Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/e449f6ca-b568-3c20-aabb-962ef9ef2e21.roa
File:                     e449f6ca-b568-3c20-aabb-962ef9ef2e21.roa (raw, json)
Hash identifier:          RVybXT91aJa+BUeZkCiEtmQ+9xYm/GheO9sdiiuHbf0=
Subject key identifier:   49:30:F8:EE:7D:17:A1:06:33:F0:0D:98:8E:50:56:E0:FB:AF:1E:9C
Certificate issuer:       /CN=162b5119-ce50-4cc1-a8ba-220f5dafed5d
Certificate serial:       010D0C9F4328584F3471B3100AE5A422FDA9E0B0
Authority key identifier: 5C:63:62:0F:E6:D0:2D:D1:6F:F2:92:47:D0:B0:58:1A:0F:A8:42:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/e449f6ca-b568-3c20-aabb-962ef9ef2e21.roa
Signing time:             Thu 17 Sep 2026 12:26:34 +0000
ROA not before:           Thu 17 Sep 2026 12:26:34 +0000
ROA not after:            Wed 16 Dec 2026 13:26:34 +0000
asID:                     16509
IP address blocks:        2602:f2eb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/162b5119-ce50-4cc1-a8ba-220f5dafed5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/162b5119-ce50-4cc1-a8ba-220f5dafed5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:71:b3:10:0a:e5:a4:22:fd:a9:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162b5119-ce50-4cc1-a8ba-220f5dafed5d
        Validity
            Not Before: Sep 17 12:26:34 2026 GMT
            Not After : Dec 16 13:26:34 2026 GMT
        Subject: CN=36a50116-2ce5-4947-8db7-f51c99782c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:fa:80:d1:96:1f:7d:8a:4e:cc:8c:bb:9d:
                    c6:26:a5:0c:29:ed:16:8b:5d:d0:fd:cb:c6:b8:f3:
                    33:04:fb:db:d8:13:35:f7:9e:57:f7:50:9e:6b:a8:
                    79:5c:4b:1c:27:78:61:73:bf:fd:83:f9:48:ff:dc:
                    4b:dc:ee:04:a1:39:18:da:54:cd:5b:98:ef:ee:42:
                    cb:62:a8:f6:3a:9b:37:4c:d2:12:51:bd:84:c6:f6:
                    1f:57:f4:63:ba:6a:bb:a3:f3:0f:fd:f0:50:9d:53:
                    bd:63:81:90:2d:95:e7:e5:f7:55:01:fc:ce:ba:db:
                    76:5c:f0:ae:c2:13:21:92:4b:20:52:ee:de:6b:be:
                    9e:6f:d4:69:38:23:ec:c6:31:53:8c:75:a2:0f:ea:
                    6a:50:64:69:30:87:6a:89:b4:59:01:38:20:f1:a6:
                    80:81:e1:e9:7d:4f:6d:1f:28:ae:06:41:1b:14:3f:
                    41:b3:b0:2d:89:67:7f:09:b3:4e:bd:7c:3f:33:4d:
                    3a:cc:b3:05:ea:c6:67:ba:2c:b1:33:9c:66:69:bd:
                    0e:05:b7:4f:20:5c:24:02:8d:a3:4a:d3:31:8b:c7:
                    5c:e7:ec:4e:5a:b7:51:8f:a5:86:2f:33:a6:ae:e9:
                    ea:d6:84:5a:ae:4d:e0:e3:9c:20:79:1e:d2:03:ed:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:F8:EE:7D:17:A1:06:33:F0:0D:98:8E:50:56:E0:FB:AF:1E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/e449f6ca-b568-3c20-aabb-962ef9ef2e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/162b5119-ce50-4cc1-a8ba-220f5dafed5d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:63:62:0F:E6:D0:2D:D1:6F:F2:92:47:D0:B0:58:1A:0F:A8:42:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:1a:20:68:9b:f1:85:41:6b:84:79:82:2d:65:66:50:44:
         c9:6b:46:bd:b1:63:93:0e:ea:c5:e8:98:82:10:25:b5:d6:be:
         98:9c:c3:bf:e7:72:ae:68:5a:d3:8f:ab:a1:bf:3d:2e:21:f1:
         91:3b:90:38:f8:7d:63:30:bf:0c:d6:0a:33:e7:ea:79:d5:4a:
         55:b6:98:bd:e4:bc:52:ea:cd:6a:fc:e0:a9:de:17:73:ed:56:
         e5:32:63:fc:78:24:d2:1f:e7:cf:1e:72:da:1d:ec:e0:47:27:
         0d:d2:ac:16:fb:bb:4a:4a:29:3b:0b:57:89:58:71:f1:49:f5:
         de:21:01:e6:f1:f9:cc:b8:c0:1f:c7:f2:0e:e1:7e:18:e1:d7:
         f2:da:d0:8f:8b:a9:4e:63:19:2d:06:eb:9a:54:c4:1e:99:b9:
         05:64:9d:18:79:b8:e2:74:6d:13:02:60:ce:c6:fc:96:d8:aa:
         6e:ac:e4:13:87:bf:8a:3f:52:93:62:1c:83:d6:b0:83:75:1d:
         ca:a4:16:67:e7:15:ad:9a:5d:0c:e8:8c:a4:16:03:8f:01:81:
         6f:46:ad:1d:bb:12:4c:f0:b3:7f:9e:23:74:34:2d:e3:48:79:
         bf:3b:b6:20:2a:33:ea:8b:16:82:25:73:a6:a5:44:91:4a:4e:
         47:03:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:01:59 2026 by rpki-client