Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa
File:                     3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa (raw, json)
Hash identifier:          lw0xq8wte4aOOKq5iXk1nJFHHSAglMX1sXolgfvvyHc=
Subject key identifier:   DD:96:38:5A:45:9C:1E:90:C7:7F:33:03:F1:6A:B1:31:BE:0A:90:E6
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F4328584F612D66061A6B3B7DA24FF880
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     395611
IP address blocks:        2602:fd53:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:66:06:1a:6b:3b:7d:a2:4f:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=2e460c77-f7b7-45f6-881e-8fd90b72d847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ce:49:03:6c:c1:a7:cb:a2:5d:d7:a3:70:a1:
                    8f:75:18:44:7c:f3:79:59:10:d0:cb:4b:0d:40:9e:
                    e9:05:94:66:44:f8:91:38:27:ee:46:b9:f8:51:8a:
                    63:35:6b:a2:85:dd:3d:16:13:d7:26:17:35:5d:9e:
                    3e:ee:78:70:8f:12:ec:88:4b:fc:0b:5a:da:20:96:
                    54:77:36:cf:80:da:52:ca:d1:c1:97:0d:6f:9e:bd:
                    b9:c8:4b:67:52:25:1d:7c:30:13:0f:f9:b7:da:c0:
                    b6:1c:64:fe:e1:48:00:8a:51:0a:a6:d2:2c:37:13:
                    49:3f:4f:af:92:68:a0:1e:93:c2:24:07:f8:fa:ef:
                    76:80:c9:98:6d:d8:ce:7f:ab:3f:0f:e2:d0:a4:4d:
                    c3:a4:2f:13:59:3b:31:6e:96:0c:fa:e1:49:18:bc:
                    19:63:94:cc:e6:ce:a6:d5:b1:d5:45:48:de:6f:a1:
                    f9:a1:e8:f7:81:41:5d:9f:dc:e2:ec:e4:a3:9d:ac:
                    0e:8a:7d:dd:61:c4:9e:18:52:3e:0f:bc:19:19:cd:
                    5f:e7:46:c0:a1:2a:cb:b0:94:be:81:30:1d:d0:ef:
                    7c:61:bd:00:cd:5f:f1:15:a9:89:3c:73:f2:ee:82:
                    14:cb:3f:17:c6:9b:23:68:bf:0e:1d:0a:d3:70:7d:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:38:5A:45:9C:1E:90:C7:7F:33:03:F1:6A:B1:31:BE:0A:90:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd53:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:7d:d9:9a:63:8e:7f:31:b7:01:a6:71:dc:30:38:35:47:
         b6:ad:48:36:78:ff:e7:1d:52:5b:29:b5:e3:2b:85:e9:ca:81:
         e6:a8:35:74:f1:a6:eb:34:47:5a:03:88:fd:e8:d3:b1:ed:75:
         10:f3:d2:51:b0:20:e6:7b:36:12:9c:fe:16:23:0b:b5:fb:a2:
         50:42:02:96:1e:07:6f:c8:7f:67:ee:3f:21:74:55:bf:7f:39:
         f5:17:6d:92:47:d1:eb:83:33:27:9f:b8:60:fb:90:12:5a:48:
         ff:b1:ff:b7:af:12:9b:bd:04:35:35:46:a2:89:7a:53:44:72:
         b0:1a:02:8c:f7:b8:7f:60:b8:b1:3a:6c:a2:58:ff:2f:ab:f8:
         5f:38:9d:61:32:e4:a0:97:7c:88:68:11:c1:fb:02:a1:65:1e:
         69:9d:33:b1:f0:50:80:81:9d:1b:bf:37:d8:d5:d6:c2:67:22:
         0f:58:a6:97:aa:17:33:28:5e:87:c3:8b:ea:2c:70:91:57:55:
         63:22:29:cf:71:59:09:0b:6e:8a:74:b2:a4:05:d7:67:34:bf:
         08:b7:89:19:94:84:3e:de:1a:cc:11:81:47:05:71:e3:db:8b:
         d2:89:bd:76:09:8a:66:b4:e0:07:6e:30:43:0a:5b:69:ff:6b:
         c2:54:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:55:04 2026 by rpki-client