Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/8acaa046-3712-3e7a-aa6b-e2484070f373.roa
File:                     8acaa046-3712-3e7a-aa6b-e2484070f373.roa (raw, json)
Hash identifier:          Rts8ikRhh+Sl/Q0E6Hc+EDBLONYUQ9K7URvwI6TR4gA=
Subject key identifier:   2C:D8:97:37:CE:50:88:76:29:04:40:0E:F3:4F:C4:9A:95:6A:19:AB
Certificate issuer:       /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Certificate serial:       010D0C9F4328584F23C2550E5668E39738B49200
Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/8acaa046-3712-3e7a-aa6b-e2484070f373.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     395332
IP address blocks:        2602:fb69::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:55:0e:56:68:e3:97:38:b4:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=bb801724-349d-4a05-88f5-bf8b83eaeb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:3c:3c:8c:c8:29:09:34:a7:a7:59:10:dd:
                    f4:ce:a3:86:4f:e7:ee:80:b0:04:65:1f:f2:25:22:
                    46:e2:7f:c9:e0:9c:49:25:46:8b:43:72:dc:5e:42:
                    b2:a1:9e:da:39:73:ab:7b:ed:06:0a:6d:5a:db:a9:
                    28:7f:4f:c5:cf:08:d3:bf:5d:fe:d5:ef:90:1e:1f:
                    2c:73:1c:32:62:ce:44:b4:85:aa:d8:1e:99:3e:5a:
                    3c:aa:ff:db:11:46:8f:0d:f6:ed:25:59:7e:8d:17:
                    08:8a:31:57:3f:ba:25:61:5e:a1:dc:ff:b1:34:31:
                    71:0f:6c:be:0c:44:85:35:32:09:c7:7e:fa:34:51:
                    18:e9:fa:79:08:d7:69:ec:03:c6:d0:b3:ef:71:65:
                    29:f2:1e:c3:df:44:3d:9c:53:e8:6e:14:de:f3:47:
                    ed:bc:f3:49:fb:41:f4:4e:df:96:36:e1:b5:88:b7:
                    a4:11:81:3a:18:4f:29:0a:24:ba:ae:0d:a2:49:3d:
                    f2:4c:68:7c:3d:e4:35:f1:13:02:c1:03:9c:3e:1b:
                    dc:ff:6b:be:b9:60:69:16:58:e4:ff:3e:85:a5:51:
                    41:67:eb:80:19:6d:ed:40:42:d7:37:37:c1:29:69:
                    11:57:3f:60:8c:ea:a3:51:b3:c3:24:bb:5f:e1:85:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D8:97:37:CE:50:88:76:29:04:40:0E:F3:4F:C4:9A:95:6A:19:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/8acaa046-3712-3e7a-aa6b-e2484070f373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl

            X509v3 Authority Key Identifier:
                keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb69::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:c7:ba:e5:46:ad:4e:64:38:32:c6:43:be:cb:15:5a:a1:
         b5:88:c7:98:6e:c9:0a:44:58:29:3e:74:bb:85:a8:7a:40:44:
         a1:dc:59:00:bf:67:52:71:18:7e:d9:6e:5f:c5:f5:a8:06:dd:
         ee:04:a4:fe:83:1b:97:2c:75:f5:4e:c4:83:ea:0a:5f:d4:17:
         0e:5c:04:d0:22:3a:33:86:81:2b:8f:9d:0d:e2:0a:cc:29:d6:
         8b:b3:b5:28:3f:27:74:f7:cf:04:f6:d5:17:d0:77:64:cc:29:
         5f:67:06:46:ed:12:09:85:b7:08:b4:41:d5:e8:72:db:04:0d:
         9f:54:b0:3d:90:e5:10:44:e1:ac:8e:cc:e1:71:1c:39:c8:dd:
         46:43:ae:38:57:5c:80:5a:2a:51:4e:3d:58:32:79:bc:c2:f3:
         76:9c:11:b0:e4:38:e8:94:e3:9c:ca:23:f6:22:ce:35:3a:b4:
         ae:a2:5a:e5:a0:d8:bd:3d:7e:6a:d8:eb:b8:a4:47:c9:c5:af:
         5f:cc:02:15:f0:a5:eb:ec:23:72:53:50:ac:33:f9:40:68:e3:
         db:4c:b4:f7:15:62:17:9a:15:df:1c:ab:85:b4:a1:d0:4d:e0:
         88:ad:1b:ed:d2:e0:cf:35:20:71:62:93:2a:06:b8:72:15:a7:
         19:54:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:30:35 2026 by rpki-client