Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/7e388385-5673-3ee0-96e9-2be7f534ca05.roa
File:                     7e388385-5673-3ee0-96e9-2be7f534ca05.roa (raw, json)
Hash identifier:          Be3Fq9Zv7OqUvxrkZDpX7Q54n+H3AFhqia7hprKHjGw=
Subject key identifier:   38:88:60:F6:7F:5A:5A:17:5C:6F:25:2A:39:34:96:65:CE:0A:42:06
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584F4976B1E9EEC675818F27A5B0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/7e388385-5673-3ee0-96e9-2be7f534ca05.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     29802
IP address blocks:        2602:f972:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b1:e9:ee:c6:75:81:8f:27:a5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9287fb7b-c7eb-4b20-a017-a4f7e67917ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:0b:d1:39:c2:4a:1f:4e:86:cd:88:07:e7:
                    22:9e:d0:eb:93:05:c1:e4:56:83:d3:ea:3c:87:f5:
                    55:05:a5:1e:3a:da:58:12:b5:7b:5d:66:8e:1f:60:
                    4b:b2:cd:89:99:1b:84:ca:48:89:ed:75:fd:7d:de:
                    dd:66:dd:18:c8:53:13:01:01:f9:d2:33:94:a7:f0:
                    10:31:22:01:a1:08:2a:cb:c4:00:4e:82:b3:12:a7:
                    7a:18:36:0e:53:80:31:51:72:3f:2b:cc:d9:6d:58:
                    cd:b9:ec:d4:09:dd:cc:f7:73:ff:85:fb:7b:0f:c5:
                    f9:55:db:62:fc:68:a4:fa:d2:f9:71:96:11:08:f7:
                    a9:48:3a:e9:fb:0d:77:d0:9e:59:22:32:e2:70:52:
                    a1:b6:f8:fa:4e:99:64:23:df:bb:21:61:f3:c0:ad:
                    01:9c:15:77:18:d5:a2:68:14:13:4b:9e:81:0a:f1:
                    26:91:4f:dc:80:27:7e:9c:36:a1:27:19:95:b3:40:
                    f7:cc:dd:53:0f:3a:57:5a:eb:64:22:4f:b7:a5:f9:
                    af:c6:98:da:36:e3:9d:80:02:68:11:ea:13:51:6e:
                    7e:f0:1c:68:71:60:87:1f:b6:c8:b6:36:01:2b:5a:
                    f6:92:9a:5a:0a:42:e7:9d:58:fe:c4:bf:ac:3f:64:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:88:60:F6:7F:5A:5A:17:5C:6F:25:2A:39:34:96:65:CE:0A:42:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/7e388385-5673-3ee0-96e9-2be7f534ca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:96:33:1f:17:87:50:b6:b2:79:86:72:f9:b2:53:f4:31:
         ca:fe:c8:5e:98:d6:82:e9:94:80:6d:af:14:bd:35:eb:dc:8f:
         23:af:91:16:64:78:aa:3c:9e:e0:e7:39:4a:d2:11:a7:d4:ce:
         39:bc:d5:94:3b:89:2f:4a:a1:02:8a:d2:06:f4:62:e7:4e:ef:
         fc:ed:f4:02:26:3a:87:ea:6c:43:8b:ae:2b:03:91:6f:be:18:
         10:a6:1e:6d:5f:7a:c8:52:be:78:8a:91:b2:6e:ba:74:19:cf:
         e1:c2:51:18:e6:85:83:bc:e1:4e:29:9f:01:68:e2:46:cc:12:
         13:3b:8c:83:3a:e1:4d:1f:fd:9e:f4:f1:1f:63:93:2c:a0:7c:
         b4:4f:68:47:4c:80:cd:b3:28:a9:ae:e1:6c:a9:0e:2d:74:65:
         65:1f:c9:16:f5:ad:20:36:95:5f:f5:ce:c3:9b:6c:87:99:f8:
         ec:61:14:6e:d9:bb:e2:db:67:bd:6d:e8:94:dc:99:76:66:73:
         c0:30:2d:c0:a2:5a:1c:4a:b6:46:c5:fd:09:2a:09:be:e0:87:
         ce:b3:96:ec:7c:bf:2e:18:43:e4:88:e2:6b:a4:39:06:e0:c8:
         d9:7f:f6:b9:f0:09:89:71:0d:14:23:f1:a9:ff:86:f1:3a:f8:
         85:f3:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:01:47 2026 by rpki-client