Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa
File:                     be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa (raw, json)
Hash identifier:          iKgXUqeGecIfBMb/PoF2DD2hyVLoIorCpQupPPqIxSI=
Subject key identifier:   DD:3E:D7:4C:7F:8B:3E:D9:2C:60:D4:60:38:72:EA:F3:AB:4E:23:6C
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F4328584F2957B61B9190A1A35B887D80
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     400679
IP address blocks:        2602:fb82::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b6:1b:91:90:a1:a3:5b:88:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=e5b2ffd2-3744-4e5c-b1c7-e32f52ac6446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:8d:5f:55:1b:df:d8:ff:de:c1:d0:f2:69:
                    35:38:ed:b1:42:f6:93:a0:66:74:1a:7e:ee:2f:24:
                    98:52:a1:c2:03:36:76:93:f3:24:21:58:da:d9:31:
                    dd:76:6f:55:38:b1:aa:a0:5c:ae:6f:39:bf:84:a2:
                    a4:a1:a2:64:31:b6:60:fb:43:c8:ba:14:0b:30:90:
                    9c:90:23:45:4b:2a:68:44:35:13:e7:13:ee:bd:f0:
                    25:f6:54:ff:40:09:ff:4d:b4:07:e4:fc:53:5d:20:
                    d7:5e:1a:ec:4a:d6:c8:4e:33:e9:3c:86:8d:33:6a:
                    53:fc:72:ff:74:7b:4a:d8:6c:7f:e0:e1:48:0c:04:
                    14:80:4a:fd:ea:90:d4:54:be:ec:a5:8c:4e:9b:0a:
                    bf:b6:fa:91:3b:72:7c:c7:1b:f5:86:f4:82:7d:1f:
                    44:58:21:9a:c6:53:48:18:a4:49:c3:96:8d:37:9c:
                    77:2d:a4:bd:3d:b1:17:7c:9c:55:c3:70:f9:37:d8:
                    d2:28:3e:b8:65:31:5b:c1:68:cb:9b:53:21:2a:50:
                    24:5c:76:14:44:b7:64:e1:32:8c:c8:68:cb:b6:2d:
                    6a:64:ac:36:92:e7:b5:10:47:fc:52:d1:12:d6:15:
                    97:f6:65:74:76:02:2f:f5:ce:d8:cc:7f:49:f4:92:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:D7:4C:7F:8B:3E:D9:2C:60:D4:60:38:72:EA:F3:AB:4E:23:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:5e:89:e8:17:50:ff:99:c1:af:84:07:89:8b:d3:29:09:
         0f:ad:35:96:fd:19:16:b8:e6:23:f2:b9:2e:d5:45:e6:aa:75:
         c5:0c:db:9d:ac:c9:2c:dc:15:fd:c1:21:fc:56:27:00:37:37:
         5e:76:92:85:34:96:d4:e8:d1:ca:37:5b:7a:6d:e1:ec:3c:ce:
         08:c6:e3:22:02:7d:7c:f9:4f:69:ac:25:5d:14:32:6f:bb:ba:
         71:51:96:32:52:3d:3f:0d:a1:0b:04:2c:13:e4:82:a4:89:9b:
         e8:34:6a:f3:83:ea:9d:39:3c:da:92:4a:03:5a:80:73:87:2d:
         d2:12:06:00:81:0b:da:25:35:71:29:0f:dd:20:ed:bc:7f:40:
         88:c8:d5:65:2d:7f:34:67:5d:75:db:03:0c:77:db:3d:c9:bf:
         d5:58:c7:8d:58:2e:6f:eb:cd:84:1e:ec:6c:ee:48:a4:92:e6:
         d6:47:64:49:4e:9c:55:66:66:74:56:f3:7c:13:8f:28:fa:c5:
         db:f8:24:9a:32:18:ac:01:f9:10:24:7c:23:ee:74:23:49:ec:
         99:0e:b9:bd:3f:82:c0:4d:79:84:4c:a9:ca:e8:e3:9f:d8:6a:
         7d:8b:2f:11:d1:79:67:44:b1:c2:8d:ed:d5:63:54:27:87:6d:
         85:38:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:08:21 2026 by rpki-client