Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/94a51e06-d74f-3dd7-95e0-54ef4ceb8218.roa
File:                     94a51e06-d74f-3dd7-95e0-54ef4ceb8218.roa (raw, json)
Hash identifier:          xY1ctiDt3SNGt0GBwFCo4j9bNDxA8ee6mya9wHm7pJU=
Subject key identifier:   83:F3:0F:F0:B1:FD:51:ED:94:8E:55:B1:AE:C2:CD:58:71:5B:75:6B
Certificate issuer:       /CN=8c199b52-1ddd-4842-a068-427ed30c6151
Certificate serial:       010D0C9F4328584EED521498E6AE15505930EC80
Authority key identifier: 83:D5:3C:3D:74:13:3C:E7:56:17:85:2A:D6:B6:51:DC:61:8A:F0:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/94a51e06-d74f-3dd7-95e0-54ef4ceb8218.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     396263
IP address blocks:        2602:f4c1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:14:98:e6:ae:15:50:59:30:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c199b52-1ddd-4842-a068-427ed30c6151
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=9f03376b-1f61-4f56-b7e4-4f9863b29bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:55:66:74:8e:4d:a1:fd:c8:7a:87:12:fa:
                    04:91:65:c6:7b:18:df:d5:e3:b3:21:2b:97:7c:c5:
                    d4:b7:96:06:12:57:f7:8c:cd:2c:32:62:bf:37:e2:
                    71:07:d4:d7:c9:15:e8:32:c4:13:e5:9f:94:04:03:
                    cf:fb:b3:96:5b:ba:22:5a:8b:0e:2c:16:1a:78:94:
                    67:35:50:14:d7:f7:50:51:b7:5b:b6:53:f4:40:54:
                    69:6c:ce:9c:49:b3:01:00:69:3a:0d:c9:21:ac:37:
                    de:49:f6:17:a6:bd:37:69:d7:aa:f6:3a:a2:6c:51:
                    76:4c:57:e8:7d:a2:20:a0:b3:b9:29:dd:5e:54:ed:
                    7d:ea:16:8d:01:cd:6f:ed:d7:4b:81:59:7f:2a:ef:
                    ee:ff:e1:c6:c5:f3:b0:c6:5c:bb:21:48:bc:93:28:
                    69:0c:6a:dd:94:86:a1:cc:54:c8:66:0b:d5:22:58:
                    70:9a:21:65:45:42:6e:77:59:d8:4c:43:ce:cc:ca:
                    d3:c5:1a:21:95:a3:3f:13:60:53:db:b8:0f:ca:a5:
                    36:a1:b8:93:df:b9:d5:5b:ce:7b:d8:b7:bd:5f:a0:
                    00:3d:4f:60:95:e7:4c:3f:d2:60:41:d5:35:b9:ed:
                    47:3b:34:51:fe:99:c5:55:c2:ca:98:38:35:bd:6b:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:0F:F0:B1:FD:51:ED:94:8E:55:B1:AE:C2:CD:58:71:5B:75:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/94a51e06-d74f-3dd7-95e0-54ef4ceb8218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:3C:3D:74:13:3C:E7:56:17:85:2A:D6:B6:51:DC:61:8A:F0:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:c5:c8:b0:2f:cd:9c:14:40:78:0f:b8:eb:fb:41:63:90:
         d6:89:59:45:66:e5:34:57:24:93:7a:f2:32:d8:07:c9:ce:f3:
         53:19:af:ca:0d:19:e9:81:9e:50:c6:ef:bb:4d:c9:99:4d:25:
         d1:1e:5e:96:f3:34:13:98:e9:6c:b5:67:81:ff:ad:65:e5:86:
         ff:7e:42:4d:64:ff:1a:f7:08:8f:13:76:b5:0d:42:a4:3d:3e:
         71:5b:16:89:d3:8c:b9:f1:40:26:17:8c:c0:8a:66:e4:eb:25:
         3b:75:e0:60:dc:b2:6c:d7:bb:49:24:fc:06:89:bc:9f:fb:a2:
         41:b4:a8:e9:67:47:6e:7e:02:cf:53:c6:69:c5:8a:75:5f:13:
         47:d0:cb:b5:9f:f5:3a:a6:f5:13:4f:cb:85:76:75:5e:ec:8b:
         bc:ee:2a:80:9d:77:56:31:bf:ac:31:cb:9d:7a:3d:35:b3:e1:
         21:3c:d8:94:a1:b4:af:fb:3d:d3:18:86:29:48:86:c8:87:d8:
         e8:85:94:8a:3f:1e:df:5d:84:ae:f5:61:d0:b7:56:0f:a7:f4:
         b7:45:26:9c:81:d4:fd:d4:94:48:b3:cd:b0:aa:52:5d:54:cb:
         40:5c:59:91:bf:69:6d:1f:bd:2f:72:f2:ab:5e:3d:f9:c7:25:
         dd:90:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:31:02 2026 by rpki-client