Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa
File:                     4521230d-a7d3-3539-b54c-49378e8313e8.roa (raw, json)
Hash identifier:          ivtWFmF7SrglN157AEGw7/hbtwGj4gdNLpcjbTDeFOg=
Subject key identifier:   21:7C:6B:55:C0:68:35:AF:6A:D0:DB:20:EA:AB:29:AB:99:63:60:4B
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584EFCACCB51A9C3D593215A7A00
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:a201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cb:51:a9:c3:d5:93:21:5a:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=f6fdea40-8912-489c-a646-a9d70675e004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:55:26:c0:2f:71:8f:08:70:83:54:82:f4:
                    af:56:06:99:8e:2c:80:28:4d:cb:0c:7b:db:02:89:
                    ac:f3:1d:07:df:b6:3b:b5:57:79:5c:4c:5d:13:5c:
                    29:95:7f:19:f3:ee:38:ce:c7:f5:c7:3a:58:40:bb:
                    0a:5e:69:29:9e:16:65:76:a5:59:6c:d2:bd:9d:ce:
                    17:ea:73:b5:1a:0f:24:42:37:95:62:85:48:d4:1b:
                    9c:22:cf:81:04:37:2d:90:b9:0c:87:c3:70:49:be:
                    86:4c:9f:ee:54:01:e8:43:ea:3f:15:24:d6:b5:f9:
                    85:f7:ab:1b:a8:64:bf:7a:eb:be:86:dc:34:c3:cd:
                    f8:31:61:1e:76:09:10:0c:54:4a:07:f6:46:a1:53:
                    ab:00:60:76:d6:15:8b:38:30:14:09:1e:4e:8d:13:
                    40:e0:b0:4d:7e:2b:d1:8e:16:4e:4e:3f:74:11:60:
                    86:28:c8:f4:90:02:e7:42:e2:67:57:d1:ec:b6:dd:
                    e1:f5:64:8f:4e:48:3d:46:55:78:8d:d3:db:ad:67:
                    31:72:39:24:03:49:69:78:48:80:56:5a:5b:2e:62:
                    2f:86:ed:c1:a0:af:bf:88:bd:37:f5:84:9d:6a:e4:
                    29:1c:11:7a:b7:b0:2b:7a:2f:21:4a:63:c0:cc:c4:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7C:6B:55:C0:68:35:AF:6A:D0:DB:20:EA:AB:29:AB:99:63:60:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4521230d-a7d3-3539-b54c-49378e8313e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:a201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:81:33:ba:98:8e:65:f9:da:2c:ee:be:05:3f:c6:f0:98:
         66:be:55:b7:f1:da:74:9d:a5:0d:ea:5a:78:44:59:29:c5:d7:
         d6:1c:ae:37:ac:95:5b:eb:56:7a:f1:35:3a:96:47:c3:1d:9a:
         87:f3:4c:7f:63:51:62:9c:14:1a:3c:8a:dc:25:a8:7d:60:72:
         63:5c:46:c2:09:01:3e:b3:a3:ec:4d:71:64:f0:17:e3:1e:c2:
         6e:5d:bd:c0:79:1e:97:08:00:a4:4e:c6:55:2f:9f:f6:c3:73:
         9f:12:85:e3:03:4c:38:5f:8a:a1:65:b3:7b:1b:cb:fb:ea:b4:
         f3:0d:a3:04:e2:f9:7e:68:cd:35:6d:ac:6e:3c:08:01:d7:c8:
         96:31:a1:5e:56:a3:84:b7:65:7e:fd:aa:94:32:de:a6:7e:2e:
         4b:31:64:9d:fa:af:52:5f:f9:b8:c7:de:5c:c2:fb:10:b8:19:
         8a:85:42:f2:16:ef:4b:3f:e9:20:a1:95:9d:b0:ab:04:cb:a2:
         21:ec:d4:39:ff:ce:b3:0d:38:48:09:7a:8a:fb:3a:3b:75:fa:
         c8:e4:30:5c:c7:fc:e3:bd:4b:a2:e7:1d:4f:b9:4e:dd:8c:ff:
         17:63:80:1f:38:7c:0b:bb:bf:09:81:86:0b:be:bc:37:91:41:
         be:1b:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:06:48 2026 by rpki-client