Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/c91ac89f-8bf2-3ff1-b230-1d633215beac.roa
File:                     c91ac89f-8bf2-3ff1-b230-1d633215beac.roa (raw, json)
Hash identifier:          dUq24YYhA4SFukWlhFkeWDkLvwIO/bkxkt835y7olP8=
Subject key identifier:   B6:94:CE:43:FC:95:04:85:32:58:96:E8:0D:8A:B9:83:E3:F7:08:FC
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584F14679081A38E6F09F2791700
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/c91ac89f-8bf2-3ff1-b230-1d633215beac.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     140666
IP address blocks:        2602:fa80:44::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:90:81:a3:8e:6f:09:f2:79:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=4c262456-1b1b-47ed-b02c-9b3d321afc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:7b:94:41:02:57:0e:06:0a:42:6e:64:75:
                    aa:2b:47:a9:cb:a8:36:16:8b:35:1b:bf:f4:4a:53:
                    27:e7:5e:7b:ee:84:6d:d1:5b:3f:dd:87:df:06:ce:
                    7e:a0:13:17:71:8d:2a:08:c8:88:01:67:0c:67:33:
                    c5:02:c6:41:00:4c:95:cb:77:23:ef:82:36:14:1d:
                    a3:ea:77:12:a3:50:5a:d5:10:d3:3b:07:84:d5:d0:
                    9a:cf:bd:ae:51:fd:04:99:57:c0:b3:1f:04:c9:f8:
                    04:0a:3a:d9:e0:3a:66:38:1e:0e:00:3e:a9:43:20:
                    e8:f5:b2:b7:07:3e:a6:fa:ee:54:48:6e:e5:ab:ef:
                    c7:7d:89:09:c5:65:16:59:63:19:c6:3e:f8:a2:07:
                    e0:15:8b:59:a6:75:df:68:a4:cc:4a:5a:dd:8d:cd:
                    17:1f:e8:ed:b4:c3:ed:a9:5c:51:cf:a7:7d:b6:7d:
                    95:52:c3:73:06:f5:79:d5:ac:6e:df:0a:08:75:10:
                    8c:5f:0b:b5:3a:f8:a0:85:70:b1:74:f5:b4:32:45:
                    11:b4:c9:96:67:24:34:ee:97:31:c1:7b:69:41:bd:
                    0a:4b:18:cf:d9:bd:d0:c5:57:e5:c8:fa:2c:a3:e1:
                    c8:b0:79:70:7c:fa:d7:8b:eb:99:5d:e4:2d:03:bf:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:94:CE:43:FC:95:04:85:32:58:96:E8:0D:8A:B9:83:E3:F7:08:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/c91ac89f-8bf2-3ff1-b230-1d633215beac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:ac:ee:ef:f3:ac:45:48:f9:95:e3:93:f5:b9:c7:75:63:
         27:eb:b8:6b:98:b3:e6:1a:cd:89:07:d5:5c:e8:d1:54:b6:7a:
         4d:de:71:97:d4:35:fc:17:1d:99:78:a4:2f:2d:9d:72:9c:7f:
         7c:74:82:89:52:2d:61:02:61:9c:ab:ba:b6:ef:f6:68:78:2e:
         c0:5f:1a:f7:9b:97:64:cd:ba:21:e9:27:68:49:4d:2e:81:36:
         1e:92:f6:e2:e0:cb:c0:3e:5f:74:21:1b:0e:6c:2c:35:92:e6:
         db:a8:70:28:90:85:65:7c:d9:98:fe:e8:66:fb:f6:ee:41:51:
         d0:cb:c1:9d:81:ae:61:02:82:01:a7:34:f8:b6:6c:dc:c8:4e:
         63:7b:2f:a4:72:d1:ca:f5:ae:3a:eb:31:7e:fa:ae:ef:c6:7f:
         7a:20:1f:2d:2e:28:13:6b:29:d2:51:00:5e:37:1a:a5:c6:ed:
         0d:0e:af:9e:af:ae:40:f2:c5:5f:ac:71:1e:e8:07:b9:ac:96:
         f7:d4:d6:47:bd:ff:40:39:83:17:e9:cd:0a:b5:2e:1a:f8:52:
         71:40:58:82:e4:7e:4c:b1:a3:22:e9:7c:09:40:4e:79:9d:f4:
         9a:06:1e:25:c9:5d:38:58:12:a8:7e:f7:99:34:5a:02:cd:19:
         71:0b:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:59:59 2026 by rpki-client