Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa
File:                     f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa (raw, json)
Hash identifier:          +cg5XoK1vABkgQBqNR0XUC7mZ4Bta9p8/0s/1SiEPU4=
Subject key identifier:   1A:F2:6F:38:5C:EE:51:30:9B:B3:44:15:57:11:25:D4:49:09:B1:6E
Certificate issuer:       /CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
Certificate serial:       010D0C9F4328584EB6E1A62252F541871642DC80
Authority key identifier: C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     401167
IP address blocks:        2602:f8a1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a6:22:52:f5:41:87:16:42:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=36304f9d-a455-4f74-bad4-9103c5a93d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:19:54:be:ff:89:32:97:30:15:c1:91:f4:
                    62:24:bf:eb:0c:0b:9d:27:e7:07:47:a7:ff:db:bc:
                    c6:46:f8:cc:41:55:ca:aa:f1:b8:31:b4:85:75:f6:
                    d3:c9:5e:0f:b9:67:da:d2:fc:c0:aa:42:fb:61:14:
                    f3:ee:d6:4b:f2:84:49:c6:ba:a8:62:7e:fe:d9:07:
                    36:c9:a6:e7:70:77:98:b0:9e:4b:0c:3f:eb:35:8e:
                    b8:a8:69:14:70:51:29:d4:be:37:dc:d9:84:37:47:
                    49:9a:8f:aa:64:aa:03:45:58:65:1d:40:85:85:9d:
                    2e:0d:b5:0e:ca:6e:fd:ac:12:26:aa:68:04:62:c1:
                    48:d3:89:95:73:83:22:50:b5:29:fa:4a:28:72:fd:
                    c8:22:73:7a:ee:8f:e6:b7:09:e5:09:7e:f0:e4:79:
                    0a:0e:6e:73:a9:10:54:3c:26:c2:d3:3c:79:03:31:
                    ee:21:41:8e:14:fd:9c:6b:f9:82:a2:7e:59:d3:53:
                    c5:3f:31:21:79:ab:04:d4:68:db:47:1d:f7:d3:83:
                    c5:0f:06:34:1d:f7:35:e1:94:9f:54:b2:55:d1:f5:
                    12:da:fc:16:3b:ae:05:b5:85:7a:04:55:dc:54:44:
                    0f:28:8b:60:56:ee:6a:e0:2d:8d:81:0f:12:65:d7:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:6F:38:5C:EE:51:30:9B:B3:44:15:57:11:25:D4:49:09:B1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:e3:57:30:58:de:75:ad:e3:ac:f3:a4:39:03:37:ea:c5:
         1f:c0:13:53:fa:41:bc:a7:3b:e2:95:3a:2f:fc:42:18:0e:c5:
         d6:c2:a3:94:45:f1:83:4b:60:e9:dd:bb:fa:17:17:f6:24:8d:
         9d:9f:6c:a1:bd:b5:bb:ac:fb:a9:14:7b:97:f6:14:19:99:ee:
         d6:8a:69:3e:ef:70:f0:35:5e:41:e6:ca:3f:87:11:7d:e8:c4:
         51:96:d4:67:99:91:13:ef:a3:ea:35:b9:41:26:7f:82:66:ec:
         d5:28:72:60:ea:eb:1e:5e:3f:11:2b:e2:8a:25:d9:2a:c2:d7:
         17:13:c2:1f:b4:7a:d1:00:5f:fd:6c:ed:fc:d2:11:a5:af:fd:
         e2:e6:6a:77:ad:ea:9f:90:42:8c:2c:f3:f1:1f:5f:89:47:d6:
         4f:15:9c:9a:56:72:27:9a:cd:84:e8:49:a5:dc:b2:ed:fe:ad:
         ca:12:cf:25:45:89:99:06:e2:3b:58:78:7d:2d:cd:b1:c3:e6:
         60:49:f7:43:9d:22:ff:0b:2e:57:7e:66:c6:7f:60:53:1b:d8:
         98:49:d1:58:cb:9f:40:42:56:29:c5:b3:15:e2:17:c5:63:e4:
         80:95:19:c4:ec:12:d7:86:79:e4:1c:70:e8:23:db:a2:91:d8:
         10:02:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:05:51 2026 by rpki-client