Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa
File:                     4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa (raw, json)
Hash identifier:          ogjfA+4a14iDf8yNAK2RTe87HbwrmpyRsMA64tbASiE=
Subject key identifier:   4C:F2:50:B6:C8:70:CB:3A:55:4B:7B:F2:85:25:D1:87:76:D7:B4:27
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584F23C25F0F3CFA7A093CC6D780
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     393448
IP address blocks:        2602:f96c:de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5f:0f:3c:fa:7a:09:3c:c6:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=63acd6c6-1fb4-4d10-977b-b75bec88bdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e1:b0:11:12:35:cb:dd:fc:66:3c:ff:67:ec:
                    4d:4e:ec:44:3f:70:a6:0f:bf:7b:a9:0a:21:02:70:
                    fa:a9:72:a6:bb:4d:89:eb:95:05:19:71:8d:66:02:
                    93:42:e1:2d:3c:69:f0:3e:8f:3b:95:45:cb:7e:85:
                    a9:bb:48:8c:69:36:8f:9d:ad:fd:d2:28:0c:3e:64:
                    7f:16:86:94:f1:19:fd:1a:0f:01:61:fe:f8:01:96:
                    cb:a3:84:ce:1c:c6:d0:e4:d1:0b:47:af:4d:6e:ef:
                    77:a8:f9:fd:a8:af:a4:36:7c:39:60:8b:51:29:d6:
                    91:d0:67:5d:23:39:4b:9c:36:2a:76:7e:ae:5f:5a:
                    8a:b1:90:10:78:ac:a7:c8:58:06:f3:03:4b:a0:e0:
                    94:3c:aa:30:51:7c:b1:0b:0e:ff:76:ac:80:f8:0f:
                    3f:1f:21:3b:d9:0a:b8:f9:55:ce:46:d5:97:a5:1e:
                    04:19:33:21:84:ea:90:1e:b9:e3:19:9b:c1:2d:0f:
                    02:d0:2b:8c:5d:dd:a5:7f:b2:4f:81:ac:b4:66:24:
                    0e:3d:8f:33:a1:c0:4f:d9:43:39:b6:c2:46:c0:4f:
                    08:78:1d:8c:0d:1d:43:20:9e:5a:58:fb:ee:d8:fb:
                    77:da:f6:df:c4:d9:e4:57:e9:a4:ea:c1:56:5a:81:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:50:B6:C8:70:CB:3A:55:4B:7B:F2:85:25:D1:87:76:D7:B4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c3a35b0-85d3-337d-b34e-65627f15cb1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:75:fe:6a:d1:0b:56:e6:1d:f6:8a:aa:12:96:9c:08:d4:03:
         d1:cc:82:0b:17:e2:9a:c3:3b:89:84:d8:ab:af:f0:aa:dd:e7:
         34:5b:78:cf:57:11:cd:15:97:fe:d7:d5:ae:d7:aa:4f:00:f2:
         ad:7d:c2:69:1e:4f:44:79:96:6e:7c:c9:ad:93:39:5f:da:75:
         e7:0d:e2:21:43:22:51:69:c9:57:5c:91:ef:3f:ee:1d:c7:c1:
         4d:d8:9c:f6:61:24:62:34:26:da:2f:ad:ee:26:26:f6:9d:c0:
         9e:c1:07:d3:95:21:5f:b6:69:02:9f:c1:1d:4a:d9:a5:21:2e:
         fb:77:fd:cc:12:8a:40:a5:5c:da:e6:26:93:33:d4:41:b7:73:
         cd:7a:8d:e8:8a:fb:ed:03:93:24:b3:ed:12:cb:a3:b3:1c:93:
         6a:dd:17:f3:6b:67:97:a8:b5:3a:05:31:31:f4:70:67:83:35:
         86:a7:da:1e:6c:45:c4:40:81:a9:d7:33:74:90:36:9b:d4:9e:
         75:09:3a:7d:ec:43:a0:41:7e:16:51:14:cc:2c:be:87:d0:03:
         68:1f:23:31:47:3a:3e:2f:7d:4d:b8:ed:61:27:9e:0a:43:44:
         b6:1b:df:30:a5:05:95:e5:56:94:ce:ca:c5:d4:a8:f3:3d:41:
         09:b2:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:10:14 2026 by rpki-client