Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/6a610220-4e4a-3b80-971e-3405f066ffbd.roa
File:                     6a610220-4e4a-3b80-971e-3405f066ffbd.roa (raw, json)
Hash identifier:          P49I++X709oR1IwNHyQ5qvydqeG46gYAQi2PsM7vzHE=
Subject key identifier:   40:72:19:D1:E9:E9:A2:96:D7:98:D1:A0:3D:46:AA:A3:93:84:87:36
Certificate issuer:       /CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
Certificate serial:       010D0C9F4328584F0D6CE0E93067C4CADBEC7FE0
Authority key identifier: 63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/6a610220-4e4a-3b80-971e-3405f066ffbd.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     397547
IP address blocks:        2602:fc14::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e0:e9:30:67:c4:ca:db:ec:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=44e9370f-f593-4dc3-a105-991dd3974a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:37:1f:9a:9c:c9:fd:87:1a:30:70:5c:1b:
                    3e:b3:e4:4a:46:a0:2a:20:8d:0d:01:8b:f1:38:38:
                    a9:d6:ee:7b:c6:d6:11:15:a3:7e:59:5c:24:10:e8:
                    62:f4:b3:93:f1:4a:36:89:e4:b0:6c:f8:f9:40:a3:
                    41:e4:ce:25:35:ba:d3:28:62:ba:ef:03:50:1d:bc:
                    34:ac:c1:ac:08:56:8d:04:f2:e5:af:b5:55:6d:76:
                    3b:1b:1a:d7:94:51:96:1b:8d:44:c9:0b:a7:95:08:
                    5d:00:bb:b3:4a:ae:58:cb:1a:bb:08:8d:c8:56:af:
                    0b:c5:c9:52:07:53:73:2d:5f:5e:d2:12:3b:f8:45:
                    97:9b:a6:63:8e:01:90:e7:9c:b2:71:08:d1:52:99:
                    2f:d4:15:e1:62:1a:cd:44:ce:4e:c0:df:04:0f:6c:
                    ce:be:93:9d:47:12:90:c4:d1:6c:b1:1d:b7:f8:53:
                    c3:57:e5:93:d2:60:f9:2a:22:bf:9c:4a:1b:51:15:
                    d1:23:4b:d7:f0:4e:5a:d4:9c:77:07:f0:71:e7:53:
                    95:26:90:ed:b7:3a:bd:cc:31:4f:d9:0e:f5:ca:6a:
                    9c:70:49:95:37:85:89:63:75:81:9d:93:3e:f3:47:
                    a6:c0:38:d6:41:b5:f7:0a:66:bc:98:c1:be:74:cd:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:19:D1:E9:E9:A2:96:D7:98:D1:A0:3D:46:AA:A3:93:84:87:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/6a610220-4e4a-3b80-971e-3405f066ffbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl

            X509v3 Authority Key Identifier:
                keyid:63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc14::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:46:70:a7:ca:e3:69:a7:aa:de:56:08:8a:34:6c:1a:e6:c8:
         f3:1a:fa:21:e9:95:4e:0c:f6:45:03:0e:c3:15:3e:4c:1f:7c:
         bc:f0:3d:35:80:5e:8c:eb:fd:a0:9f:4c:69:45:f5:e3:57:f9:
         73:36:6a:d7:7b:8d:62:7b:16:c5:04:2e:56:b2:24:b1:1f:c3:
         13:de:b3:53:3d:08:c9:c1:b8:e1:a7:af:6c:5d:e6:49:ff:d3:
         37:37:bd:22:9b:9a:08:d6:0b:0a:22:20:6c:62:18:02:da:45:
         2f:58:28:fb:91:3a:56:67:50:06:5c:22:d1:52:99:43:dd:8c:
         a3:a3:b1:54:52:3e:c7:64:ba:06:74:7f:2a:1a:0b:d6:a2:03:
         b4:4a:04:f0:f9:f9:93:3b:61:79:f4:a7:3b:bd:79:aa:19:cf:
         e9:4f:76:70:b2:63:0f:96:3a:61:bd:d4:4c:74:7b:dd:7c:2d:
         a8:ee:22:e6:9c:65:0e:14:8b:67:c9:53:bc:75:d5:d6:43:08:
         fd:a3:fe:9a:d6:c9:f8:b7:9b:b5:25:e2:11:72:f5:6b:35:80:
         94:5e:c3:19:7b:9d:af:31:85:d8:b2:48:43:13:52:2a:d8:48:
         d4:4a:1f:85:ba:e6:da:1e:f4:25:0c:95:d6:58:9a:f1:0a:80:
         ae:0b:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:30:43 2026 by rpki-client