Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
File:                     30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa (raw, json)
Hash identifier:          TxigJBv9/lfdkCIocJBtsjYV+NuLkrtszX+UAgnOQzg=
Subject key identifier:   29:A5:4B:C4:04:AC:FD:06:D5:D3:3D:3F:1C:3D:96:7E:AF:AF:9E:45
Certificate issuer:       /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Certificate serial:       010D0C9F4328584F2EED0C02A78DB1A228314580
Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     988
IP address blocks:        2602:fb4b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:0c:02:a7:8d:b1:a2:28:31:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=26b902b5-7477-4fa9-8d7f-ffaa0c6c58f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:4c:0c:44:94:02:ce:4f:4d:4f:a7:0d:fb:
                    12:16:e4:cb:86:2a:f7:1d:28:b8:e9:d5:b1:89:f1:
                    a1:ce:b3:a9:44:23:59:64:0c:62:48:6d:d9:69:fb:
                    4a:e3:27:1a:d3:76:f1:be:28:6a:74:9c:a9:3a:75:
                    bc:22:a9:9e:e4:ff:8a:a7:98:77:3b:71:f0:18:f0:
                    b8:c6:22:77:ed:12:41:29:4f:09:b5:b1:59:31:8d:
                    d9:c2:2e:35:fd:a6:94:11:ca:e6:9b:8f:e3:47:1f:
                    22:cb:1a:df:5c:29:5e:59:e0:03:2b:fb:e9:92:8c:
                    2d:74:df:3f:f0:da:3c:f6:d9:3f:b9:8a:8a:3e:5b:
                    f1:e8:7d:a4:36:4f:fe:c9:1d:b0:7c:07:04:61:cd:
                    54:0c:15:5e:c5:ef:10:a2:32:5d:00:6d:1a:4a:6a:
                    c4:da:b5:05:a9:59:6c:2e:5d:19:46:3c:a9:b2:4f:
                    34:85:4b:87:9f:a6:3e:1f:99:66:47:49:5f:38:02:
                    3e:60:2a:08:dd:46:11:4d:fe:24:f2:4e:7b:88:0c:
                    10:73:5e:bf:26:87:6e:09:94:75:c8:29:df:79:07:
                    d5:58:fc:5c:d2:4b:7c:67:76:1b:43:4d:40:a1:9d:
                    83:0b:47:63:56:53:80:64:c2:70:de:98:ac:39:aa:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A5:4B:C4:04:AC:FD:06:D5:D3:3D:3F:1C:3D:96:7E:AF:AF:9E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl

            X509v3 Authority Key Identifier:
                keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb4b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:b7:b2:e7:22:2f:0c:58:cf:a0:c8:16:34:ca:9c:b9:97:
         3c:87:97:bc:69:d8:49:56:fd:10:a7:c5:f7:68:b3:ba:58:0d:
         df:cc:61:b2:43:99:0d:27:36:57:e6:f2:6a:6f:2b:d3:bc:10:
         49:d0:28:56:a1:a1:6f:93:c1:25:cc:36:a1:01:cb:cc:89:29:
         da:65:6d:2f:ba:1a:74:7f:54:d3:20:96:49:ea:e5:26:28:23:
         7c:f5:66:03:a0:96:a4:63:ef:e0:e3:c8:95:f6:7e:70:09:0e:
         b5:9c:58:1c:af:09:9b:e8:eb:02:b0:2c:66:d1:29:74:7b:cf:
         0c:23:15:95:4b:e4:1f:cf:b7:8f:02:09:fd:8a:50:a7:f6:a6:
         49:5b:ce:b0:3e:98:72:c2:bd:ab:eb:c2:85:50:10:87:8c:f2:
         54:a2:ec:65:59:ab:e9:6b:b1:72:1b:33:ea:ea:68:2d:eb:33:
         a0:64:16:90:f3:44:93:91:9d:a2:39:8b:a7:23:6d:f6:c2:51:
         e6:a6:77:4e:16:31:fc:83:0f:19:2f:3d:54:4f:5e:32:25:5c:
         ac:20:93:13:bf:28:84:26:af:d0:24:f1:73:26:38:cf:64:30:
         e7:af:51:91:37:74:45:67:72:f1:cc:05:f6:d3:63:03:60:21:
         9b:42:9c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:42 2026 by rpki-client