Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa
File:                     7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa (raw, json)
Hash identifier:          uWjdgBRZ93EtZaFmNGuet9gBQv6xWskBss4WPdUhwq8=
Subject key identifier:   0D:CE:2E:B6:3D:42:FF:C9:B5:FF:83:C9:C0:16:2A:5F:51:96:85:C7
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584F0D6CE73199C386088F918F40
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     198342
IP address blocks:        2602:2b7:c42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e7:31:99:c3:86:08:8f:91:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=c1181015-286d-4acd-b823-022a663fb621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:d7:ba:a2:be:cd:c8:8e:78:e1:9c:ed:5d:
                    96:99:73:4c:b4:04:93:43:8e:13:30:d4:79:81:d4:
                    5f:4f:14:cc:49:d5:05:4e:f8:7b:0b:f1:78:be:e5:
                    2c:e6:9f:d1:c4:06:57:76:3b:81:18:f4:99:18:84:
                    ca:13:a1:c6:b5:c1:7a:f4:a3:95:25:1d:fb:13:a6:
                    8a:96:46:01:64:ce:e0:3f:24:01:15:ae:05:3a:72:
                    65:18:74:cf:39:d6:2e:64:75:71:17:06:9d:65:72:
                    b8:29:cf:df:e9:02:03:bd:d5:8d:8c:d9:40:19:f4:
                    49:6d:1f:5f:bd:f6:e4:c6:b5:f9:0f:cc:e7:c5:1d:
                    30:f4:de:21:fb:f3:5d:eb:4a:05:81:01:51:7f:d3:
                    ea:b9:3f:48:2b:91:3a:49:df:33:09:77:7d:17:d8:
                    4b:7e:af:3a:3a:97:bb:f5:64:b6:fd:57:8f:34:71:
                    4d:e5:04:97:be:af:d2:a9:83:32:3c:60:a0:83:c7:
                    d9:a9:00:92:74:3d:40:de:7b:88:c7:ce:be:48:77:
                    e9:07:bb:5e:92:76:01:53:61:c0:4b:b0:09:77:ed:
                    22:0e:0e:c3:db:05:d7:47:82:9d:49:6d:50:4b:44:
                    0f:35:27:2c:02:e6:c0:01:8f:8e:df:0f:88:25:69:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:2E:B6:3D:42:FF:C9:B5:FF:83:C9:C0:16:2A:5F:51:96:85:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:13:22:11:7a:a4:84:fb:33:15:81:39:f4:18:d2:f9:11:
         9e:45:5c:d7:e2:7e:e2:9c:f4:a4:91:72:dc:9b:55:51:c0:2d:
         4b:ea:48:d4:6c:dc:12:1b:a4:14:74:d2:45:d3:a7:cc:be:28:
         a6:08:8f:e5:96:40:c4:f0:b6:1e:61:1e:c1:84:97:81:a6:79:
         a0:de:f1:bd:91:52:ff:18:b5:9c:16:e6:4d:fb:9d:e0:c8:19:
         83:39:b7:3e:56:b8:84:10:bc:05:a0:eb:a2:54:a1:23:93:8c:
         05:8b:97:98:59:ce:7c:2b:db:38:e2:df:f6:d5:2f:18:ac:c3:
         91:ff:2b:01:77:a5:5a:e8:24:f8:cc:71:b4:40:2d:81:f1:71:
         25:6e:d7:3c:f0:12:27:72:b2:3e:9f:43:07:b3:d8:6f:9d:78:
         a6:c4:42:c1:2f:68:fd:fe:6d:d6:da:e1:2d:be:5b:1a:b9:b1:
         07:1b:8e:c2:db:ff:a8:09:fc:f6:7c:83:6b:e6:41:e9:21:4a:
         36:da:7f:8e:f2:b1:e2:da:f6:b1:f3:85:99:a6:f0:d9:c0:b6:
         99:76:38:37:c8:d3:eb:ae:5d:52:39:5b:8b:fd:5b:66:fe:91:
         1d:4a:e2:37:cb:49:e3:ed:b6:6e:b4:4c:9d:ad:2c:c4:eb:f3:
         c9:12:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:32:21 2026 by rpki-client