Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
File:                     ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa (raw, json)
Hash identifier:          VTK4raOHAY9HMnogQNilEkyJMjhO9ySBP6d4fhcpfkc=
Subject key identifier:   CF:79:D1:A2:26:B6:FE:AF:E3:3A:D7:7C:C5:50:18:7A:57:F0:F2:0A
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584EF2E76B480635BB3CD9528500
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     61350
IP address blocks:        2602:2db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6b:48:06:35:bb:3c:d9:52:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=4aeb1639-02be-4fb7-903e-f23cbeaf153e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:79:c1:29:29:a0:4c:ec:93:de:9f:92:e2:
                    11:8e:ab:97:3c:5a:34:ef:c5:61:80:e9:22:fc:fc:
                    50:26:26:f8:28:ca:ae:4e:43:34:35:2c:87:23:31:
                    fa:1c:0e:da:72:80:21:99:d8:0a:12:b8:fc:28:2a:
                    76:63:19:54:66:bc:41:69:66:95:50:22:3c:36:05:
                    16:cc:a7:23:22:1c:32:1e:2d:ea:a5:1c:94:f5:a5:
                    1d:24:dc:6b:91:53:b0:b4:09:21:25:b2:6d:12:7c:
                    41:8c:d8:72:09:47:c8:29:e4:08:ae:10:d0:8f:58:
                    64:cf:a3:1e:49:e4:7b:50:d5:54:3e:c6:6b:5c:72:
                    75:71:3f:d9:37:97:4a:0c:67:0b:54:fd:dc:dc:40:
                    9a:25:42:10:8f:92:10:63:77:94:a0:f1:7b:1a:c4:
                    17:da:27:27:ad:ac:08:5e:72:6e:45:ee:c4:2e:78:
                    37:c9:4f:b2:ec:a3:23:c5:65:57:7f:bd:e8:09:a8:
                    d8:42:21:3d:44:29:87:e4:93:44:94:63:e5:e3:59:
                    2b:e0:00:03:70:a5:6d:f8:57:48:82:4b:56:78:15:
                    76:c1:2f:d9:53:22:3d:d7:24:b9:0f:6d:01:d4:17:
                    f4:54:d8:3a:da:17:31:0f:34:f0:1f:bc:ed:82:5a:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:D1:A2:26:B6:FE:AF:E3:3A:D7:7C:C5:50:18:7A:57:F0:F2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ece050b4-dcf3-3746-99e1-7b9a425bdc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:dd:57:d1:3b:89:fb:ca:1c:8f:95:07:16:85:41:1d:78:
         21:4c:f0:50:09:7d:68:ff:2f:c6:32:ce:78:01:be:0e:17:92:
         fa:13:10:db:f2:ca:fc:ea:70:1b:ea:53:b4:8c:ce:47:9f:62:
         7d:06:2c:d6:c7:36:17:60:09:56:ce:06:e1:a5:9a:c9:1c:ba:
         fe:c7:3e:15:77:f9:01:6b:5a:d8:ed:87:31:86:93:81:23:ef:
         6d:21:05:3f:e7:d0:fe:e6:ae:6e:f9:9f:f3:e6:9a:b8:46:33:
         62:37:56:55:55:ed:a2:04:27:e9:e2:ee:4d:a4:6b:af:e0:81:
         bd:bf:4f:05:6e:de:70:6e:c9:0e:1f:78:ae:de:0a:65:27:96:
         3c:5d:22:e5:d7:5f:ab:fc:ef:00:a1:83:c0:d0:a8:db:30:83:
         e2:87:8d:d0:ae:a9:58:25:9e:db:ce:35:7b:32:bc:ca:bb:85:
         b1:eb:9a:01:c5:ec:64:56:33:67:e5:bd:cd:e8:d8:09:83:17:
         e3:6b:82:5d:e2:3f:ca:ca:cd:82:2e:3d:07:0b:61:41:3e:77:
         33:87:02:22:7b:c5:2a:66:32:d4:1c:3e:73:e5:8a:68:2d:c1:
         47:75:ac:08:69:4a:3b:9e:e0:7b:52:32:58:96:6f:ef:f7:35:
         8c:cc:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:28 2026 by rpki-client