Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/0e591ca7-994a-3a65-ac35-b13e088dc245.roa
File:                     0e591ca7-994a-3a65-ac35-b13e088dc245.roa (raw, json)
Hash identifier:          g/i1y7xNPQ0POdYP8FK+/cOIVIMSghQ0PCjJHtjIWws=
Subject key identifier:   2F:03:83:56:64:93:E9:E5:8B:AE:F5:7D:FE:C9:B0:8A:19:B9:D7:26
Certificate issuer:       /CN=2b41a59d-bac0-456f-82a5-a12979543eff
Certificate serial:       010D0C9F4328584F30A5689B1635477521CCCF80
Authority key identifier: 72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/0e591ca7-994a-3a65-ac35-b13e088dc245.roa
Signing time:             Wed 16 Sep 2026 03:47:32 +0000
ROA not before:           Wed 16 Sep 2026 03:47:32 +0000
ROA not after:            Tue 15 Dec 2026 04:47:32 +0000
asID:                     398377
IP address blocks:        2602:f4fb::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:a5:68:9b:16:35:47:75:21:cc:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b41a59d-bac0-456f-82a5-a12979543eff
        Validity
            Not Before: Sep 16 03:47:32 2026 GMT
            Not After : Dec 15 04:47:32 2026 GMT
        Subject: CN=5dacbdce-c5dd-41ae-8bb7-4ddb33fbc0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:fa:ed:04:c9:d1:13:a0:60:1a:29:5e:fc:
                    73:7c:ad:6d:ea:2b:4c:fe:d8:29:96:c0:df:0e:51:
                    cb:b1:1d:81:c2:87:ee:8b:48:52:e5:ec:50:2e:11:
                    06:d6:ef:9e:71:cf:0e:88:5c:80:dd:55:e0:f4:21:
                    75:c0:8f:3f:bc:50:bf:f7:d6:0d:7d:45:c0:b7:86:
                    13:20:0d:e5:81:3e:0c:3f:4d:cf:e1:35:0c:9b:7c:
                    d0:fa:26:cc:62:52:d9:44:97:13:8f:9c:25:35:48:
                    8b:4b:2c:3d:d8:44:05:d5:c8:e8:5f:3f:01:e7:59:
                    2e:f3:51:23:fe:ab:65:9e:2b:bd:70:20:49:7b:e9:
                    bd:9a:5c:4b:06:75:99:29:10:ab:79:5d:9c:c6:32:
                    3b:83:3a:b4:44:4f:d4:ca:38:a9:e4:6a:7a:93:a8:
                    e7:48:da:ea:69:57:78:9a:ec:9c:27:8b:d6:1d:03:
                    39:23:66:0b:42:21:23:c2:ff:36:1c:de:ac:24:8e:
                    9f:30:16:3e:bb:2f:84:e3:26:4a:47:20:27:aa:55:
                    03:12:29:e2:97:29:9a:05:89:73:25:e4:80:3c:ff:
                    cf:2f:0f:27:48:97:93:d7:84:a4:73:62:98:7e:4e:
                    16:6b:e2:df:27:eb:19:92:23:1b:b4:24:33:81:39:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:03:83:56:64:93:E9:E5:8B:AE:F5:7D:FE:C9:B0:8A:19:B9:D7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/0e591ca7-994a-3a65-ac35-b13e088dc245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4fb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:22:9b:3f:2a:90:73:aa:c7:6e:1f:1d:b5:15:ca:48:af:bf:
         18:a3:c9:55:17:84:6f:30:67:0c:d9:f5:39:3e:71:94:88:6c:
         e2:71:25:d8:1b:89:10:35:be:70:a1:a6:06:2b:a0:02:15:e0:
         b2:ea:e7:72:5f:ee:8f:f6:3a:3c:e0:c5:df:01:53:32:5e:3a:
         01:61:8a:c2:0e:54:4e:27:df:2e:b5:8b:64:f9:5c:77:1c:93:
         86:59:6a:7d:bc:14:1b:8a:75:5e:18:56:62:9e:3d:f9:d4:94:
         8a:49:d0:c7:3c:b8:8b:07:cc:3f:e5:68:47:42:d1:46:80:3f:
         7d:c0:fe:16:44:b6:a6:34:e0:9f:68:28:84:97:d8:fb:03:5f:
         36:48:d4:de:8a:94:4a:ef:6b:ea:0c:23:07:96:ef:4c:52:ad:
         ae:1b:c7:67:0b:8c:8a:e4:60:ee:ce:2d:9b:d6:ad:b0:5c:0c:
         65:94:c5:74:a0:ae:f8:b0:ad:a2:28:96:16:6e:e9:c8:cb:db:
         af:15:46:0c:86:aa:37:42:25:52:fb:55:9c:df:47:65:19:19:
         b5:11:31:6f:b3:6a:69:36:06:90:6c:4a:a8:1c:4d:e5:69:28:
         e0:24:a0:f7:38:8d:6e:ec:79:69:96:dd:67:43:5e:b9:72:4e:
         f3:27:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:15 2026 by rpki-client