Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa
File:                     ac71e1cd-bff9-3892-84b0-759735bd38ae.roa (raw, json)
Hash identifier:          zXm9+qWPYOpUcfRlpuEHzoUAGvy7a2cZdBjtufN2lO0=
Subject key identifier:   28:0C:B0:66:E4:06:FE:B8:26:D1:97:FD:AD:00:46:A5:62:A6:2B:5F
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584F374D26D9F3213922E4255D80
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     63008
IP address blocks:        2602:f9a9:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:26:d9:f3:21:39:22:e4:25:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=81b0fd45-1363-4a22-962b-aee65d3246fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:bb:42:0b:c8:a4:1b:b8:24:34:21:63:b9:
                    5d:97:1a:15:f1:1f:28:a4:23:17:e3:b4:51:91:ca:
                    42:c0:69:77:58:2d:2b:44:a5:1a:80:ee:4e:a2:b6:
                    cf:4b:bc:fe:ba:17:29:a8:64:a8:0f:f3:ef:a1:4c:
                    2a:de:b9:0c:1a:20:cc:91:93:24:32:15:e1:2c:92:
                    40:bb:c7:ca:d6:57:ac:b4:91:a1:1b:af:2d:1a:5d:
                    88:9a:a6:7f:39:44:a3:57:da:a4:5b:fc:e6:7d:18:
                    43:98:c4:ab:9a:fa:3b:0d:66:5e:00:1a:8c:5d:17:
                    f2:e8:57:00:f5:ac:9a:ae:5b:12:0b:ed:5a:48:cf:
                    ae:c4:76:6d:0d:49:05:39:b5:55:fa:5a:14:2d:0e:
                    8f:50:2f:4d:21:43:07:83:f8:13:28:f5:48:4f:54:
                    76:8f:de:38:b4:bf:a8:49:a2:b5:a5:ae:51:fd:c8:
                    65:3f:69:60:33:5b:c4:c1:8b:af:f7:82:5f:cc:08:
                    42:39:74:4f:18:08:5a:53:e0:8b:d5:85:6c:52:24:
                    f1:de:2a:12:fd:d8:f9:55:4a:72:31:37:04:f4:a1:
                    cc:36:ea:82:64:e5:60:53:42:0a:e5:60:b0:07:e4:
                    7b:7a:dd:79:e3:3d:5f:c4:74:9e:15:02:5b:04:62:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:B0:66:E4:06:FE:B8:26:D1:97:FD:AD:00:46:A5:62:A6:2B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:82:54:55:8a:9d:d5:0d:d8:91:0a:62:72:b4:c9:46:ac:fa:
         88:91:e4:7c:ef:ea:ee:c5:94:d3:74:ab:cf:3c:73:0c:0c:a2:
         d8:bf:fc:9a:e9:57:c5:fb:8b:4d:85:3a:60:08:4e:79:df:a1:
         6d:5d:5d:09:27:58:cb:5b:1d:5a:5f:9e:9e:76:0d:7e:53:5b:
         af:69:2e:10:21:e0:b0:3e:eb:d9:8f:bd:8d:88:60:86:e1:22:
         20:ae:09:91:e5:49:cb:22:c1:95:b7:19:8b:dd:ab:58:15:67:
         32:44:f5:83:0b:01:f3:01:42:c7:d2:89:7c:f2:bf:cc:b8:14:
         33:32:96:5f:6f:3b:53:52:33:49:7c:19:2c:bb:9a:eb:e4:a9:
         79:9f:e0:ae:fc:68:3b:a2:e5:0f:44:a7:14:09:d9:70:86:ae:
         eb:6d:4b:ab:8c:e1:07:b0:25:e3:09:7f:87:63:df:98:82:f1:
         70:15:74:76:0a:18:45:ab:41:0c:74:2a:5b:ef:24:8a:ae:d7:
         ee:52:8c:57:21:57:87:15:7f:d1:42:66:30:e1:fb:83:dc:2f:
         2b:ec:36:58:bd:c4:3f:52:e2:5c:db:59:b3:c1:9e:e1:1f:d1:
         3a:6f:ad:1c:b2:1d:a3:a7:b1:c8:90:06:ff:d7:8a:03:c3:fd:
         43:2b:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:54:31 2026 by rpki-client