Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa
File:                     f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa (raw, json)
Hash identifier:          QTA6voaXgWKe83pPK1AIQa7uW+XqsXUNe0KuRXReQvg=
Subject key identifier:   E3:98:CD:E7:61:90:AA:11:1F:67:00:00:36:88:E1:CD:F8:A9:7E:D7
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584F49895AA5E9D15049DA60FB30
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3819
IP address blocks:        2602:f69a:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:5a:a5:e9:d1:50:49:da:60:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ad26d6e-5203-4308-9516-0c80c1dd8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:60:dd:f6:48:b8:62:a7:8a:0b:fb:cb:70:
                    4a:34:36:67:a4:e2:71:8c:6e:a4:3c:77:f5:d0:5f:
                    1d:39:16:8d:f3:4c:91:79:13:ca:e0:d1:c9:e9:0d:
                    22:89:d2:bf:e7:9b:12:2e:c2:4b:4f:c9:01:2b:26:
                    cb:ba:d7:74:01:1a:78:d3:ee:fc:fe:67:d0:85:df:
                    a1:2e:1b:a2:59:a7:a3:d3:00:f0:1c:9a:d9:43:10:
                    9f:f9:fb:b2:b0:50:83:3a:79:0c:f0:90:13:ab:42:
                    ba:55:7c:e3:c8:ba:fb:e6:74:28:20:96:23:74:79:
                    e1:ea:b1:98:e1:dd:a1:c6:fb:da:2a:f0:c9:a4:db:
                    9a:fb:5c:fc:4c:61:1b:b0:c4:63:8e:37:b0:24:5c:
                    3b:7a:88:c9:34:1d:04:b5:61:5a:74:d1:e5:46:ad:
                    3e:0e:b5:23:cc:95:b7:0f:e0:30:f5:ba:66:76:bb:
                    15:38:2c:03:44:72:08:8e:67:14:07:40:31:90:c3:
                    94:cf:28:6e:85:1e:69:11:7e:ff:a0:07:14:5c:ba:
                    cc:8f:fd:2a:ca:e1:05:9e:4f:14:82:0f:73:9b:a0:
                    34:4e:5b:fb:e1:ee:38:f1:05:28:8c:61:a1:07:f6:
                    fe:1c:91:33:fc:e3:fa:4a:73:1f:d8:9b:06:23:2f:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:CD:E7:61:90:AA:11:1F:67:00:00:36:88:E1:CD:F8:A9:7E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:11:e3:f8:3f:cc:53:1c:67:e3:9f:6f:3f:fb:a9:4d:02:
         0e:23:91:3e:46:88:c7:cd:9a:57:34:98:83:ea:ea:34:22:d6:
         14:05:c3:b1:2a:12:cf:25:16:c3:76:f1:02:ed:0a:bc:f6:42:
         ba:e8:fa:d3:69:1d:45:57:97:23:df:b9:e9:9d:6b:0c:ad:ba:
         94:3e:7d:49:a3:7b:77:8a:8b:e1:ba:83:ed:8a:4a:20:af:da:
         1d:00:e0:50:13:79:1a:27:68:5e:5f:a1:42:a7:58:d5:d8:19:
         ae:8c:84:3d:31:95:af:ef:08:69:f8:99:e3:40:8d:c2:f1:27:
         1a:6a:d8:b0:1f:19:a5:45:8b:6c:b4:f2:12:5b:74:82:d1:d1:
         cc:77:cb:08:b7:09:a3:ba:67:2d:3c:53:5e:63:a4:5b:af:2b:
         9e:46:1e:9a:10:13:24:33:c5:a0:07:59:f0:3d:11:4b:28:d0:
         73:93:90:7b:e6:3d:b3:64:0b:ce:63:cd:23:5f:ca:64:29:71:
         1d:b7:ac:ad:4d:cc:0d:ab:17:51:70:03:9c:61:fb:97:d7:bd:
         c2:57:f5:f8:6c:41:31:ec:bb:4d:b1:f4:e8:67:18:ea:e7:fb:
         0e:36:a9:e6:3c:65:82:91:0f:d5:60:85:2b:a5:bd:32:97:05:
         24:6e:10:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:00:36 2026 by rpki-client