Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d0f0738c-99ca-39b5-85ca-19c0bc9eaaf7.roa
File:                     d0f0738c-99ca-39b5-85ca-19c0bc9eaaf7.roa (raw, json)
Hash identifier:          NtCd7IGFgXds29233bKlx2J0bseKIYYEdTyltpa1+Vs=
Subject key identifier:   98:36:73:FB:23:D6:32:5C:03:2A:80:96:CC:AF:93:FD:C9:99:47:D9
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584F348275355D5AC25B3A2F0A80
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d0f0738c-99ca-39b5-85ca-19c0bc9eaaf7.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     399275
IP address blocks:        2602:fcc0:1111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:75:35:5d:5a:c2:5b:3a:2f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=d90ff165-c39b-4b4e-9a1e-c3207d13b173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:d4:86:ee:5d:e3:a3:36:3f:68:83:08:a7:
                    dd:b6:83:03:b3:d6:ab:51:cd:66:46:92:4a:95:fc:
                    58:b6:60:bf:96:14:d8:92:8d:22:a1:b9:33:49:ca:
                    00:38:83:b6:28:84:70:dc:06:17:bb:24:82:a0:79:
                    05:a6:c6:ce:47:b2:48:3a:a3:4f:c3:a1:57:43:95:
                    6c:17:1f:70:84:00:11:64:2a:b9:3c:64:7b:f0:26:
                    77:5f:ab:27:b9:03:57:69:f9:d9:ff:2d:f2:fb:69:
                    d4:e7:f4:73:39:e7:96:5f:89:00:12:78:94:f7:09:
                    b5:f4:39:dc:d3:43:db:bd:f0:19:b4:60:e7:41:20:
                    f2:90:78:87:de:33:03:3c:75:76:21:1b:38:26:ef:
                    0c:ee:e2:6f:0a:e2:fa:8f:82:69:75:53:21:45:49:
                    85:b8:0f:76:df:47:5f:c9:f1:d5:c3:a9:3a:37:c7:
                    5e:06:2d:91:a1:6f:b9:d3:48:a5:78:90:23:27:07:
                    4a:fb:21:6f:a0:49:66:94:20:de:0a:5b:f4:e3:6d:
                    7a:f7:bc:2b:be:df:ff:57:d1:7f:07:bd:13:36:6c:
                    3a:f0:12:e8:1e:dd:4b:75:b1:95:6c:7f:58:81:2c:
                    26:15:15:9d:02:6e:33:5e:d8:aa:6c:78:fd:83:82:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:36:73:FB:23:D6:32:5C:03:2A:80:96:CC:AF:93:FD:C9:99:47:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d0f0738c-99ca-39b5-85ca-19c0bc9eaaf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:1111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:87:80:b6:74:d9:11:71:5f:24:3a:8c:dc:a3:c9:df:da:
         8c:29:f5:be:a9:b3:45:b4:7d:cc:97:59:cd:ba:52:eb:3b:04:
         71:29:ac:e4:8d:af:3a:bd:39:e9:54:7e:16:f4:90:9c:74:f5:
         06:5b:0a:52:6d:40:d1:ff:23:f5:c7:80:3f:d9:65:07:5d:d9:
         91:df:2d:35:95:be:2d:1b:4a:24:e4:76:90:15:54:b9:46:41:
         ed:06:f1:2e:57:42:da:08:45:a2:b9:91:1c:e9:f5:73:be:a8:
         4d:e4:4a:e6:4e:c1:1d:bb:5b:9d:51:65:e5:c6:cb:e7:30:9c:
         41:a5:4e:b1:0d:fe:3f:77:78:42:73:d2:2a:53:d6:56:78:0b:
         e2:26:cb:f1:f6:98:3b:ba:ee:05:6b:2d:1b:fc:b7:90:0a:48:
         a1:70:05:75:91:9b:15:0e:30:80:35:f1:ef:68:62:2a:1e:a1:
         9f:da:fd:2d:e6:b5:60:5b:42:c3:79:80:14:76:7b:2b:16:6f:
         2f:5e:68:68:63:99:ef:e2:77:84:b7:b7:a1:b3:4c:8f:c2:5e:
         01:08:e0:15:1c:0e:89:ab:71:4a:91:4d:a8:2f:fe:11:e7:ec:
         54:e2:05:8a:a3:ff:c7:3f:41:5b:1c:7c:65:7d:8a:42:69:16:
         19:c2:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:53 2026 by rpki-client