Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d1dfbb9b-19f4-3799-b50f-77a2b1186c30.roa
File:                     d1dfbb9b-19f4-3799-b50f-77a2b1186c30.roa (raw, json)
Hash identifier:          1nO2H4c6ERIlqvDMMldC2n0M6ZxS+QfJW9qHa7EQEm8=
Subject key identifier:   78:09:0E:11:74:31:CC:C8:2E:FA:DB:C4:00:70:9A:58:93:60:E4:6C
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584F1897AAD0C3E2BDDD4996D9F0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d1dfbb9b-19f4-3799-b50f-77a2b1186c30.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     399976
IP address blocks:        2602:80c:2049::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:aa:d0:c3:e2:bd:dd:49:96:d9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=d867fbbd-b4df-4e88-9e57-a45a2a51f638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:42:af:50:c1:58:f6:ba:69:ef:50:f2:5e:
                    1e:c7:19:21:c4:b2:04:ef:0d:41:74:61:d0:c7:d7:
                    e7:68:77:b4:c6:01:87:0b:be:ce:9f:92:95:22:aa:
                    8f:e7:db:37:d5:f5:ee:ab:40:4c:6d:ba:fa:55:9c:
                    e7:69:7b:50:a7:30:b8:5e:5b:36:15:af:51:82:76:
                    ee:8b:22:65:22:f3:35:2a:e7:8f:e3:01:c6:3d:f8:
                    a0:79:73:82:71:39:1f:cc:80:6b:a7:67:86:d4:fa:
                    44:25:d0:16:7c:17:e0:ba:64:6c:7e:50:e0:ab:93:
                    f6:a6:f4:4c:46:fa:86:ab:a0:02:cc:92:88:0a:cb:
                    69:ee:28:84:5d:e4:f5:ac:df:b7:3d:20:92:ba:aa:
                    da:82:f3:91:ab:b6:89:c2:29:47:03:b7:1d:b3:a7:
                    a9:ce:57:44:1a:f3:54:6b:06:76:0f:07:cf:59:a4:
                    f2:45:5e:17:99:ff:6d:52:43:c8:c2:38:fd:11:72:
                    1c:f9:f2:5c:7e:4d:ee:bd:b3:4a:bd:2f:05:58:9e:
                    94:5c:7c:70:48:54:9d:2a:89:ec:21:49:3e:da:86:
                    1b:a5:88:f2:7a:ed:dc:d4:64:49:3e:da:40:31:3e:
                    3d:0f:a6:96:c4:73:e0:cf:c9:a9:1e:d6:18:56:36:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:09:0E:11:74:31:CC:C8:2E:FA:DB:C4:00:70:9A:58:93:60:E4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d1dfbb9b-19f4-3799-b50f-77a2b1186c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2049::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:85:87:e1:ba:95:16:f3:db:6f:fe:02:18:66:7a:9c:11:29:
         86:11:ee:7d:39:4b:d2:e6:2a:71:10:5b:38:ff:2e:ac:71:32:
         6a:01:27:64:a2:8d:26:79:5d:6d:30:96:83:d1:c0:95:dc:ef:
         83:fd:8f:ae:12:f9:8c:bc:2d:28:13:d0:2a:69:cf:80:1e:77:
         3e:f2:72:52:54:33:56:d3:35:7f:89:21:9f:11:46:11:ab:f5:
         51:ee:40:43:95:76:b0:f0:cc:38:bd:bf:6f:24:aa:1a:dd:cd:
         a0:fc:a4:70:9d:73:5a:4b:64:3f:0f:21:9a:51:3f:96:33:16:
         55:9a:42:ce:61:1b:06:9d:f3:5f:83:08:f0:5e:6f:7b:55:ca:
         b0:5c:75:f2:c3:67:69:65:9d:2b:93:a9:a8:75:db:a8:68:10:
         0a:e8:40:ec:70:ed:74:0f:ed:f1:43:8e:97:9c:13:0d:0d:d9:
         88:6a:43:93:ab:73:7a:84:07:88:a7:95:54:4b:96:de:4b:75:
         5d:ae:23:f5:ac:95:93:d5:73:77:7d:bf:88:a5:a5:02:bf:c3:
         80:fe:6b:23:e7:9c:f8:f3:5b:4c:43:e4:ac:af:a3:14:0c:38:
         67:2e:c8:8f:f0:a2:48:23:3a:c8:2a:65:24:1b:6c:fa:39:4b:
         ea:c5:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:37:35 2026 by rpki-client