Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa
File:                     7eef445c-3118-388e-96f6-477ba677dc0d.roa (raw, json)
Hash identifier:          bUpLTzrb2PovXiSL5iUBKRq3CHY0rmUQnQMPAYOlwHQ=
Subject key identifier:   65:60:1D:85:EC:5F:16:07:8A:7E:EB:6F:38:B6:6C:6A:C5:63:5F:ED
Certificate issuer:       /CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b
Certificate serial:       010D0C9F4328584F43DD6EDB300A5BC6131627C0
Authority key identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     9304
IP address blocks:        2602:f3de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:6e:db:30:0a:5b:c6:13:16:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=3a7f9141-8c75-4fb8-8fa0-926ffee48961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:19:95:14:f2:66:b1:9e:cf:c0:82:3c:6e:
                    4c:fb:1e:25:1c:5d:78:cf:f5:ca:d7:fa:5b:aa:f8:
                    74:be:77:2d:0d:b1:08:8c:4f:37:61:c9:26:4c:91:
                    c5:4b:21:62:8e:7a:29:47:71:0b:58:23:1a:14:20:
                    42:6e:f3:47:a4:81:1d:67:46:0d:fe:3f:37:4a:04:
                    0c:6e:0d:e2:cc:12:68:b5:eb:4a:2f:30:75:c5:52:
                    13:c8:db:92:f2:7e:27:76:d8:13:ea:30:29:84:a0:
                    5b:03:6d:9f:15:6e:81:60:6c:ee:57:30:f8:a1:1e:
                    b4:50:25:6d:91:f6:69:e7:4c:7d:23:12:bd:51:f3:
                    9f:58:a5:a6:47:ca:24:17:6e:88:1d:68:5d:62:92:
                    5b:d6:7f:fd:47:e7:d8:ed:2a:4d:70:12:f5:8d:9f:
                    35:12:76:e2:87:8e:4e:d5:2c:8c:3b:47:c8:88:77:
                    40:4b:85:f1:1a:b7:23:34:bf:ce:e7:d5:14:21:6d:
                    f3:c7:56:5a:e5:d7:8d:c0:bc:9c:9c:d2:49:b5:8b:
                    cf:fa:fd:9a:ab:94:4f:27:e1:c0:93:d0:93:80:9a:
                    4a:7f:b3:03:7d:38:f7:68:35:46:74:41:fc:56:db:
                    83:9c:64:af:e0:d4:b2:63:c1:b3:29:10:15:09:c7:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:1D:85:EC:5F:16:07:8A:7E:EB:6F:38:B6:6C:6A:C5:63:5F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/7eef445c-3118-388e-96f6-477ba677dc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl

            X509v3 Authority Key Identifier:
                keyid:29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:c8:62:9e:a2:49:da:21:a5:11:80:a6:88:cc:73:91:cc:
         95:a0:63:14:c8:59:f1:82:4f:49:e5:99:d2:bb:92:0c:af:a4:
         3a:5f:1e:20:9e:0a:4f:cd:b2:68:89:94:3a:fc:19:7d:16:ed:
         05:75:0e:a0:42:5e:b7:f4:4a:1f:fd:97:41:dc:6e:f9:2b:a4:
         27:f8:67:b9:a0:80:16:99:1f:66:c3:69:ba:0f:71:71:18:5b:
         da:9e:d0:62:6a:07:24:fb:b3:9f:2f:50:fa:ae:e2:a8:7d:0f:
         95:8b:fc:17:13:da:f8:9d:cc:e6:68:2e:af:ab:ec:d6:a8:22:
         27:67:e7:46:a9:eb:b8:b2:bd:cd:09:a6:f7:5d:87:c0:14:54:
         6f:76:51:93:6e:7f:8d:bb:8a:59:41:ec:36:ac:42:03:c0:75:
         9c:86:17:55:92:89:10:4d:ec:cd:52:4a:a3:5c:dd:0c:b4:78:
         3e:60:ba:92:6d:3e:e9:91:38:da:4e:27:e0:e3:9e:4a:88:b1:
         18:80:60:8e:4b:0a:94:0c:cf:a4:d7:51:17:7d:ed:47:4e:35:
         94:9e:d9:dd:41:65:7d:7e:c0:9d:69:29:8e:7f:7f:47:fc:1a:
         d2:8b:1f:70:db:4e:4e:ea:a1:24:2c:61:97:b9:2b:8c:7d:38:
         b6:4c:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:55:02 2026 by rpki-client