Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa
File:                     66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa (raw, json)
Hash identifier:          bp/nSY3/iicYOrlGtLTx5RP8Ogg8trKKhVLwgrSHyMs=
Subject key identifier:   89:12:9B:0A:40:14:C9:37:61:ED:E6:D2:F5:B9:B2:A3:A2:DA:CC:84
Certificate issuer:       /CN=50652d78-ba7a-4c61-b45c-77fb9faa18a3
Certificate serial:       010D0C9F4328584F35E7CACCAC23B08841135C00
Authority key identifier: 52:82:90:8A:E2:FF:B1:98:CE:78:5E:31:24:82:57:97:70:E9:90:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     402474
IP address blocks:        2602:f3df::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:ca:cc:ac:23:b0:88:41:13:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50652d78-ba7a-4c61-b45c-77fb9faa18a3
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=89219ddb-f4a5-4f3e-97e7-a6f305124ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:62:d7:45:a3:65:75:5b:7b:70:b2:7e:2c:
                    62:7f:44:b4:2d:49:24:27:0a:55:3f:2f:ce:70:12:
                    1f:6e:92:47:3e:f9:ae:bf:39:da:1d:6f:82:43:2b:
                    f9:fc:22:75:eb:96:3a:15:5c:ea:0a:4e:93:d0:d2:
                    2a:e2:f5:14:ae:40:dc:bf:e7:b0:21:43:1f:8e:9e:
                    1c:cd:d7:7f:14:11:cc:fa:64:7b:81:a9:2b:db:f1:
                    bc:c6:5a:62:68:03:4a:25:9f:89:62:9d:5a:7e:e4:
                    dd:43:97:e7:f2:4c:c6:d2:0c:93:5e:45:af:60:65:
                    b7:ad:0c:87:43:e2:31:56:14:a5:b9:84:e4:56:d5:
                    d1:bf:a1:62:3c:2f:41:43:1a:da:20:b4:5c:ba:2e:
                    df:b6:c6:14:e2:bc:07:33:dd:4b:48:8b:4b:ab:7d:
                    34:16:44:88:72:f0:8d:ab:f1:d0:9a:f3:b4:eb:ed:
                    cb:70:c7:c1:ef:89:68:c0:cc:dc:43:5a:d2:c4:51:
                    51:ce:b0:d9:6b:1c:fe:c9:1d:91:b0:fd:db:b2:c7:
                    1f:57:af:4f:7f:f0:b2:40:4c:d8:28:a7:c8:c9:27:
                    66:a4:c4:7a:44:f7:59:da:cc:cd:ed:92:8c:32:35:
                    bf:9f:e1:da:b9:42:25:df:73:a8:b9:3f:f2:65:92:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:12:9B:0A:40:14:C9:37:61:ED:E6:D2:F5:B9:B2:A3:A2:DA:CC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/66595e9d-a2a9-3404-be2b-a4986d7ce3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3/50652d78-ba7a-4c61-b45c-77fb9faa18a3.crl

            X509v3 Authority Key Identifier:
                keyid:52:82:90:8A:E2:FF:B1:98:CE:78:5E:31:24:82:57:97:70:E9:90:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50652d78-ba7a-4c61-b45c-77fb9faa18a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:97:71:93:30:7c:e8:9d:d3:1c:80:63:52:3f:50:cc:94:04:
         57:b2:ca:2b:b3:fa:51:3a:4a:ec:e3:08:82:72:99:a9:ec:66:
         43:93:0e:29:fa:d1:06:08:0c:87:67:06:fc:9a:f1:d3:fd:5c:
         0d:a4:f9:23:1c:32:98:a4:f4:45:5d:6e:73:b1:48:ed:6a:27:
         13:a6:2b:1b:f9:d2:62:06:45:5d:6f:a2:2f:88:12:de:4d:d5:
         dc:44:19:53:f2:37:8f:92:43:ca:74:b6:92:fc:a9:d4:26:d3:
         a2:eb:cf:02:25:ab:ad:03:d6:01:c6:d5:9b:ab:71:41:b8:98:
         8d:2d:37:0c:ee:c4:01:09:dd:4a:d6:9a:93:28:da:55:d2:4b:
         83:13:ee:f2:56:d6:34:aa:1e:96:aa:17:f1:de:3a:5b:5c:89:
         c4:30:00:0a:e2:14:a4:4a:ce:06:8e:33:70:fd:80:d8:e9:0a:
         bf:ac:fc:ef:8d:c6:24:9d:e3:2e:c3:7e:1b:3a:36:1b:7b:9b:
         d8:85:34:43:fd:2f:c8:a7:c2:2e:a4:16:65:88:1b:8b:4d:37:
         8e:12:86:cb:0a:47:c0:71:e7:3c:40:b8:b5:5f:8c:b0:a1:17:
         cc:b7:90:75:6f:61:c9:e8:1d:ce:72:31:3a:ab:ff:af:d1:fe:
         fa:ac:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:38:44 2026 by rpki-client