Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4c982939-6da8-3bd9-b993-7453a736f5af.roa
File:                     4c982939-6da8-3bd9-b993-7453a736f5af.roa (raw, json)
Hash identifier:          E1QkcSOK2dH3RxTAK0PAxxnwPDV1AfRCCKsrhMKgidw=
Subject key identifier:   0D:A2:8E:6C:FF:07:0D:6C:83:08:FB:79:C2:37:79:52:B4:E0:06:00
Certificate issuer:       /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
Certificate serial:       010D0C9F4328584F23C289704E1559C09636E380
Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4c982939-6da8-3bd9-b993-7453a736f5af.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     402718
IP address blocks:        2602:f35d:ffe::/48 maxlen: 48
                          2602:f35d:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:89:70:4e:15:59:c0:96:36:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=75d9e0a7-0f0c-4142-a77f-d2427cf6b9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:64:a7:83:d9:a4:d3:65:32:a4:7d:a9:b1:
                    71:bd:13:5c:35:c1:c5:ef:3f:fd:3b:ec:42:f7:95:
                    54:81:ff:9a:e2:db:70:4e:9e:0d:70:55:55:07:83:
                    7c:cf:07:3e:f8:9c:a7:25:08:03:50:b8:28:6a:1b:
                    1a:ec:b3:fe:64:33:78:da:2c:4b:21:a0:e8:d3:05:
                    62:42:52:94:cb:e1:74:bf:8f:00:df:cb:e5:5d:14:
                    0c:ab:6c:10:d2:e1:7d:dd:55:12:61:a4:bd:ae:d7:
                    16:57:25:21:f7:0d:9f:44:63:cf:96:70:f4:7d:b8:
                    b2:20:2b:6a:f4:8b:6e:05:8b:eb:5c:bf:cd:bf:c9:
                    39:92:94:9d:37:3d:3a:85:cd:ac:e0:53:1a:22:1d:
                    86:69:5e:c6:9d:9b:e7:38:47:68:de:90:6c:ef:ea:
                    7c:50:68:45:a5:11:36:f9:47:b7:08:78:e2:9d:df:
                    12:62:c8:6b:e3:17:e1:0a:af:1a:8a:d5:57:1e:2a:
                    00:30:ad:84:be:d3:fb:49:4f:5b:37:f9:3d:58:7d:
                    3e:8b:57:a1:11:87:53:a6:de:2f:cb:10:a1:eb:71:
                    84:0f:3b:5a:52:a2:15:79:e3:64:8a:a7:d6:cd:8d:
                    50:a8:ce:20:9d:90:40:71:5c:b6:09:2f:de:e2:83:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A2:8E:6C:FF:07:0D:6C:83:08:FB:79:C2:37:79:52:B4:E0:06:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4c982939-6da8-3bd9-b993-7453a736f5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f35d:ffe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:6a:37:5e:08:10:1f:30:a9:3b:0f:fd:b9:b3:4b:6e:7f:
         98:24:76:e1:26:63:41:aa:3b:13:bc:8f:16:48:6f:f7:ee:e0:
         e0:19:1d:cb:93:5d:fb:e3:ad:d0:52:70:40:b1:db:d2:9e:c8:
         3b:f7:9c:59:3d:fb:2d:3b:3e:55:a6:95:85:b1:7c:d9:26:02:
         09:72:f5:c0:a1:9b:e5:a4:86:2f:4b:7b:57:c3:d2:06:ad:45:
         55:38:9c:58:fb:54:fc:66:97:a6:0a:fe:28:2c:b6:8e:33:0f:
         6d:23:3b:13:11:f2:93:e2:74:ec:f1:05:28:63:af:fa:dc:70:
         26:a0:d9:2b:26:b0:83:2d:10:b1:ee:3a:53:da:86:af:b9:a6:
         39:5c:bd:b2:77:ee:71:f6:ae:3e:00:de:79:af:d6:d1:73:49:
         85:b4:f6:02:1c:30:f4:7d:15:ef:a8:1a:d2:b3:cc:2f:de:2b:
         df:f0:51:6b:9c:bb:3c:b1:ce:f5:b1:c6:68:80:b6:b7:be:ad:
         d7:d7:d4:70:e5:2d:0c:cc:e8:33:98:41:92:e5:82:3e:44:4c:
         bc:ec:75:8b:c7:63:64:5f:30:36:50:cd:a2:f1:02:fd:7b:02:
         75:f9:e6:ef:93:f6:03:84:2a:4d:70:e3:86:a9:bb:72:1a:44:
         3f:a5:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:27:28 2026 by rpki-client