Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/790ec734-7f46-3504-a316-2c4e00618a01.roa
File:                     790ec734-7f46-3504-a316-2c4e00618a01.roa (raw, json)
Hash identifier:          StFnbSFVit5E0izG2PF9+H9vUWtxQS2YgrOcx6aXvHc=
Subject key identifier:   54:3D:F0:04:E7:D2:48:93:4B:03:CE:72:C4:15:5D:17:4A:9C:62:35
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584F2527AD88885B2DC88ED07F00
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/790ec734-7f46-3504-a316-2c4e00618a01.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     213683
IP address blocks:        2602:f700:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:ad:88:88:5b:2d:c8:8e:d0:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=2c297208-1dd1-4224-a9a7-ca1447c6ad44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:d2:1e:65:a0:94:33:7f:a6:5b:a2:16:62:
                    03:9f:28:5a:a0:62:6a:f1:c1:f4:64:a8:28:de:a4:
                    27:e1:e5:b9:ec:4b:01:83:b5:9f:25:85:61:53:d9:
                    f1:5b:d2:41:b9:05:51:84:74:d8:7c:e6:1e:0d:ba:
                    31:3e:fe:61:84:13:fa:68:6d:f8:15:14:e3:50:dd:
                    d0:a9:73:12:04:86:d3:2e:69:07:db:a0:91:79:d4:
                    80:c6:23:1f:d8:17:c0:e6:17:1f:b6:9d:61:1a:41:
                    2f:35:c0:6c:e5:4c:68:4f:25:c3:72:c8:7c:9c:c9:
                    c7:94:98:6c:12:aa:46:56:92:6b:05:35:b4:30:5f:
                    b5:81:24:5b:cb:7c:81:a8:24:69:b2:95:ea:3a:d1:
                    27:e5:ca:c0:c9:69:04:d0:f6:0d:29:4f:66:92:e7:
                    e9:c7:38:97:95:6d:42:2c:7b:fe:b4:ec:1c:b6:52:
                    40:4b:d2:bb:e8:23:48:e7:f6:ae:65:0f:01:6a:6b:
                    11:62:3c:7b:26:d6:6d:ae:ff:10:07:1b:45:08:2b:
                    d5:09:69:25:e2:da:74:3d:ca:6e:f2:4d:9e:a4:bc:
                    cc:53:66:ab:14:f0:d4:6e:09:f6:72:31:1d:e9:d8:
                    a9:e0:d2:86:9b:44:8d:77:c7:43:b4:40:8d:a0:9a:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:F0:04:E7:D2:48:93:4B:03:CE:72:C4:15:5D:17:4A:9C:62:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/790ec734-7f46-3504-a316-2c4e00618a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:36:e2:b1:4f:3a:9a:65:6b:09:12:5a:b7:c2:0c:71:18:
         16:95:09:91:f9:09:eb:07:42:0b:d1:28:d7:72:1d:2a:94:cf:
         15:27:1b:64:2b:e4:f3:f4:01:ea:9e:2d:c8:2c:25:18:ab:1b:
         1f:b6:44:ed:b8:9c:a9:d7:c2:5e:8c:1a:f9:65:af:13:8f:bd:
         42:2b:47:b1:3e:df:21:5d:50:de:a2:d0:27:e4:bd:1e:46:f5:
         b0:b9:02:0c:36:96:e6:0a:a8:c0:35:7e:7c:dc:ef:98:ea:88:
         62:a5:f1:ae:ca:aa:07:1c:ee:b4:ba:8a:16:6a:a7:75:61:c4:
         b8:ab:0c:dd:a1:5d:89:6d:38:18:c0:85:ca:ac:1b:56:55:58:
         a5:97:19:a6:a9:d8:63:b4:49:94:f6:34:dd:7d:d4:03:33:cf:
         38:a0:e9:f5:9c:1a:34:44:d1:dc:c2:91:cd:eb:c6:79:94:96:
         b2:97:f1:81:a8:fa:f0:f5:c3:9e:cf:6f:99:ea:a7:b4:13:57:
         77:3d:9b:c9:6e:4e:85:34:e3:02:c9:3c:9e:e7:39:96:9f:34:
         d0:49:ac:9a:5d:3d:88:12:b7:a4:5b:57:d9:4e:be:fd:18:b1:
         b3:38:ef:45:2d:ec:07:3c:ef:a7:46:1f:0e:cb:4e:c4:4a:5e:
         28:e1:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:23:10 2026 by rpki-client