Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/f402b2eb-eec3-3036-8f3b-219cfb215cfa.roa
File:                     f402b2eb-eec3-3036-8f3b-219cfb215cfa.roa (raw, json)
Hash identifier:          ZcPUWA05f2LSG1kTHNR81jjwB/rUs9c02GCTqQ1E6U4=
Subject key identifier:   CE:9E:39:9A:92:91:C8:75:62:5E:BD:69:BB:72:34:9F:0A:52:4A:BE
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F4328584EC4D71871CFF74EAC80DE4300
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/f402b2eb-eec3-3036-8f3b-219cfb215cfa.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     11721
IP address blocks:        2602:fa8a:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:18:71:cf:f7:4e:ac:80:de:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=4a6196e0-8268-477b-9a62-08775be62a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:b7:d6:3b:48:4b:9d:50:c4:b5:aa:3f:fd:
                    6e:ef:45:3d:b3:71:cb:f4:00:22:7c:48:a1:f0:d1:
                    a9:f9:31:1a:15:29:30:5c:da:91:13:27:c2:ed:2e:
                    d7:58:cb:61:a7:72:46:d1:0d:2d:24:62:e2:53:eb:
                    61:6d:d7:a8:e7:fa:e3:fe:12:57:db:f8:d4:76:68:
                    83:cb:55:20:10:d3:bc:39:44:76:12:59:9d:54:21:
                    f7:e7:68:96:11:d0:8d:f9:4b:f1:b4:54:97:9b:c0:
                    90:cd:5b:55:9d:6e:af:5b:9e:40:42:7c:c3:64:9c:
                    ce:7c:ac:bf:e1:0d:93:1a:0b:99:15:4f:75:32:be:
                    77:51:fe:ab:7e:73:f6:42:ac:0c:2e:93:ed:ca:72:
                    c9:08:3e:78:08:f2:4b:49:8c:92:7c:81:de:3f:fc:
                    c3:74:d9:32:56:04:51:fd:8a:41:2c:59:80:bd:6b:
                    cc:99:a3:94:2a:80:29:88:e1:d6:bc:e3:43:d4:b6:
                    c7:d1:45:8a:ea:32:ff:f3:d4:9e:59:39:51:9f:23:
                    04:b9:c5:f8:67:86:67:79:92:98:a9:12:20:80:4a:
                    c9:54:b0:f2:88:74:b1:31:af:98:5b:8b:e8:94:d5:
                    07:09:ff:01:8f:72:59:33:cf:c4:aa:91:b1:73:df:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9E:39:9A:92:91:C8:75:62:5E:BD:69:BB:72:34:9F:0A:52:4A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/f402b2eb-eec3-3036-8f3b-219cfb215cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:9c:1c:84:f2:47:a9:d7:be:f2:54:f4:ac:cb:89:cf:e4:
         db:ec:fe:b5:b0:80:60:a7:72:6e:7a:4b:f0:86:13:e3:b8:da:
         be:26:1d:22:95:b3:ff:0a:20:51:26:12:ad:0e:9a:83:66:ae:
         fe:af:89:57:8e:2d:8d:8b:fc:e4:2a:e7:eb:ec:7d:53:80:e0:
         7a:ac:d6:d5:c0:5b:0b:90:68:4c:f9:2f:f6:96:a0:b1:81:ae:
         c7:9a:d5:d7:56:6b:29:6b:51:eb:6f:32:2d:c3:fb:7e:7c:8f:
         9d:d1:58:33:2b:f2:86:6b:b1:a0:0f:05:0c:0f:84:11:51:94:
         d2:03:0a:cf:dc:86:c7:62:da:9e:dd:f3:ae:63:d7:9e:7a:c5:
         1e:7b:ef:9f:61:e4:0d:1b:8a:cd:a9:91:7e:e7:a4:9d:56:06:
         4f:62:af:d0:8a:78:85:20:90:6e:f9:a1:07:a5:23:4d:a2:80:
         54:6c:a4:c8:ba:0c:3c:90:85:3b:94:ee:46:b3:84:a7:19:9a:
         7b:88:0d:2e:2e:77:ef:ca:f7:6c:53:8b:bb:ba:56:e6:b4:e7:
         41:7c:c8:5e:19:54:51:f9:8e:15:e4:8d:8c:33:b0:46:0c:31:
         a5:b6:45:4b:f9:f4:f0:c4:78:83:d8:c8:70:d5:4e:5f:36:ee:
         cd:c5:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:21 2026 by rpki-client