Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa
File:                     84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa (raw, json)
Hash identifier:          OdCA/L0sJSh+EfWEfe/DOwJznqNQNUN7V7aVUT5dQUg=
Subject key identifier:   70:12:98:0F:6A:21:41:77:F6:18:8A:78:2D:D7:FC:84:90:91:DE:DB
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F4328584F49768D62B5DDCB2F2F6F8DC0
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396073
IP address blocks:        2602:f947::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:8d:62:b5:dd:cb:2f:2f:6f:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=04177867-6ebd-4d41-b1d3-b3baa2d73763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:95:e7:74:39:a8:fc:a5:f3:75:fe:3d:81:
                    e8:fb:4c:ce:bc:1d:39:34:42:60:6f:d7:ca:1c:a0:
                    58:59:af:31:3c:be:30:80:bd:b0:74:a9:d3:50:81:
                    b8:34:52:90:75:53:16:7e:20:fd:c3:f9:87:aa:84:
                    69:50:31:4f:28:a1:8a:b5:10:43:a1:a0:56:03:6c:
                    77:a3:65:e9:fe:d5:ba:2c:d7:cd:63:71:2c:c1:c7:
                    8e:3b:0e:ee:4d:58:37:a5:7c:10:f4:55:71:0f:ef:
                    55:f1:f0:08:16:3c:c6:8f:7c:05:f2:18:c4:27:8b:
                    7b:de:84:3b:49:f0:ba:81:65:c8:71:e5:c6:0e:c2:
                    6b:6a:d8:40:16:bf:e9:c1:68:55:22:92:93:8f:2d:
                    34:15:3e:8d:a7:7f:f5:99:9a:b9:fb:65:13:13:1d:
                    64:27:f0:2a:b2:85:0c:38:98:71:24:f2:6d:0c:1a:
                    d2:7c:6d:70:2e:ec:c7:b0:40:b5:b8:2d:32:8d:74:
                    69:8d:17:2f:16:be:df:0a:cc:8a:da:ca:9a:21:c7:
                    3f:38:63:cd:7e:89:49:a9:90:1f:44:77:07:10:b9:
                    97:ad:fc:e5:1c:79:e9:9d:a2:34:5b:ce:27:67:0c:
                    6f:2b:4f:57:5c:1d:61:0b:f8:a9:2f:52:be:7b:4f:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:98:0F:6A:21:41:77:F6:18:8A:78:2D:D7:FC:84:90:91:DE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f947::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:a9:11:a9:92:0b:10:41:41:42:db:ce:60:b2:95:8f:ff:
         4d:2d:79:c4:b2:e4:99:27:fa:22:c4:ed:c4:85:8b:ef:16:7a:
         c6:6f:86:17:2c:bb:42:13:ca:78:76:70:59:c9:2b:b5:24:a6:
         dc:5c:c5:e9:f8:41:d7:d1:58:9c:12:01:45:b7:d5:33:f7:b0:
         ce:04:81:24:63:47:17:11:06:ee:a6:d0:c4:9e:5c:4a:95:2a:
         dd:1c:49:cc:99:4b:a7:94:1c:9a:5d:27:5e:6f:b3:07:65:cd:
         c8:b3:f2:d0:dc:0b:89:1d:e0:18:48:c0:ac:7d:6d:5a:49:fb:
         7a:94:88:a1:71:8c:a0:1d:3f:2b:67:75:4d:02:18:18:32:ac:
         32:ee:2f:68:1f:26:1c:07:48:ad:b0:94:90:05:19:52:eb:97:
         c7:93:4c:2a:0a:a2:dc:0a:3f:ba:a4:2d:2e:e0:05:be:b2:64:
         f2:ce:5f:b6:07:59:86:df:aa:2e:df:c7:be:75:bc:34:25:b0:
         a8:26:67:f0:7e:79:62:01:60:24:3f:1e:dc:f1:ad:3e:b5:d9:
         99:3f:26:98:e1:0a:f7:a1:a6:9d:ea:1c:cb:e5:d5:32:4d:0b:
         9a:b1:d4:c8:87:48:9d:08:46:bb:fa:5a:d9:0c:5f:6f:06:32:
         d1:fd:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:58:08 2026 by rpki-client