Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
File:                     09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa (raw, json)
Hash identifier:          JOBj6xsZOox5lurRFwbw1Y7EXMJeigTAybAd0SG9wEE=
Subject key identifier:   DA:B4:64:41:94:52:C6:9F:49:37:E5:EF:F6:40:7A:25:87:5C:DD:64
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584F374D2AF02D918D3F34B75940
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     11290
IP address blocks:        2602:210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2a:f0:2d:91:8d:3f:34:b7:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=cc363870-dc25-43e2-9369-b400389ed35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:71:d5:78:77:e2:8f:5c:57:2e:7e:af:cf:
                    8a:8e:0a:83:69:37:49:57:bb:aa:c9:4b:04:90:19:
                    34:d9:90:34:2a:cc:bc:75:49:e4:b8:5d:67:65:9d:
                    0c:bc:a5:fb:9f:50:01:83:47:64:68:aa:e5:34:4c:
                    6d:e3:70:56:77:98:e0:e2:33:df:d0:90:89:f4:f9:
                    b8:af:2d:72:0b:40:26:46:e9:6c:6e:14:db:83:4b:
                    74:6b:e0:88:c6:73:c7:2d:28:e4:c2:58:33:ea:02:
                    20:f4:46:dc:98:9a:8d:e7:a1:cb:85:a2:19:1b:71:
                    0c:79:92:d0:59:42:27:ac:f1:bc:94:4a:ec:2d:97:
                    23:03:5f:9f:f9:f0:95:e7:9b:db:ce:2c:da:51:a2:
                    c9:01:d1:5d:a6:38:eb:ee:ec:a2:b4:f5:02:f5:81:
                    c1:48:d2:1a:d5:76:9d:6f:f7:88:a1:23:0c:60:af:
                    7a:76:0e:cd:a3:c3:dc:e7:41:85:26:5d:ed:3f:14:
                    ba:76:55:55:45:87:cd:9e:67:ca:7c:81:50:a2:df:
                    78:5b:cd:96:58:1e:cf:bf:eb:1c:e6:32:a6:d3:71:
                    fc:d7:ab:25:7c:3e:95:80:a0:41:64:db:5b:26:d6:
                    6a:3a:91:38:a8:85:9e:e6:37:65:3f:01:07:ad:06:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B4:64:41:94:52:C6:9F:49:37:E5:EF:F6:40:7A:25:87:5C:DD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:210::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:61:36:18:ea:47:57:62:a8:69:3a:55:9e:fa:ef:e4:51:
         eb:c1:f1:30:27:72:f5:78:26:35:c2:6f:7a:74:51:66:95:ca:
         fe:a7:56:9f:44:9e:70:8a:1a:68:e7:f7:30:bf:42:da:3d:7f:
         52:7f:b1:62:4f:18:17:7a:b9:04:24:2e:af:86:32:db:e3:36:
         8a:87:4d:a2:5f:96:48:43:03:44:84:8b:2e:2b:a4:53:e9:49:
         dd:53:50:58:9e:12:5e:41:26:83:8c:72:91:6d:24:eb:1d:65:
         a7:f6:8a:cc:4d:88:bb:8d:6d:e7:61:e9:59:66:bf:f5:37:cc:
         2d:67:9a:22:f7:8f:47:eb:12:fd:4b:f4:1c:78:a8:e3:43:83:
         2a:e8:29:a8:8b:b7:af:49:28:54:9c:80:e2:f3:8d:ed:a8:33:
         b8:bd:11:22:15:d9:3e:21:af:d5:6e:16:a0:44:cd:cd:4f:ea:
         be:22:00:dc:f7:99:42:03:e8:42:66:97:2c:de:d9:fa:8a:9e:
         b1:15:17:52:e8:ee:85:54:40:ff:cb:9d:a5:cb:70:4c:ba:4e:
         a8:68:a3:89:d4:59:ee:08:1a:37:a4:64:0c:c3:c4:95:91:3d:
         b6:bc:45:b3:5e:4e:05:42:ee:91:b9:2f:e4:ab:3f:a7:35:5c:
         ab:6b:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:08 2026 by rpki-client