Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa
File:                     8c746254-1ab7-36dc-9361-dab7709e8124.roa (raw, json)
Hash identifier:          67jQ5QEMK6pKci2JAzJXhsVDX4y0aYGHhXhXf5H9qzM=
Subject key identifier:   E4:BE:C4:A7:55:D0:F5:E8:D6:E1:5D:88:B9:2C:63:62:E9:36:92:A0
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584F82ADB49C118C626DC6523980
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     400917
IP address blocks:        2602:fba2:18::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b4:9c:11:8c:62:6d:c6:52:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=4162a7ed-c9c7-436a-8b65-14f0f17d9f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:64:99:98:05:84:7f:de:35:94:ee:57:d6:
                    3f:bb:91:db:cd:0c:31:4f:38:1b:4f:2b:d9:7a:65:
                    4d:9a:f4:6f:3e:d5:88:fc:b0:c0:f6:17:d1:1e:51:
                    de:6b:41:86:f7:6d:28:34:1f:65:e0:75:47:2d:01:
                    f8:43:ce:64:10:4a:12:93:af:30:2b:8c:33:2f:9d:
                    dc:3e:85:ea:88:7d:1d:26:e4:8d:a8:92:8f:f8:e6:
                    a4:14:19:06:ac:b8:a8:28:65:42:11:b6:9d:68:8e:
                    81:e2:ac:f6:27:3e:88:cb:b5:d9:ec:8a:25:59:54:
                    2f:a3:83:4f:f2:75:cc:62:17:d0:49:9b:5c:22:96:
                    82:5b:5f:6a:dd:7b:cf:7e:0e:c0:3a:58:3a:31:e2:
                    76:11:62:7e:7c:fe:3e:e7:f3:a8:28:a5:1f:90:86:
                    3e:18:8f:f7:56:09:61:1b:7e:6e:50:73:b2:23:25:
                    79:b8:7a:e3:a5:14:a8:dd:bf:84:12:8c:98:03:85:
                    c7:f6:2c:b2:7a:47:54:ac:72:89:ed:69:ba:83:d5:
                    5b:d7:71:eb:99:a2:2c:ac:40:01:8c:60:fe:6c:03:
                    34:f8:2e:70:83:f5:be:47:70:3a:d9:e1:03:da:85:
                    bd:e3:fa:ea:43:a0:b7:87:05:2b:51:55:88:f6:6b:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BE:C4:A7:55:D0:F5:E8:D6:E1:5D:88:B9:2C:63:62:E9:36:92:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba2:18::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:78:93:f8:56:84:a9:40:d7:01:4e:6f:a9:29:fa:dc:6e:
         53:e6:49:40:82:7e:24:1e:bb:12:84:f5:0d:58:62:50:94:f7:
         b1:13:6e:8f:1a:a4:1b:5a:fc:61:c2:91:b8:8e:a7:d8:84:1c:
         f8:e6:2e:91:e0:e7:19:f6:65:df:b1:d1:2c:9f:d1:f0:a4:7e:
         79:44:ab:f9:ae:8d:0a:9b:53:36:ba:67:f6:13:8b:76:96:ac:
         d9:b8:28:c0:10:e2:a8:c8:3b:49:da:95:dd:db:49:fc:26:82:
         7e:cb:10:8f:d5:b9:fb:ab:7e:ab:a6:bc:2c:38:fe:f3:08:2d:
         57:52:39:b0:44:8e:20:64:6d:1c:10:e0:1d:d9:93:e6:f8:5c:
         21:c7:e9:8f:d3:ea:41:ee:55:55:bc:30:76:3e:b5:4d:96:87:
         97:23:9a:2a:b1:af:7b:ce:c5:e3:87:d7:cb:c3:b4:57:29:9f:
         73:0c:25:be:b1:4c:47:a9:65:73:c5:da:35:ca:40:71:d5:6f:
         b0:67:02:d7:22:6c:9b:6f:ca:5f:18:71:d9:fe:7d:74:4f:da:
         bc:f9:71:9f:0c:f2:a2:4d:96:51:ba:01:23:f5:05:f4:12:bb:
         72:a1:60:db:00:08:c9:ba:b6:d6:75:1d:a7:c0:14:d0:c8:bf:
         dc:84:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:39:12 2026 by rpki-client