Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/d625c7fe-0eee-30c1-b04c-7eb34e623084.roa
File:                     d625c7fe-0eee-30c1-b04c-7eb34e623084.roa (raw, json)
Hash identifier:          q4UhgGAvrd/tRfnwWgDS7kTRdmjle2RV9TSg/TjlisA=
Subject key identifier:   04:7A:CA:AF:53:C4:A5:AA:1F:A5:8E:D2:CE:B8:3A:59:C3:A6:8B:A3
Certificate issuer:       /CN=b160892d-dfd3-45cb-a0ff-c5a3b4746404
Certificate serial:       010D0C9F4328584F42780C30F8C9D8D857D79980
Authority key identifier: 16:8E:F3:5B:56:8E:13:FB:02:5E:19:6F:8F:23:83:20:50:D3:A4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/d625c7fe-0eee-30c1-b04c-7eb34e623084.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     63027
IP address blocks:        2602:fd0a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/b160892d-dfd3-45cb-a0ff-c5a3b4746404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/b160892d-dfd3-45cb-a0ff-c5a3b4746404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:0c:30:f8:c9:d8:d8:57:d7:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b160892d-dfd3-45cb-a0ff-c5a3b4746404
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ca2d68c1-1eff-406c-9517-8846ec70319a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:fa:0f:b0:3d:37:32:69:a8:a1:87:33:32:
                    7f:dd:11:be:e2:53:25:ee:b1:56:ac:93:c7:01:4f:
                    3e:06:06:b0:8f:e7:8f:63:58:b6:91:71:14:91:60:
                    58:65:47:ab:b0:fd:29:a5:3b:80:c8:68:20:cc:44:
                    af:8e:72:aa:9f:76:e9:b3:ae:bf:46:be:95:d4:a8:
                    aa:50:98:12:e7:1d:29:0e:c1:5b:83:18:56:09:1e:
                    0f:26:5e:70:4f:3f:a7:cf:6b:0f:d7:e4:5b:69:d3:
                    20:ae:4f:96:b6:1f:7a:5e:c6:8a:a9:fd:03:d9:0f:
                    53:00:58:34:02:cf:f8:31:26:d6:94:c3:70:0e:8c:
                    98:af:a2:7b:24:01:02:d0:a2:ae:64:aa:9c:e5:36:
                    6c:73:af:da:dd:fe:c6:7c:88:0e:18:a6:49:26:c2:
                    cf:1f:b8:b6:e8:9d:1a:0c:85:ee:98:33:dc:a1:b7:
                    3a:15:72:87:a5:87:3b:2a:0e:49:a5:cf:90:f2:b2:
                    19:c4:b1:c1:3c:8f:48:29:9b:28:c2:76:39:25:7b:
                    28:98:c7:d8:62:e2:f8:82:df:16:2d:01:24:a9:48:
                    05:65:db:63:36:aa:69:a0:5b:c3:8a:30:33:90:0a:
                    7f:71:60:31:c2:cd:49:cd:6c:ef:5b:27:1f:6d:15:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:CA:AF:53:C4:A5:AA:1F:A5:8E:D2:CE:B8:3A:59:C3:A6:8B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/d625c7fe-0eee-30c1-b04c-7eb34e623084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404/b160892d-dfd3-45cb-a0ff-c5a3b4746404.crl

            X509v3 Authority Key Identifier:
                keyid:16:8E:F3:5B:56:8E:13:FB:02:5E:19:6F:8F:23:83:20:50:D3:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b160892d-dfd3-45cb-a0ff-c5a3b4746404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd0a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:50:ce:8b:b2:bb:83:dc:c6:4c:7d:cc:3b:9f:3a:15:7b:2b:
         0f:14:3b:65:b0:17:b1:92:18:06:91:49:db:71:aa:69:cd:d8:
         9b:ac:99:93:da:d7:db:67:7f:fd:de:92:3e:f9:b7:e5:a6:97:
         2a:0f:ce:3d:a3:70:cc:7e:53:ec:6c:77:77:1e:eb:e1:cd:5d:
         59:3e:97:2b:b5:a8:03:10:7a:e6:5d:56:f4:11:29:19:d6:f5:
         d1:63:40:96:ee:b5:3c:58:2f:86:ea:0f:1c:b9:3c:c9:c3:ac:
         9c:db:41:fa:8c:4d:94:3b:e3:c2:d1:7d:9e:6c:d2:ea:3b:2c:
         8e:35:e9:86:77:1f:f4:05:76:88:ac:4e:75:32:e2:b2:da:64:
         01:59:62:b5:2f:8f:ce:34:ef:72:f0:54:82:f4:38:2d:ac:ad:
         09:3f:87:d7:61:9a:d1:a8:6b:46:31:91:90:b3:19:a0:b7:01:
         e6:aa:1e:5c:c2:d5:30:99:cb:07:ea:ef:b5:04:84:1a:cb:f7:
         89:a8:c0:bc:06:cf:76:c9:48:56:a7:d0:ae:cd:43:96:32:05:
         3d:c1:02:06:94:ef:18:c3:9f:d8:81:15:79:b2:7f:d3:13:08:
         f2:97:b0:3a:f4:3c:fc:40:1d:68:f6:15:86:94:60:bd:a5:24:
         fa:09:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:14:23 2026 by rpki-client