Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
File:                     d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa (raw, json)
Hash identifier:          C4Gc/66uU/fpu3WHtxJjN7uOE/bggCJ+bNLy7ocrxoQ=
Subject key identifier:   C1:D9:DB:A6:18:EC:51:F6:50:F9:59:F7:E8:01:05:8D:3D:86:B3:6C
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584F1CC7A9A2EBEE6636EB31EB00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396416
IP address blocks:        2602:fb78:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a9:a2:eb:ee:66:36:eb:31:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=3b3fde57-d13b-4588-8da4-f97e4ef0e6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:b7:fc:a5:0b:bd:8f:e7:33:3b:23:b7:0f:
                    47:5e:1a:8d:d1:41:88:8a:8c:4f:8f:0a:2f:ed:85:
                    6b:a3:c7:cd:9e:b8:92:78:96:97:a5:48:7b:58:ad:
                    5f:8a:96:5a:ff:47:16:83:96:de:89:9a:24:f8:62:
                    9e:6b:c2:22:8e:51:2b:d9:a8:11:6f:5f:dd:20:ba:
                    dc:a5:49:5e:5d:53:1b:d0:22:ab:6c:0e:dd:fd:9c:
                    cb:12:34:28:63:08:8e:58:e8:a4:a8:b4:4d:c7:fb:
                    98:29:d5:d9:56:d2:27:49:05:b8:ef:28:bc:d2:1e:
                    f2:d3:0c:b7:56:e3:05:9c:a0:4d:75:f3:d0:25:fd:
                    0e:37:5b:52:d9:e8:1c:24:7f:39:b2:92:19:36:46:
                    da:28:a2:dd:ed:e6:69:96:38:5d:1f:b9:00:5f:37:
                    08:45:01:54:d9:71:cb:a5:43:f7:71:0d:91:c6:0f:
                    25:2a:35:02:5e:76:a1:c7:c8:72:2f:4e:36:f1:d8:
                    7e:8e:04:22:c1:eb:88:7b:40:a8:db:af:87:f3:8c:
                    20:95:e4:f3:6c:44:90:37:c2:23:f6:2a:8e:47:17:
                    c7:9e:73:82:c2:b9:82:37:64:ab:a1:e0:c3:1f:96:
                    20:bf:3d:58:ba:d5:6f:0f:50:db:a7:84:af:01:71:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D9:DB:A6:18:EC:51:F6:50:F9:59:F7:E8:01:05:8D:3D:86:B3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/d1f05bc5-9b53-3c07-8aa1-c947b095bd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:63:aa:97:3b:7d:7e:58:94:46:a7:de:bb:91:3a:7f:96:ed:
         1c:d7:b6:be:20:7b:f8:01:f5:e6:7e:6c:bc:dd:9e:35:f1:fe:
         ee:fb:6d:1c:9c:1b:e1:92:3d:a5:a8:21:11:df:e8:a6:eb:e1:
         bd:8f:5e:b0:88:f7:17:86:42:1e:92:3c:9f:ec:ec:f1:fe:89:
         8e:62:e9:e0:8b:cd:0c:7a:ef:01:ec:3b:ca:68:ca:c4:9a:70:
         28:1a:e0:e4:3f:c5:ce:36:db:84:a9:f2:4d:6c:06:e2:0e:66:
         a4:4d:c8:99:c1:11:be:c5:a5:cd:39:89:09:31:d4:fb:e6:05:
         87:43:49:62:eb:5b:13:29:a8:65:29:86:46:8d:f3:e1:0d:10:
         2f:f7:b8:30:9c:47:97:ef:51:43:ff:43:91:3c:d5:14:8c:dc:
         99:a6:9f:71:ee:fb:99:ea:61:88:50:5f:25:d0:d6:18:12:51:
         39:c9:43:f2:c9:d5:82:de:66:42:45:cb:56:4d:6f:b8:35:9e:
         e4:bc:21:42:3e:cf:f7:6b:7e:80:86:68:b1:cb:66:4e:8d:47:
         a7:a4:28:d6:8d:ef:61:0a:cf:fa:d6:af:08:38:e2:2d:75:2b:
         52:89:bc:36:25:82:15:d4:f8:fa:f8:5d:1d:f5:ce:d3:c4:f0:
         ef:9d:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:20:19 2026 by rpki-client