Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/783626be-bd0c-3ed4-a095-e5bba6c7ce60.roa
File:                     783626be-bd0c-3ed4-a095-e5bba6c7ce60.roa (raw, json)
Hash identifier:          nfpMvk+X3wF0htvgaRPqoaOEWyJdvAFOntH1W0Q+IP8=
Subject key identifier:   A4:83:1D:74:EF:30:BF:40:17:D3:10:95:76:DB:2A:5F:CD:64:5A:55
Certificate issuer:       /CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48
Certificate serial:       010D0C9F4328584F1E2D02394F839FCC6EC79200
Authority key identifier: FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/783626be-bd0c-3ed4-a095-e5bba6c7ce60.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     18909
IP address blocks:        2602:f925::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2d:02:39:4f:83:9f:cc:6e:c7:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=0b1cf118-35b8-47b5-be83-b846c481f762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:89:0e:fc:f9:7f:74:3f:cf:05:32:b5:e2:
                    bf:3e:93:dd:51:91:49:62:ff:26:8f:0a:f6:4e:a9:
                    ee:cc:2c:86:6f:a4:32:02:9f:86:d5:65:e6:7b:82:
                    bd:a4:39:48:12:f3:12:b6:1b:56:e7:6c:fc:4d:98:
                    2d:fa:59:c6:8f:2f:62:9d:6d:6a:4c:d5:1a:0a:21:
                    b6:f9:80:f4:ea:37:0d:88:07:68:9b:9a:5a:ef:84:
                    b9:db:79:87:52:1e:90:b7:77:f5:50:20:f7:36:24:
                    10:ef:0b:23:e2:7a:7e:2d:31:83:00:8b:67:9d:77:
                    6a:ad:97:e1:ca:a6:95:49:2d:11:1b:f5:09:c5:7e:
                    3d:7d:a2:35:23:39:a3:0a:1f:ea:f5:3b:82:e4:5b:
                    27:29:a0:d2:87:2b:f0:9d:be:59:62:db:09:f2:5e:
                    fc:66:24:91:e5:d2:fb:37:d7:d7:7a:0a:74:3e:96:
                    36:27:d0:7f:24:da:44:54:a9:fb:e8:0e:da:d1:4b:
                    f0:8f:3c:8e:32:c6:30:45:5e:13:78:f5:c6:59:b5:
                    90:8e:70:71:9a:cd:cc:ae:2f:79:04:21:cd:37:07:
                    49:68:e2:16:94:7e:0d:3a:d7:42:b3:38:ee:35:07:
                    6f:d6:df:27:9d:5a:e8:2a:32:71:6a:e3:73:10:40:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:83:1D:74:EF:30:BF:40:17:D3:10:95:76:DB:2A:5F:CD:64:5A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/783626be-bd0c-3ed4-a095-e5bba6c7ce60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.crl

            X509v3 Authority Key Identifier:
                keyid:FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f925::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:ec:de:f1:a8:30:63:dd:db:6b:32:ad:5d:27:b0:84:8c:
         63:df:55:5a:3a:02:4f:93:e6:35:e6:c6:68:3b:9c:49:a3:31:
         01:70:74:00:30:5a:93:90:bc:0d:f5:2f:c9:24:e6:0f:02:3f:
         5b:6d:04:2e:3d:66:80:b1:70:c5:19:c2:9c:ce:27:9e:26:30:
         ad:3e:4a:0e:de:5f:a2:55:c5:b1:f8:81:ab:cc:d9:37:8d:b9:
         49:2b:5c:a7:51:64:f4:55:9d:a3:21:f6:3c:f7:d7:10:60:17:
         44:bc:18:09:37:ab:7c:fc:7d:73:d6:c3:d2:b2:9d:25:ad:ae:
         80:0c:93:ae:a8:03:ed:d7:b0:d4:5d:32:5f:f4:a4:a3:cc:17:
         2e:e2:b6:69:d5:d3:82:3e:6e:da:5a:de:ee:1d:a6:5b:a6:a3:
         e3:b0:e1:f1:22:dd:f3:a3:c2:98:dd:d5:ba:62:2e:eb:6b:d6:
         f3:f6:1d:bb:79:4a:73:53:25:55:97:ac:ee:24:ca:11:8c:2f:
         aa:45:48:9c:c6:9a:93:07:4b:b4:c2:66:6d:e6:4b:c7:60:dd:
         c5:66:aa:98:4e:2a:08:ac:95:b3:d1:c3:83:8b:b2:85:e3:55:
         c7:ad:ea:59:99:ee:83:c4:a4:7e:f0:29:38:8e:a1:c7:16:85:
         64:88:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:49:32 2026 by rpki-client