Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/ce339a86-1cb8-3646-982e-df807d56cb9f.roa
File:                     ce339a86-1cb8-3646-982e-df807d56cb9f.roa (raw, json)
Hash identifier:          gtUaOZ0oE3THcmqELWj82j0HRoUunwzbxBY4qJEjMAA=
Subject key identifier:   17:92:07:F0:36:F1:D7:99:16:AA:B8:B3:95:0E:3E:2E:0D:72:22:E8
Certificate issuer:       /CN=b566ac43-df42-44dc-a133-81ccff9cf2d5
Certificate serial:       010D0C9F4328584F4989323C8102511A0BD3DA80
Authority key identifier: 5C:13:B3:B2:FF:4E:AB:A8:24:80:B3:4B:8C:45:6C:A7:F6:7F:60:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/ce339a86-1cb8-3646-982e-df807d56cb9f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36243
IP address blocks:        2602:ff87::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/b566ac43-df42-44dc-a133-81ccff9cf2d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/b566ac43-df42-44dc-a133-81ccff9cf2d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:32:3c:81:02:51:1a:0b:d3:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b566ac43-df42-44dc-a133-81ccff9cf2d5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e0799c77-fb92-453c-ae57-ba0d475ef9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:23:e0:8b:36:5a:6a:67:92:e5:c6:ca:59:
                    a5:69:9d:07:70:93:a2:fe:7c:63:8e:47:f9:1c:cf:
                    a5:05:6e:33:ea:11:23:6b:78:5b:48:b8:fb:00:11:
                    20:b4:c4:b1:f1:8a:0b:d1:e2:ea:df:41:33:32:15:
                    57:42:a5:4a:85:1e:2b:f4:ce:18:27:75:42:2c:a9:
                    7a:8a:13:98:8e:1d:99:2c:03:70:33:2c:b9:3f:88:
                    6c:d3:06:7a:6a:91:04:6b:97:29:bc:11:0e:11:37:
                    31:3b:5d:b4:d4:89:3e:ed:9e:3a:93:a2:12:9d:2e:
                    25:66:cd:6d:0b:b2:c4:64:dc:05:cc:e4:5f:49:2f:
                    85:53:dc:6b:d3:86:bc:9e:7d:0f:44:82:ae:f8:b6:
                    3b:b5:5b:1e:ac:50:71:76:eb:d3:6b:64:6b:2c:e5:
                    98:f2:fc:16:f0:ab:5f:ed:b0:a0:25:47:d5:45:94:
                    29:6d:a0:a3:f2:f4:ad:08:00:7e:2a:e3:44:d7:18:
                    da:9c:b9:1f:24:b5:65:6b:19:79:87:b1:2b:5c:0c:
                    2f:a1:ee:4a:0d:43:95:08:60:81:15:97:10:7e:f6:
                    77:15:c1:2b:97:0f:06:4d:da:85:e7:a6:f8:82:0f:
                    6b:5c:fd:37:8b:ff:f2:d6:19:05:03:18:7b:ce:28:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:07:F0:36:F1:D7:99:16:AA:B8:B3:95:0E:3E:2E:0D:72:22:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/ce339a86-1cb8-3646-982e-df807d56cb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5/b566ac43-df42-44dc-a133-81ccff9cf2d5.crl

            X509v3 Authority Key Identifier:
                keyid:5C:13:B3:B2:FF:4E:AB:A8:24:80:B3:4B:8C:45:6C:A7:F6:7F:60:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b566ac43-df42-44dc-a133-81ccff9cf2d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff87::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:cf:c4:21:fd:40:a8:da:91:09:eb:06:d4:55:43:5c:0e:f7:
         9f:53:b9:25:43:39:a4:42:30:de:4b:14:8a:3f:2b:b7:8f:9d:
         d9:2d:93:76:8c:6c:61:03:f4:d3:1a:ec:d1:63:c4:40:b1:bd:
         42:c7:fb:f1:75:ed:bc:6b:6f:92:82:43:90:c2:2a:4a:66:61:
         aa:de:61:27:0e:1b:f0:4c:a8:49:62:21:ec:ba:5b:cc:b1:4c:
         bc:5b:9d:d9:f2:28:bc:8a:d5:81:e3:9b:b7:59:77:a5:2b:52:
         de:11:a9:a2:6c:88:ff:6e:b9:7a:8c:d7:d6:6b:3e:75:84:ab:
         20:b3:d3:21:87:db:6d:04:f4:5b:a8:5e:be:4c:83:25:b6:01:
         6f:27:9d:36:7a:e5:1f:ae:6f:a0:b6:d5:1b:a1:20:12:b6:61:
         ed:19:ec:9b:ec:a1:c4:04:5d:9c:97:39:b1:ba:a6:86:fe:d3:
         6c:52:2f:7a:fa:63:0c:9f:15:fd:53:8a:3b:f6:4f:6c:61:42:
         e0:03:8c:97:be:80:a2:76:e2:45:4e:52:2c:bb:0b:7f:40:dd:
         2f:31:65:61:f9:a1:84:a6:43:68:fc:bd:cd:8a:5c:29:fb:91:
         29:64:02:26:21:4a:bc:51:a7:d0:ab:9b:53:8a:d4:ab:33:9d:
         95:2b:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:52:59 2026 by rpki-client