Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/c74fe1e2-a2ef-386f-99f0-d887dd9b5e6b.roa
File:                     c74fe1e2-a2ef-386f-99f0-d887dd9b5e6b.roa (raw, json)
Hash identifier:          fZApNkFRpPu3s3poviteAl0Z4/+EByog/v0Tw2ODPK4=
Subject key identifier:   84:7A:B1:52:2A:60:63:27:DF:DA:68:3B:4E:4F:25:84:04:3C:57:A8
Certificate issuer:       /CN=7f148b73-c2cd-4595-8670-0f56bb44f8c6
Certificate serial:       010D0C9F4328584F498C2BC9EFC17389E6F1C080
Authority key identifier: 0D:AA:B7:42:61:4E:AE:6A:A2:A2:B7:F7:41:96:9E:A8:CE:0A:7D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/c74fe1e2-a2ef-386f-99f0-d887dd9b5e6b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401742
IP address blocks:        2602:f639::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:2b:c9:ef:c1:73:89:e6:f1:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f148b73-c2cd-4595-8670-0f56bb44f8c6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2dd66c1b-e5fa-4814-80b1-2bfb87f36ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:cd:78:3c:35:bd:98:94:26:75:65:e7:6f:
                    51:f6:8c:47:1e:7e:99:a8:6a:d0:15:97:9e:26:77:
                    e5:c3:c7:9e:9b:93:bb:6b:44:7f:a5:56:9b:a4:d1:
                    a7:cd:8b:d1:8a:9f:ca:91:d1:89:71:5b:5c:3f:8d:
                    7a:c9:a0:7a:8f:ac:fc:39:c7:60:22:b6:b0:54:c4:
                    72:8c:f9:00:23:e6:57:f9:58:b2:ee:3b:e6:eb:1c:
                    be:b5:e9:a8:50:bc:45:00:11:5b:69:d5:62:40:ab:
                    3c:96:be:4d:fe:07:d9:b3:f4:a6:26:d8:71:db:7f:
                    8b:9c:27:c5:0c:45:4c:cb:a5:5a:36:b6:83:5c:3d:
                    2b:c1:4e:64:8c:24:e6:81:12:73:5d:07:d5:17:a7:
                    4d:08:29:e4:34:c8:3f:fe:5a:55:7a:d5:4b:42:41:
                    e9:16:38:18:98:b4:3e:1d:28:3c:5c:eb:b2:7a:28:
                    97:da:05:14:cd:c7:fa:69:98:9b:2f:9a:2b:cd:c6:
                    b7:80:c3:8b:a1:40:01:4d:d6:dd:16:c9:80:74:83:
                    2e:d3:89:30:2d:cc:8f:45:9e:86:0d:0a:29:83:29:
                    da:4e:a5:8b:74:ee:95:c6:fe:1f:6f:13:c1:c9:a2:
                    b8:ec:fc:cb:da:62:d6:7d:f0:d6:5e:42:9f:31:77:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:B1:52:2A:60:63:27:DF:DA:68:3B:4E:4F:25:84:04:3C:57:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/c74fe1e2-a2ef-386f-99f0-d887dd9b5e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.crl

            X509v3 Authority Key Identifier:
                keyid:0D:AA:B7:42:61:4E:AE:6A:A2:A2:B7:F7:41:96:9E:A8:CE:0A:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f639::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:ce:fa:5e:65:06:ba:de:ba:a8:b3:26:9d:3d:d6:0b:63:
         1d:01:fe:15:86:f8:b9:5d:29:a6:53:2c:a7:d3:b4:d4:ca:c9:
         74:6a:c8:0f:a7:73:f9:cf:16:51:a2:0a:4c:77:2f:a4:05:e4:
         d9:c3:ff:73:56:91:5a:1e:be:89:16:b1:9b:59:16:aa:a8:13:
         b7:68:1e:5d:92:77:31:94:16:f7:1f:23:7b:ff:6a:c0:93:23:
         8a:66:ca:4a:72:e6:36:c1:9b:9c:fe:48:a9:8b:75:26:0e:89:
         6a:e5:2b:e3:da:fa:2b:54:bb:ff:b7:97:85:3f:7f:e1:b9:37:
         04:43:ba:c7:41:b5:d1:3a:35:d3:cc:7d:2c:f6:5a:d0:da:37:
         a0:1f:9f:53:ce:80:40:e9:b3:65:26:74:36:64:d2:db:38:26:
         78:26:31:be:90:8c:c2:11:23:a2:7b:c5:63:dd:77:23:99:9d:
         be:93:d2:aa:8a:75:23:8a:f6:ec:bd:97:6d:48:6f:5d:d0:94:
         d8:da:d8:4f:ee:9c:ea:4e:2a:e8:f5:37:9e:94:57:b4:4a:ef:
         60:54:8a:7d:08:e5:28:d7:00:65:54:ad:e3:8d:3e:85:30:c5:
         ad:e6:ba:a3:64:89:49:13:54:63:1c:67:5b:16:6e:e1:df:de:
         5b:f4:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:49 2026 by rpki-client