Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
File:                     18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa (raw, json)
Hash identifier:          SzoK3c3t2TAi8bGAp46IwcGqTORscYkMbcxFkn2j3xQ=
Subject key identifier:   AE:18:0B:B5:C7:EB:57:98:22:1B:43:A4:72:4B:11:72:13:48:62:F0
Certificate issuer:       /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
Certificate serial:       010D0C9F4328584F4976F722B8C729C612E72F80
Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32797
IP address blocks:        2602:2ef::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:f7:22:b8:c7:29:c6:12:e7:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6cb314e5-9162-4da9-8b27-9fe4e91bca1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:59:f7:9f:42:34:e3:9b:e7:39:a4:fe:ee:
                    d2:12:b3:0c:01:9f:10:56:e3:eb:3f:a6:09:18:74:
                    c0:c0:48:da:a0:4b:de:77:c5:1c:86:6d:a8:2d:a2:
                    e7:19:ac:be:33:90:b5:49:9a:44:68:3d:c1:fc:99:
                    56:25:7d:b9:59:80:70:b3:80:2b:30:8f:61:15:c5:
                    ba:00:13:d9:d4:07:93:e9:1d:ae:16:dc:f3:5d:79:
                    a1:0a:51:d2:cf:9e:30:87:10:75:6e:c4:7f:89:1e:
                    5a:02:40:06:62:c1:d9:1a:cd:f5:50:88:f4:de:2d:
                    c1:d5:92:e7:a6:cd:73:ac:22:27:1b:b0:04:9c:45:
                    6f:e6:76:3f:9f:37:ff:86:41:d4:3c:44:03:44:33:
                    3f:1b:2b:48:a1:03:3f:0c:15:6a:25:cf:5b:23:c3:
                    78:8b:3e:6f:78:56:f7:1d:de:77:0d:f3:1a:67:44:
                    93:f1:02:91:ac:7f:4d:25:e4:2e:a5:9c:0e:6f:11:
                    b1:d2:70:6d:91:e4:f9:d7:fc:07:ee:8f:1b:58:3c:
                    5f:2b:34:e8:72:b2:3b:09:d2:a3:45:8c:bd:d6:97:
                    04:dc:ad:e7:28:44:ce:09:c6:25:57:3e:a3:16:e0:
                    d6:a7:c3:88:8f:03:74:f1:88:1d:fe:2a:8d:4d:ea:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:0B:B5:C7:EB:57:98:22:1B:43:A4:72:4B:11:72:13:48:62:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/18bdc555-5ce7-3ce7-a252-8dd702bcc990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl

            X509v3 Authority Key Identifier:
                keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ef::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:67:ca:c5:2e:9a:67:d8:79:df:1f:a2:bc:ac:ab:dc:3d:
         58:d4:3d:b2:0a:5b:8b:1b:79:d5:6f:cd:80:fd:b9:1c:d9:fe:
         16:38:18:fa:44:d2:9e:c6:85:b8:47:fd:ae:1f:a6:e1:83:b3:
         72:bd:e1:ca:db:1e:a1:ac:d8:48:91:7b:5e:61:40:d6:11:ae:
         2d:a2:10:94:b1:47:dc:a4:ef:5d:9d:b6:44:d5:0d:a4:b5:a8:
         3a:9a:f4:10:b1:1b:f6:1b:f3:5c:e3:cf:fc:54:b0:68:bf:b2:
         21:8e:a2:b7:00:0c:86:b1:a5:78:77:7e:fe:22:1a:76:d2:d7:
         75:8f:7f:d9:c4:50:5b:6b:8d:b5:76:7a:b7:09:0d:94:58:0e:
         e6:27:34:71:45:c1:1a:85:f8:7f:df:ee:5a:38:f6:23:51:5a:
         bb:3d:6f:91:cc:3b:c4:c3:09:eb:a9:12:ea:4b:21:56:e7:e9:
         94:0f:f9:46:0c:71:74:59:3a:ab:78:9c:12:1e:66:8f:79:83:
         3a:b4:1a:d9:d1:84:61:90:fa:38:6a:46:76:9d:26:5d:21:d6:
         4c:08:a3:65:f4:9b:25:13:12:4e:e9:40:6f:b4:a8:16:48:da:
         82:06:27:97:69:2c:79:5d:d1:e5:04:67:4e:38:27:76:af:a8:
         bd:b8:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:34:49 2026 by rpki-client