Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa
File:                     8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa (raw, json)
Hash identifier:          IeABe/AnqAei7wqk0H1shfXWh9GZQ7vJXNyZgqLX13M=
Subject key identifier:   8E:71:41:CE:0C:6C:B7:D1:BF:FE:48:F4:9A:84:54:57:D6:5B:B0:9D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584F1897A046C57F0ABA0ED17A80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     399976
IP address blocks:        2602:80c:202e::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a0:46:c5:7f:0a:ba:0e:d1:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=94425e47-bc8b-404a-8aa2-f0551c656e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:ac:fb:b4:9b:ec:a5:14:bc:45:69:5f:a1:
                    78:54:92:1b:62:81:4e:06:00:12:8a:be:04:5a:7e:
                    da:4f:5a:4d:be:f7:66:b4:9a:44:29:81:c1:6f:8c:
                    9f:45:e8:ce:5c:41:22:50:9f:aa:ae:a2:b8:2e:25:
                    66:14:7a:13:fe:f2:ee:0e:4d:87:66:af:a2:e7:bc:
                    1f:d8:5d:eb:d8:6a:b1:6b:54:ea:44:d9:e2:d9:e9:
                    4e:41:42:f3:77:4c:13:15:0e:46:79:52:99:db:1b:
                    74:4d:c2:ca:ec:77:81:83:f8:63:3f:e0:f7:c5:21:
                    fa:2a:1f:70:b2:0c:4d:2e:83:bb:1d:b7:92:8b:c6:
                    9f:40:d7:c6:46:af:c7:68:d2:4b:30:f2:e2:28:c4:
                    5a:32:45:b8:fe:a9:16:a7:aa:38:85:06:05:19:e0:
                    5e:70:50:b6:68:a9:7f:29:25:b3:4b:e2:95:13:ad:
                    eb:d3:8f:89:a2:58:59:8c:55:9f:13:86:bc:c8:b4:
                    ed:c6:ac:b2:0a:e2:4d:cb:ce:a5:6b:e9:70:ad:bc:
                    18:d5:a0:00:a0:7e:51:26:7d:40:6f:b8:6a:71:a4:
                    eb:12:0c:02:b3:16:ce:3a:38:a5:31:c6:f4:5e:4e:
                    9c:ac:f3:1b:6d:10:f5:e7:60:73:18:b8:7e:3c:65:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:41:CE:0C:6C:B7:D1:BF:FE:48:F4:9A:84:54:57:D6:5B:B0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:202e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:53:87:4c:33:25:4a:bb:64:a1:3d:0e:ff:c3:5c:1f:7f:b0:
         02:e1:7b:83:08:38:38:fc:18:de:1f:cf:6e:98:62:7d:eb:02:
         6f:fa:57:c1:84:f6:a2:5f:96:c9:34:f9:29:2a:02:1c:24:2a:
         0b:b5:7d:5b:be:58:48:f0:ef:a3:6a:3c:68:b2:b9:e8:74:3a:
         8b:9b:b5:dc:8a:5f:5c:9a:b3:dd:b9:ef:55:63:a7:90:77:70:
         1e:c9:2d:c1:6a:4b:6f:38:65:4c:4c:ed:60:0d:32:0e:00:df:
         85:cd:25:a2:38:85:60:0e:a4:39:79:ad:51:c8:07:12:34:a1:
         b8:a1:31:8f:f4:0f:cc:e0:1e:78:ce:bc:88:75:80:0f:9b:67:
         e3:a2:14:39:bc:c1:6f:76:de:15:bd:4e:66:0a:67:18:58:71:
         91:4d:30:dc:f3:36:a1:01:fd:fe:5d:76:92:bc:52:e1:a3:aa:
         45:00:5f:19:37:59:b0:3f:05:0f:11:c6:29:12:ed:c3:8c:2c:
         41:a6:ed:56:71:2f:28:9f:c0:d8:f6:d4:9c:e3:ab:36:dd:5c:
         86:f4:62:ba:5a:e9:9c:5f:78:2f:16:c0:b1:9c:7d:a3:a7:3d:
         46:28:b2:d9:34:9d:43:4a:e4:92:36:87:c3:93:92:24:21:e5:
         6b:84:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:24:18 2026 by rpki-client