Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/f1220de8-b1d4-3eb2-b05a-75b89615666f.roa
File:                     f1220de8-b1d4-3eb2-b05a-75b89615666f.roa (raw, json)
Hash identifier:          PzVgaDcs8/Pq5nbc9YxAmaFmTQkziW003B9ikKtLouI=
Subject key identifier:   1F:20:81:14:3D:34:DA:AF:43:09:97:63:38:C6:32:73:80:38:B6:10
Certificate issuer:       /CN=47883700-ff2f-46de-915d-654724c2ddea
Certificate serial:       010D0C9F4328584F49748E5EDC37D98F33173B60
Authority key identifier: 69:1B:A4:4A:B0:39:C9:BB:0F:36:74:08:C7:98:2A:3A:26:75:B6:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/f1220de8-b1d4-3eb2-b05a-75b89615666f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20473
IP address blocks:        2602:ff03::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/47883700-ff2f-46de-915d-654724c2ddea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/47883700-ff2f-46de-915d-654724c2ddea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8e:5e:dc:37:d9:8f:33:17:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47883700-ff2f-46de-915d-654724c2ddea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7c8c327-da12-4abf-871e-72532d6a93fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:35:53:66:f3:0f:9c:e1:89:0f:39:86:c7:
                    97:78:8a:1a:c6:2d:22:3b:28:4d:83:17:f7:ca:04:
                    bd:18:02:ea:ac:d4:4e:b4:21:10:5d:44:5f:df:26:
                    60:f5:a6:b5:8b:30:6c:32:66:6c:51:05:96:9b:38:
                    d5:a7:f8:f0:ae:7b:90:c7:4a:a8:7d:09:5c:bf:c2:
                    c2:22:91:e3:cd:6d:c0:3c:58:21:9b:ef:a2:04:77:
                    2b:2f:55:b3:f5:3b:2d:d3:40:31:b2:ef:c2:ea:b0:
                    d9:a4:79:a4:97:d5:00:12:fc:fd:94:59:42:b3:86:
                    a6:4c:94:1e:ce:96:1e:8c:b6:08:f1:e5:f4:89:a8:
                    9c:13:6c:9b:28:a4:42:36:f8:3d:85:6c:35:b7:4d:
                    ea:de:68:68:aa:16:4c:1e:fa:18:72:23:22:54:18:
                    8c:e0:7d:83:89:2d:08:81:f3:da:ae:d3:ef:cb:b6:
                    ce:1d:5f:1b:73:7c:85:ce:ed:0e:83:02:34:a0:86:
                    e1:b1:92:b5:94:3a:42:61:12:b5:6f:cb:ce:d6:92:
                    4a:87:8e:51:c6:ca:09:bd:25:2c:f5:84:83:4c:d9:
                    fd:29:2f:99:ca:eb:0e:66:64:c3:a5:62:ad:b5:af:
                    c0:b4:b2:89:dc:88:25:82:7b:85:c8:f8:3e:7f:3c:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:20:81:14:3D:34:DA:AF:43:09:97:63:38:C6:32:73:80:38:B6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/f1220de8-b1d4-3eb2-b05a-75b89615666f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/47883700-ff2f-46de-915d-654724c2ddea.crl

            X509v3 Authority Key Identifier:
                keyid:69:1B:A4:4A:B0:39:C9:BB:0F:36:74:08:C7:98:2A:3A:26:75:B6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff03::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:dc:d7:6b:0f:f4:f7:3f:b9:98:2c:a7:74:2b:64:4a:f3:3a:
         00:54:06:03:b2:91:30:7a:09:fa:59:4b:04:ca:41:16:1f:ab:
         37:7b:86:9a:25:1c:47:19:4f:bc:a9:6a:81:c1:fa:d1:10:c5:
         99:ba:26:bf:e5:23:99:52:87:11:15:bf:83:9c:c5:35:2f:cd:
         9d:87:f2:9d:b9:c7:c2:9f:30:38:5c:4f:4b:2b:61:4c:1b:78:
         b6:b5:df:f0:f4:9b:3e:5f:ca:9a:43:5a:8b:1c:2b:db:e4:13:
         aa:f7:f8:1a:7c:58:c5:de:8d:95:af:e9:ba:be:9e:7b:98:64:
         f2:82:48:d8:19:97:65:20:29:05:fd:39:4a:28:f8:fd:1f:de:
         14:30:bf:c9:8c:a2:94:6b:4d:35:6b:26:8e:9e:7c:fc:69:ff:
         a5:d0:7d:34:94:42:ae:72:73:da:1c:0d:3c:3b:09:61:e5:14:
         a0:a9:bd:25:e0:e1:1b:a7:35:73:56:49:c3:5f:3a:65:72:b4:
         ce:d8:a2:a0:fa:d0:a3:03:0f:4f:a1:be:cb:a0:70:73:5a:65:
         7e:b6:d4:65:49:71:83:c9:98:e3:12:d6:53:67:4f:88:dd:9c:
         b8:2d:95:9e:a7:54:3b:99:65:44:7c:19:65:d6:2d:cc:aa:78:
         b1:2e:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:04:04 2026 by rpki-client