Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/db334f3d-45ff-3147-8b7b-0e824caf304f.roa
File:                     db334f3d-45ff-3147-8b7b-0e824caf304f.roa (raw, json)
Hash identifier:          KWKgoIDdu0JirpYvvT/Gw1duLEwkB0cBfDoMVd1JNsM=
Subject key identifier:   BA:7D:96:A1:91:9E:B6:4D:F4:77:9D:8D:60:D3:41:AA:7A:48:06:BC
Certificate issuer:       /CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b
Certificate serial:       010D0C9F4328584ED9C756F503881152D98C6880
Authority key identifier: D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/db334f3d-45ff-3147-8b7b-0e824caf304f.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     27424
IP address blocks:        2602:f93c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:56:f5:03:88:11:52:d9:8c:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b5f4d1-1f4a-425e-bd76-092c5cfc678b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=ac04eb1e-d3b7-4e93-9cf1-be4814a33d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:98:cb:41:43:a8:3e:ea:e8:8e:ea:76:a8:
                    65:5a:67:85:31:71:eb:90:a7:c8:27:71:8a:f6:5d:
                    68:62:55:bd:47:61:30:52:24:76:e4:a5:b9:c2:e2:
                    8c:e0:56:5d:29:bd:40:94:c4:7b:22:23:8c:8f:9b:
                    2c:d2:be:3a:79:14:21:53:85:54:00:9b:7c:26:5c:
                    6b:12:2d:8f:41:a8:13:c0:de:ea:27:2b:8d:67:0f:
                    7a:f0:ad:b7:63:56:97:e0:f6:91:9c:d6:ce:19:0b:
                    26:b0:4e:df:38:84:4a:2d:41:4d:05:10:c4:b0:26:
                    99:aa:74:c7:cf:97:8b:2d:26:1a:22:af:a4:20:d3:
                    1a:77:71:5e:5d:d4:77:aa:f4:05:71:ab:c4:4e:fe:
                    cd:02:f3:68:74:de:d7:04:89:58:b7:63:74:71:11:
                    f2:57:51:81:f1:98:88:58:a1:60:00:97:6f:d3:86:
                    27:8b:2c:eb:45:b0:ea:7b:94:53:ea:e5:d2:f1:1b:
                    20:79:64:c2:1c:c6:33:a4:99:5e:76:af:8a:39:e7:
                    69:89:f2:d2:54:7d:c1:af:de:bf:83:18:c5:81:c1:
                    1e:1f:5a:ae:e0:26:62:e8:30:ff:62:ae:91:d1:9b:
                    13:5d:aa:a0:ac:93:2f:ab:32:5b:96:98:47:07:46:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:96:A1:91:9E:B6:4D:F4:77:9D:8D:60:D3:41:AA:7A:48:06:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/db334f3d-45ff-3147-8b7b-0e824caf304f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.crl

            X509v3 Authority Key Identifier:
                keyid:D2:BB:4C:78:84:A8:E6:04:AC:47:F3:B0:FF:2A:F8:9F:B2:66:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41b5f4d1-1f4a-425e-bd76-092c5cfc678b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:11:5e:3c:28:f5:5f:df:33:4e:4a:c1:bd:1b:dc:bc:54:
         68:5b:18:fd:3f:6d:0a:fc:f0:2f:b2:80:74:b5:e8:b2:3d:95:
         04:8b:ce:d6:49:d8:21:e0:4c:ac:3f:c3:ce:0d:d9:7e:6f:57:
         34:64:0e:c7:d6:2c:7a:73:0e:32:45:b8:cc:00:71:6c:a1:73:
         0d:f1:1f:f7:de:4f:2e:d7:3b:69:1a:09:26:9f:b6:62:89:32:
         78:e5:5a:22:1e:ea:01:bd:dd:17:df:87:7a:e6:a9:67:a2:78:
         4c:e8:d9:00:95:1b:db:a5:dd:b8:47:f7:e3:f1:5e:ad:f3:96:
         e0:bb:bf:41:89:cc:80:3a:42:59:d7:ad:73:9f:67:63:9d:6a:
         fe:a7:8e:5c:d1:83:88:b9:b2:10:13:4b:51:2b:19:af:f4:51:
         e2:cd:17:7e:6e:60:bc:73:f4:7e:d7:6e:ca:3b:44:e2:31:34:
         5a:43:b7:e3:00:9d:a7:a7:a9:4d:11:fd:45:43:fd:12:66:2e:
         16:85:b7:4a:06:73:c0:a6:03:67:35:c8:ab:69:80:00:27:d3:
         5c:68:ba:a1:4c:39:90:47:5c:8c:0d:59:37:a0:2d:0e:56:16:
         db:8a:d0:79:45:06:cc:0c:eb:24:07:0d:69:16:c6:a6:b2:6f:
         07:c3:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:54 2026 by rpki-client