Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/536c1ef1-422d-3ce7-b5d3-d08349abaaad.roa
File:                     536c1ef1-422d-3ce7-b5d3-d08349abaaad.roa (raw, json)
Hash identifier:          TW1eHJSTwqdiX8S8A81jeo6Fr+venFAU9GsHg+aA2Z8=
Subject key identifier:   04:BD:D3:17:A6:60:8D:75:9A:C9:52:A9:E6:66:82:61:C7:33:C8:B5
Certificate issuer:       /CN=7918d277-f6b6-4b59-8e89-61eac2611774
Certificate serial:       010D0C9F4328584F4112D765B3DE507E8223A180
Authority key identifier: D4:8C:D4:71:32:D8:FD:1E:CF:9A:27:A7:8F:CF:A8:48:13:62:03:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/536c1ef1-422d-3ce7-b5d3-d08349abaaad.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     16926
IP address blocks:        2602:f505:70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:d7:65:b3:de:50:7e:82:23:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7918d277-f6b6-4b59-8e89-61eac2611774
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=172a3319-7661-44ef-a9af-0c3630c4fbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d4:27:b0:47:58:5f:44:ac:39:07:35:ef:df:
                    4e:1d:5a:6b:dd:68:e0:72:9a:75:e4:b0:c7:34:45:
                    50:8d:b2:c0:d4:f0:9a:61:8a:4d:43:44:ab:59:bf:
                    d3:48:cb:26:2b:7e:ee:77:79:5a:9d:e7:dc:f4:1c:
                    51:22:f4:18:bc:30:dc:43:09:2b:fd:85:f6:b7:06:
                    a6:b2:ab:db:c6:3d:ca:89:41:d0:b6:4f:d1:ff:4d:
                    ed:f0:da:46:ca:ad:e2:46:3c:f8:28:f0:52:c3:c1:
                    df:dd:54:85:c6:72:2c:38:e7:3a:69:fb:24:fd:0d:
                    74:99:c0:d3:30:21:df:cd:70:a6:6d:4f:da:16:5d:
                    a6:6b:3a:17:72:62:5d:d4:1c:15:9f:db:96:1a:ee:
                    ed:13:eb:00:d4:fa:cf:ec:c0:5a:0b:91:f4:2d:a8:
                    0f:57:1f:44:23:63:24:79:9a:89:0b:a1:e8:9e:99:
                    ab:26:e3:73:d0:15:21:c4:c4:d6:37:e4:cc:ce:fa:
                    9e:e5:2f:d2:ba:e9:52:1a:9f:92:5c:d6:ea:0a:3c:
                    f4:38:67:00:c9:08:7b:bf:78:34:56:03:5b:e0:2c:
                    cb:73:4d:c3:d9:33:44:94:ff:7c:c3:a9:d6:eb:9c:
                    41:3c:40:b9:4f:98:12:fa:09:b6:17:1a:ff:62:03:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:D3:17:A6:60:8D:75:9A:C9:52:A9:E6:66:82:61:C7:33:C8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/536c1ef1-422d-3ce7-b5d3-d08349abaaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.crl

            X509v3 Authority Key Identifier:
                keyid:D4:8C:D4:71:32:D8:FD:1E:CF:9A:27:A7:8F:CF:A8:48:13:62:03:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f505:70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:c9:5b:6c:57:dd:12:ea:39:10:ca:6d:da:3e:67:01:b2:
         90:cf:20:84:88:f8:bb:e9:4e:44:02:71:67:a9:5e:d6:0a:73:
         ee:10:ab:5e:ee:b4:cd:f7:63:f9:b9:f5:86:49:53:46:bf:96:
         05:d0:34:ff:29:77:94:17:4c:13:76:cf:8e:5a:a1:c0:c5:ee:
         e7:d8:24:e1:ac:6c:3f:71:dc:e3:16:ec:26:8e:04:56:2d:3d:
         21:48:5c:28:7c:0f:8c:ab:8b:f3:84:34:28:5f:a3:a2:b7:0d:
         12:1e:c9:6a:75:19:0e:a7:ce:fc:47:2f:d7:30:15:bf:12:fa:
         36:a8:28:5d:f6:ae:63:bc:26:dd:ad:f9:ab:4b:a8:b2:e8:bc:
         8f:d1:91:ec:fb:85:29:19:ec:98:db:3b:2d:7d:a6:85:d2:62:
         af:4e:88:61:a7:f9:5a:c1:7f:ba:f7:4e:7b:75:00:b5:28:eb:
         cd:3c:b8:3e:08:6b:91:74:d0:d8:29:33:0a:0d:79:5e:97:9c:
         dd:52:44:99:77:81:3e:76:ae:bb:1c:bd:09:6b:34:66:3b:83:
         70:fb:c9:ae:53:7f:94:f1:1e:62:f8:f8:44:6f:c4:b0:e1:70:
         14:4c:51:76:7c:21:cf:31:89:4b:66:79:e5:dd:27:52:d2:63:
         90:33:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:10:13 2026 by rpki-client