Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa
File:                     2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa (raw, json)
Hash identifier:          gQ1P3zOKD55wuFuig9MoS+HLWPglRIWKbgAmTd3GgHc=
Subject key identifier:   2C:25:44:16:BA:36:AA:E9:C7:16:78:8E:96:83:1E:5B:C9:C3:AD:D5
Certificate issuer:       /CN=42eee53c-f373-4efe-aed3-4c501c9dde78
Certificate serial:       010D0C9F4328584ED9C75DBAA72F13801E4FE7C0
Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     401474
IP address blocks:        2602:f7a9::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5d:ba:a7:2f:13:80:1e:4f:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=d140a881-da3b-4bcb-93ae-bceed515e273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:1c:72:8c:d5:a0:f9:2b:04:d7:d1:f3:b5:
                    27:88:ec:d9:aa:59:76:76:03:47:a5:31:45:91:50:
                    23:cb:f8:ae:17:2c:1b:a2:3a:09:9e:ca:c5:e3:08:
                    ad:cc:ea:e6:95:de:d1:76:45:44:cd:20:eb:ae:0b:
                    08:8a:15:fd:31:4f:00:d6:60:12:24:70:94:dc:89:
                    df:e7:6a:8f:73:6f:18:bc:d1:37:47:24:09:ac:25:
                    2c:ad:c0:7b:0d:d1:cb:21:b1:f9:aa:0e:a9:1d:9d:
                    00:3a:cc:b8:7b:17:91:98:2d:5f:ad:be:fd:66:55:
                    d5:37:ed:b9:b4:b4:38:de:30:dd:80:32:04:56:82:
                    0a:93:56:8a:2d:a6:02:1a:ad:7e:84:bf:5a:e7:66:
                    30:b6:cb:bb:7e:9f:fd:cc:ee:ad:7c:0a:cb:50:de:
                    97:1b:ed:a1:a6:aa:bf:83:5d:3a:c7:6c:7d:38:40:
                    d5:d1:62:1f:a9:6a:c1:50:0d:41:43:05:e3:33:fd:
                    d3:a2:ac:c0:17:a5:6c:83:2f:40:5b:db:9c:d9:d1:
                    1d:1a:25:38:b7:75:b3:ab:c9:f1:8d:d1:1d:96:af:
                    2d:b7:67:b6:1b:0f:36:47:30:d2:f1:d8:96:8c:b0:
                    c0:22:c3:02:2b:f9:0c:a0:8a:e9:a2:01:2f:27:b7:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:44:16:BA:36:AA:E9:C7:16:78:8E:96:83:1E:5B:C9:C3:AD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:af:96:5b:f9:52:22:df:9d:59:19:3d:58:ba:d2:ec:37:
         b3:26:11:05:ca:78:53:3b:ab:e7:b6:54:b8:55:c1:4b:82:8c:
         8b:a1:0f:fc:a7:f8:12:78:c6:06:63:56:f8:3e:77:c8:67:3c:
         52:47:44:06:a4:83:81:01:f8:84:0a:7e:6c:08:d6:f9:ef:86:
         6a:69:1b:7c:a0:8a:77:76:27:98:78:39:3e:d7:84:d8:62:1c:
         ac:6f:f1:62:66:61:6e:c3:ea:54:d8:b1:63:30:c3:3c:6e:f7:
         58:7d:93:29:1a:22:2f:ba:d2:e2:ec:89:42:8c:8e:ba:c9:e9:
         4b:e6:60:81:a4:95:05:74:dc:e7:a0:85:ed:55:61:0b:ea:60:
         81:21:bd:fe:70:23:eb:f8:67:4e:d9:06:6d:75:89:1d:ed:fb:
         b4:49:02:2b:2f:a6:54:77:cb:51:94:b0:6f:bc:b1:41:6c:06:
         cb:aa:dd:83:65:4f:56:bb:1a:b4:f5:9b:8a:d1:51:1e:29:ea:
         65:a7:7d:17:3d:31:c4:df:29:dc:4b:42:88:6e:5c:1d:44:b2:
         82:0b:08:75:3d:c9:31:9b:fd:79:5a:8c:de:ed:8e:bf:35:77:
         44:6a:d6:5f:b7:d8:9a:90:38:ec:4e:5a:fb:7d:18:07:0d:ae:
         3a:49:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:05 2026 by rpki-client