Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/7c38da1c-623c-30e5-a44c-ddb369814529.roa
File:                     7c38da1c-623c-30e5-a44c-ddb369814529.roa (raw, json)
Hash identifier:          RjxY7LI5t79gzY+OdV1fdp0ZrOwXARyhOCW+MPvyeGo=
Subject key identifier:   39:B1:B9:82:BE:12:F3:C2:52:60:E5:1A:AB:72:69:DE:05:81:3C:16
Certificate issuer:       /CN=082b5dd7-830e-4bd5-ac9d-2949ba50501f
Certificate serial:       010D0C9F4328584EFE120EC8031E88898185F840
Authority key identifier: BB:A1:24:25:0E:38:A1:8A:07:23:27:AF:C7:4F:D1:68:8B:CE:0C:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/7c38da1c-623c-30e5-a44c-ddb369814529.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     62672
IP address blocks:        2620:c4:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:0e:c8:03:1e:88:89:81:85:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b5dd7-830e-4bd5-ac9d-2949ba50501f
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=6776c7e6-d373-4b24-bc9a-2891f6997ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:9b:c0:9d:7b:01:f6:88:da:74:13:12:0b:
                    bb:e7:54:d2:55:34:a0:fb:6c:59:13:e2:9c:c9:7e:
                    40:bc:28:c1:57:6d:f5:16:1c:4c:87:b2:d4:86:97:
                    0e:30:fb:36:90:47:4c:08:3b:2a:50:e3:bd:ee:80:
                    8a:1e:5b:3b:07:3c:57:71:63:a1:04:4c:df:ed:e8:
                    64:e6:dc:ba:55:c9:ca:00:19:5f:b2:08:bd:7f:5e:
                    de:7b:53:85:06:7d:3e:eb:62:63:9b:c5:96:38:22:
                    6e:d0:36:ba:c7:7c:bb:a7:77:c3:1e:47:23:59:c5:
                    3f:5b:2b:c5:80:a5:18:42:81:37:d6:5c:36:30:e1:
                    cb:d5:f7:6b:31:b4:86:04:c0:61:23:7b:89:1d:e2:
                    3c:5a:bf:d3:30:3f:3c:90:40:64:38:b8:03:8e:19:
                    6b:c1:be:c2:29:eb:5b:f2:ff:48:81:95:42:8f:b6:
                    39:52:b9:12:3c:58:d7:25:44:4d:2c:9f:00:68:a6:
                    e5:10:36:67:40:35:07:d5:f0:68:60:7b:71:4a:71:
                    68:8e:c6:f5:2f:ab:88:28:87:c2:c4:fc:ae:de:16:
                    7e:eb:f5:67:2d:9d:29:e8:46:6f:af:1d:5c:c7:0d:
                    6f:05:70:b1:68:81:39:67:ae:5b:d8:4c:f4:fb:4a:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:B9:82:BE:12:F3:C2:52:60:E5:1A:AB:72:69:DE:05:81:3C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/7c38da1c-623c-30e5-a44c-ddb369814529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.crl

            X509v3 Authority Key Identifier:
                keyid:BB:A1:24:25:0E:38:A1:8A:07:23:27:AF:C7:4F:D1:68:8B:CE:0C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c4:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e9:b8:23:ce:00:f4:8c:9a:16:b7:ba:4f:b0:d1:fe:41:c7:
         7b:a8:cd:61:aa:9f:d7:f1:bf:0b:88:b0:94:ac:59:47:45:0e:
         b1:51:cb:d2:e1:e8:1c:88:e0:d1:95:9f:64:96:62:35:c0:65:
         99:89:a3:54:1f:9f:ba:1e:5c:b8:41:55:0b:80:8d:e0:61:4e:
         49:c5:3e:9d:65:9c:a6:ca:60:00:dd:54:a2:7d:23:9e:0c:b1:
         a6:af:63:96:e4:3c:b6:d8:33:ab:4c:a9:31:15:b6:ea:e2:7f:
         77:17:32:de:cd:09:e1:3b:b0:a7:86:e9:42:b5:41:75:7e:90:
         87:cc:1a:24:08:6d:2a:c8:c9:65:ac:98:aa:d0:0c:68:ab:dc:
         0b:88:97:9c:24:8e:b7:d1:fd:4b:52:32:1f:4e:30:b6:d3:8c:
         ac:41:f3:b9:4c:51:58:59:3e:bb:25:50:e5:ee:5a:37:04:f5:
         3f:0c:38:5b:b1:76:70:d6:51:dc:f1:01:d9:2b:3f:f1:79:41:
         b8:54:53:d2:78:0b:09:ce:15:bd:26:2f:3c:64:ba:96:c0:10:
         8e:02:c2:60:9e:cc:c5:e2:a0:1b:e9:33:c5:76:57:6d:ef:5a:
         6e:d8:cf:b0:85:d2:c1:79:f8:84:20:90:4c:3b:75:0b:0d:a5:
         92:a8:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:52:13 2026 by rpki-client