0:82:f9:77:1d:48:bf:c8:10:34:f0:97:71:a0:06:ea:
         4c:fc:4e:6f:42:d5:f3:ce:5b:23:d2:05:38:13:21:65:ef:91:
         87:e3:1f:54:5f:e0:ec:28:e6:18:24:1c:6b:fe:fa:d3:88:e5:
         9b:2e:59:50:2f:b1:8a:e6:61:d2:2f:4b:82:c3:10:c2:f8:30:
         5d:6f:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:35 2026 by rpki-client