Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/d1c1d2bb-9532-3ca0-8801-fa3797c401a6.roa
File:                     d1c1d2bb-9532-3ca0-8801-fa3797c401a6.roa (raw, json)
Hash identifier:          BJJbR+nRZaTFNbxuuCE3CWm5ijx8G4j8D8XJciXIkZQ=
Subject key identifier:   CF:A6:54:B5:D5:EE:92:19:3D:59:04:EA:37:2F:28:CD:12:6C:65:57
Certificate issuer:       /CN=ecb94057-71c7-417c-9140-1014219048c5
Certificate serial:       010D0C9F4328584F1B62443AA385D969C4DA21C0
Authority key identifier: 59:EB:C8:2B:38:35:E7:84:CE:FD:9A:3A:C8:E6:0C:2E:66:3B:20:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/d1c1d2bb-9532-3ca0-8801-fa3797c401a6.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     9304
IP address blocks:        2602:f3ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:44:3a:a3:85:d9:69:c4:da:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb94057-71c7-417c-9140-1014219048c5
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=f7112f85-2efc-443d-ae57-6b9b9b26c098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:c5:e1:9e:50:ba:34:3a:54:47:41:99:b1:
                    75:cf:51:73:3a:24:7e:07:ea:e5:2e:2a:e0:d5:f1:
                    1e:8d:16:f7:31:fd:3e:e2:26:a0:9c:4c:f8:5a:fa:
                    be:35:fd:ce:11:a7:05:29:7a:ce:bd:e1:be:5d:c1:
                    30:d1:c3:6a:00:2d:7f:81:b8:62:40:aa:8e:ce:75:
                    36:c3:41:bd:62:9b:d5:be:d6:42:4a:fc:fe:34:46:
                    e7:16:d7:a5:5d:39:33:69:e9:38:0a:cf:15:8a:5a:
                    e1:ea:a6:36:1d:fa:63:be:45:56:67:20:21:ea:47:
                    c8:9b:17:64:f7:ab:c7:ef:28:24:e6:b6:8e:e4:1d:
                    66:f8:d5:63:55:fe:4f:16:0f:58:95:9b:1b:ec:a6:
                    0c:70:f8:9e:7c:b5:1f:d8:57:60:0b:26:d8:04:89:
                    7c:12:d7:28:4e:c7:02:96:0a:93:ed:0f:20:2f:9d:
                    84:0b:ea:0e:97:72:9b:1d:f8:8b:b0:b1:56:7f:20:
                    a1:9a:63:0c:bd:5e:8b:a1:aa:80:b6:7a:82:68:58:
                    4d:ba:d3:ae:3e:9c:eb:b9:27:b5:d1:c3:d6:39:1e:
                    1c:68:ca:4f:96:13:8b:1c:21:b6:5d:7b:3e:db:d9:
                    69:f0:95:8b:e6:e8:6d:31:49:51:7c:59:d8:b2:7d:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:54:B5:D5:EE:92:19:3D:59:04:EA:37:2F:28:CD:12:6C:65:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/d1c1d2bb-9532-3ca0-8801-fa3797c401a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.crl

            X509v3 Authority Key Identifier:
                keyid:59:EB:C8:2B:38:35:E7:84:CE:FD:9A:3A:C8:E6:0C:2E:66:3B:20:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:6a:3c:28:16:91:46:9a:ab:f9:fd:bb:3c:34:75:4a:b7:5e:
         69:7e:41:0c:a7:76:d4:9d:b5:a9:09:3e:21:16:b4:e9:85:49:
         5c:47:e4:0c:56:f7:9e:a8:2f:eb:d2:af:90:46:58:51:07:f7:
         28:82:07:3c:2e:c9:78:60:d9:37:9c:a5:b0:e6:e3:fc:aa:c1:
         4f:38:27:9d:cb:97:ec:86:1d:d8:8d:e4:b3:09:8b:c6:d5:fd:
         f4:91:73:2c:7f:47:7a:85:7a:f2:18:d7:b5:1f:df:4c:b3:8b:
         9e:00:7d:6a:3c:98:3e:4e:47:e4:8b:4c:cc:cb:5c:e9:6e:93:
         0d:7d:94:14:d3:4d:cb:3d:a9:c1:7d:b3:35:b9:a3:4a:ae:bf:
         4d:fc:66:cd:1f:06:bb:e3:04:18:45:dc:53:6e:cf:99:c6:46:
         7a:51:bb:f7:8c:8e:31:34:68:a9:4c:8f:79:11:67:d4:82:35:
         f9:57:f9:41:28:26:5b:46:41:fd:a5:3c:7b:7f:83:70:32:c2:
         74:a4:6a:c6:5f:90:2c:29:f7:db:0f:6b:27:4c:19:a6:ca:0e:
         28:51:cf:08:70:6a:c9:ce:bb:ab:e9:9a:24:df:da:e8:6a:e5:
         bf:86:f8:08:d7:07:3f:6f:66:cb:85:0e:3c:d5:d3:d7:f1:05:
         c8:d4:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:43:53 2026 by rpki-client