Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/3372cfb2-a747-34fe-856d-1014b04b6d42.roa
File:                     3372cfb2-a747-34fe-856d-1014b04b6d42.roa (raw, json)
Hash identifier:          ulYmv7mF6mU7Pp4P88WYy1das+Jlk1kffbugLg1IMmY=
Subject key identifier:   58:04:6D:5F:3C:08:20:20:DC:84:00:4D:8A:E7:99:63:23:CA:6A:84
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584F18979F07745CA21D4EAC48C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/3372cfb2-a747-34fe-856d-1014b04b6d42.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     399976
IP address blocks:        2602:80c:2016::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:9f:07:74:5c:a2:1d:4e:ac:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=487b7cae-98de-444c-82b5-f7123236c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:cf:12:fb:57:d4:23:70:2f:0c:8e:4c:7f:
                    35:1a:ed:22:67:f6:95:fd:24:4d:3b:5e:5d:e2:0e:
                    c6:24:f5:05:25:32:e6:fd:00:f8:87:0f:a7:3b:f2:
                    88:a8:f5:d8:d6:c4:da:62:32:b7:7f:3b:71:35:bb:
                    9c:b5:36:d9:f1:c1:37:af:f3:5c:1a:44:f8:7a:fd:
                    74:02:e0:76:36:5f:48:d3:bc:b8:c4:98:37:b8:14:
                    31:51:5a:cc:9e:b0:c4:4a:db:2b:7d:1b:38:7c:ab:
                    3d:20:14:74:82:4f:b0:70:b0:ec:99:b0:81:3b:a9:
                    1f:2a:74:81:db:dc:aa:d7:c2:a1:9a:10:18:dd:0e:
                    cd:b4:d6:80:3b:a6:4d:11:79:13:aa:a0:ac:38:3d:
                    18:4d:4f:60:1e:bf:4c:cd:47:bc:a8:52:76:27:f0:
                    83:06:a8:b2:74:92:21:74:98:4d:45:5b:30:29:c1:
                    6c:c3:11:fb:df:06:1a:b6:00:12:94:bf:79:a4:b9:
                    22:4e:ca:45:82:9a:f2:32:9b:8f:62:d3:32:bf:da:
                    92:21:b6:58:01:b8:f5:86:cb:d2:d9:84:ff:4d:29:
                    51:ca:16:ae:33:52:66:b4:fb:8f:02:da:63:4a:64:
                    77:47:53:d5:f0:f6:c4:e6:4a:bb:5b:e6:b0:c2:51:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:6D:5F:3C:08:20:20:DC:84:00:4D:8A:E7:99:63:23:CA:6A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/3372cfb2-a747-34fe-856d-1014b04b6d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2016::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:e3:0b:76:32:15:66:b3:33:90:05:f4:a3:75:d2:8f:a7:
         d0:86:49:50:77:64:0d:b9:46:3a:4f:ba:f9:b4:45:54:97:b8:
         46:cf:40:c9:e8:bc:7a:e5:c9:f1:35:a2:2d:f6:ad:5a:ad:6d:
         a5:86:d2:8b:67:4a:b4:4f:66:7c:45:89:21:1a:f6:d8:33:74:
         c3:b4:15:de:64:ae:bf:d4:90:41:1f:bf:7a:bf:69:5a:f1:10:
         a8:2a:42:45:5a:d3:0f:f0:89:1e:db:7f:bc:af:24:e0:54:4f:
         61:b4:1c:2b:d9:87:ae:bd:21:dc:5c:82:4d:6c:b9:a8:b9:27:
         db:17:82:38:d4:f5:9f:03:ee:d1:db:98:7c:41:93:22:41:8c:
         2e:75:0e:3e:70:d4:10:ea:26:85:e0:ce:c1:db:98:c4:38:3b:
         cf:8a:1f:4a:dc:53:f1:05:65:7d:05:1e:a7:bb:b8:47:9a:89:
         c2:01:07:c5:85:ef:a8:fb:60:8a:76:34:21:c3:e3:42:f7:3a:
         7c:4d:76:72:eb:36:ec:c4:56:11:52:0d:85:ce:8e:6f:b7:cc:
         71:db:3d:35:a6:a7:c9:59:93:62:43:4b:d4:1e:ad:42:76:e2:
         3c:24:e0:78:39:a4:06:c5:5e:bd:5a:b6:ef:0e:47:3e:7e:8b:
         34:eb:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:39:37 2026 by rpki-client