Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/e33bbd30-5261-340f-820d-c23282954daf.roa
File:                     e33bbd30-5261-340f-820d-c23282954daf.roa (raw, json)
Hash identifier:          xcTOrjbSRYOY6/rTMXe7bFumHoZLpB9nLLqYZGy4Vew=
Subject key identifier:   86:7C:20:FE:87:58:C1:8C:74:63:55:6B:4A:A9:C1:06:3C:CD:19:26
Certificate issuer:       /CN=5cc1a2c5-2615-4740-8c70-3bc7ed132d98
Certificate serial:       010D0C9F4328584F3CE285CCDEE00F57FDBBB000
Authority key identifier: C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/e33bbd30-5261-340f-820d-c23282954daf.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     399206
IP address blocks:        2602:fc84::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:85:cc:de:e0:0f:57:fd:bb:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc1a2c5-2615-4740-8c70-3bc7ed132d98
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=cd22cc6c-c532-4106-9ec5-3f3ff9c41a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:a5:f7:8e:77:a5:1c:90:a3:4c:6e:5c:7b:
                    d5:c2:09:f8:98:39:aa:70:59:8e:25:34:7a:23:a4:
                    43:1d:1d:fb:f6:40:83:57:6b:cb:63:7c:93:30:4a:
                    6a:2f:81:b5:dc:a8:17:ec:8b:83:95:dd:22:33:5a:
                    75:23:bc:64:9a:8a:fd:17:3b:57:28:05:28:fd:23:
                    65:b0:14:6f:05:02:ac:81:01:1b:7c:9d:8d:46:0b:
                    21:4c:58:b9:79:78:77:2e:4b:63:72:d6:bb:e1:7c:
                    df:86:6b:46:73:17:a0:bd:18:79:74:ac:4e:d6:af:
                    32:1a:2d:0e:e9:d6:ef:a5:a6:c5:c2:50:ab:d4:00:
                    f0:ad:95:87:15:d7:25:1e:52:4c:dc:27:cb:aa:eb:
                    04:e6:4d:98:76:cc:08:c1:0a:e3:07:8c:c2:81:6c:
                    7a:a9:81:d3:40:11:4a:bd:96:2b:7e:c8:49:b0:72:
                    58:d5:1b:70:ca:f6:16:94:bf:57:f2:6a:f2:75:bd:
                    73:80:32:dc:be:e5:0f:2a:36:16:35:34:70:58:50:
                    37:98:a2:88:26:52:ad:26:c6:7e:86:e7:68:07:fb:
                    c8:1d:ea:70:69:79:61:df:35:ac:0c:d1:5f:d3:74:
                    c8:f2:8e:b2:d2:97:a5:52:5d:1f:d4:e8:a3:35:7f:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7C:20:FE:87:58:C1:8C:74:63:55:6B:4A:A9:C1:06:3C:CD:19:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/e33bbd30-5261-340f-820d-c23282954daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7D:6E:DB:5C:90:20:CD:51:B2:95:9E:FB:2E:C4:2A:D0:1D:21:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5cc1a2c5-2615-4740-8c70-3bc7ed132d98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc84::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:16:79:6f:62:42:0c:07:37:c1:ed:49:d6:91:bb:b5:a8:20:
         21:ce:49:29:b8:98:a6:0d:99:b3:b4:6d:34:c7:96:fd:e3:cc:
         f6:86:40:cb:2b:c7:34:1f:e6:ca:8a:d8:98:4c:17:8d:3a:6c:
         7f:90:6c:56:24:07:85:d2:7d:6f:e8:0c:bc:fe:02:d1:20:5f:
         5a:0e:07:28:8d:f3:30:e8:ca:af:ce:18:d3:3d:d8:2f:5a:d2:
         30:1a:51:3b:07:df:36:3b:a8:86:47:5d:fc:9b:02:3f:c0:d5:
         d6:94:99:03:d6:da:df:05:bc:0f:52:aa:12:76:78:33:c3:b1:
         2b:e7:b3:3d:b6:79:6a:10:c2:22:e1:da:bd:09:97:47:bb:1c:
         49:8c:d6:ca:e6:bb:da:41:d2:d8:fd:ec:00:a4:96:5f:11:9e:
         b7:a1:a8:a5:84:2e:6a:0f:31:8a:f5:df:bf:5e:56:0a:d0:e7:
         d2:91:8b:1f:68:6a:a5:61:cc:7b:27:3c:6d:08:ca:08:58:42:
         5e:27:1c:c5:2a:07:bf:47:7e:4c:e9:ca:63:5f:b4:8e:12:c7:
         a1:83:0e:bc:0c:91:c2:68:41:1d:e8:98:3f:ae:38:7f:ea:fe:
         1c:7d:18:3a:aa:fe:0e:38:28:d9:50:6c:20:98:2f:06:e1:28:
         96:ad:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:19:01 2026 by rpki-client