Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/9b931910-2ac7-3231-8644-a41581603e70.roa
File:                     9b931910-2ac7-3231-8644-a41581603e70.roa (raw, json)
Hash identifier:          N7lU6LTWyT+8rDrm5Vl01AVJ+rswsvEc7lKaU67MLvc=
Subject key identifier:   49:E1:AF:B7:DA:86:FF:B7:4A:2D:57:0E:90:BD:8E:5F:93:69:95:EF
Certificate issuer:       /CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
Certificate serial:       010D0C9F4328584EA78F56C0CF1FD73A7CCE8900
Authority key identifier: FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/9b931910-2ac7-3231-8644-a41581603e70.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395176
IP address blocks:        2602:ff41::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:56:c0:cf:1f:d7:3a:7c:ce:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a58873b5-459b-4530-8dcb-f6b43b4ba7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:70:d1:99:0e:c1:b3:f0:fe:e1:8a:28:3f:
                    fc:ad:0a:a0:50:b4:9c:86:9a:06:b9:e1:6e:30:a7:
                    13:3b:a2:07:59:eb:1a:f0:99:bf:e7:1c:74:64:53:
                    55:0e:32:1b:16:0d:94:fb:8d:08:d1:0a:5e:f2:14:
                    19:aa:29:2d:9c:28:08:e4:49:4b:f9:a1:23:20:35:
                    86:25:0e:bd:ec:f4:03:a0:e0:c2:70:85:0e:43:3a:
                    47:d1:89:83:a1:57:8b:61:e2:e5:89:de:45:de:9b:
                    ec:37:05:72:6e:d8:fb:07:44:08:c9:48:79:02:0b:
                    f4:ce:37:f9:f7:ca:39:72:44:47:50:25:2d:94:54:
                    ee:96:34:3b:81:fa:c2:af:a6:2d:4d:78:69:97:b3:
                    d3:06:5d:28:5a:52:a6:5b:5a:83:d8:9a:4b:06:90:
                    04:53:ea:bf:a1:44:56:4b:3a:90:cf:32:c7:62:ce:
                    77:7f:ab:fb:65:74:c9:77:e4:0d:66:0d:ff:33:47:
                    10:cc:d4:ad:26:e8:5c:0f:22:ec:7d:d6:b2:1c:a7:
                    b2:ca:3f:6e:ef:6f:0d:8d:c7:bc:b4:29:24:67:68:
                    75:ee:e9:9f:cd:b3:5d:8b:f5:2c:ef:96:de:0a:c0:
                    ca:e5:2e:ef:e4:13:dc:0f:9a:db:05:8d:84:d2:02:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E1:AF:B7:DA:86:FF:B7:4A:2D:57:0E:90:BD:8E:5F:93:69:95:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/9b931910-2ac7-3231-8644-a41581603e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl

            X509v3 Authority Key Identifier:
                keyid:FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff41::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:d6:a5:5e:e4:f7:16:e8:8c:27:9e:2b:50:d6:f9:01:9f:
         ba:24:a4:30:79:19:5d:77:41:cb:53:9a:98:91:13:dc:0d:95:
         98:59:7b:dc:0b:f4:1b:77:c2:36:8b:8f:d5:57:38:54:bc:7d:
         3d:f2:4d:cc:a6:e8:cc:64:ad:a2:01:00:51:ff:06:37:5e:41:
         5a:c7:95:a4:21:1b:1e:7a:c2:fd:3a:b3:60:a2:ae:30:0a:ae:
         f6:4f:ba:e8:6b:39:76:ed:7e:1f:1f:44:ee:18:22:ac:fa:c0:
         d6:f4:7f:f8:43:21:67:1b:f0:e3:00:79:e1:5a:85:c5:16:5c:
         92:ac:2b:62:5e:f6:8b:99:83:16:7f:cc:e5:fd:03:63:b5:4e:
         40:34:33:ee:40:b4:9d:84:8f:31:ac:a0:04:1d:d6:26:22:cb:
         20:f4:f9:5d:de:40:48:7a:46:4e:28:73:02:f9:7b:bf:8a:33:
         6d:f8:56:0e:ea:3d:ec:39:79:db:2b:d1:b9:50:e3:b4:5f:99:
         19:f1:20:32:18:0a:fe:47:83:6c:f3:1e:94:50:fe:7c:f7:ff:
         37:fa:4c:59:81:ed:5b:2d:b9:83:85:94:80:e0:8d:f2:d5:0e:
         32:69:13:ba:ea:58:ff:08:f9:ce:12:13:df:d0:c0:05:a7:13:
         84:79:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:10 2026 by rpki-client