Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ae30dce5-b747-36f1-822d-670c642511ad.roa
File:                     ae30dce5-b747-36f1-822d-670c642511ad.roa (raw, json)
Hash identifier:          m84y+vSrdeKG8Leyw7tGgGdFMSf/cgJ3eufBwzbdzlg=
Subject key identifier:   67:1F:9D:99:89:1D:5F:9A:E7:B3:03:7C:A1:D2:2E:F9:46:52:08:57
Certificate issuer:       /CN=608792f3-3f15-42ce-a477-e1ec35f67e69
Certificate serial:       010D0C9F4328584F4DA28EE579FF393F31B9BDC0
Authority key identifier: 96:C4:FD:95:70:1B:04:D8:09:D6:30:1C:F6:08:08:0E:D1:B8:36:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ae30dce5-b747-36f1-822d-670c642511ad.roa
Signing time:             Sat 26 Sep 2026 13:00:12 +0000
ROA not before:           Sat 26 Sep 2026 13:00:12 +0000
ROA not after:            Fri 25 Dec 2026 14:00:12 +0000
asID:                     398925
IP address blocks:        2602:f4bc::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:a2:8e:e5:79:ff:39:3f:31:b9:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608792f3-3f15-42ce-a477-e1ec35f67e69
        Validity
            Not Before: Sep 26 13:00:12 2026 GMT
            Not After : Dec 25 14:00:12 2026 GMT
        Subject: CN=d918762e-838f-4efb-baac-e2410f2e817e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:8f:a7:0a:9d:29:97:35:02:0a:3d:49:3d:
                    ae:9f:d1:37:9a:69:6e:66:de:b0:7e:85:4d:24:fb:
                    e7:ea:5a:0f:b9:81:2a:36:10:e0:74:0e:2c:78:c2:
                    ec:b9:5d:d9:e1:86:d1:2e:2d:08:ea:d0:93:2b:52:
                    4e:49:8a:4f:ba:61:81:27:31:69:ef:73:e6:d1:c0:
                    cb:ff:1a:f5:81:c0:14:9a:1b:47:34:95:28:40:d4:
                    bb:fc:f0:a1:34:a0:19:45:78:f9:ad:6c:bd:4c:da:
                    6e:83:b2:67:d7:1a:dc:05:03:b5:b6:cf:24:48:4b:
                    84:ae:5d:0e:cb:d9:3a:3a:04:5d:3a:4c:c3:9c:79:
                    ed:50:fb:f6:2e:95:61:27:f9:73:1b:dd:89:d6:55:
                    98:ce:eb:f9:ae:10:44:f7:d5:23:d1:bd:8e:52:28:
                    79:e7:da:05:d4:34:6e:d6:57:a9:d6:7c:df:35:6b:
                    b7:51:5e:99:22:95:25:aa:55:6d:c8:58:a2:2f:9b:
                    8b:7a:87:d9:5a:fd:ee:4f:f7:f2:51:f5:10:d9:a5:
                    1b:60:e6:61:af:b2:6e:4c:fb:c5:e9:82:19:0f:b5:
                    0b:f7:b0:78:83:20:48:33:4e:d1:32:73:a7:fc:f4:
                    cb:7e:ee:92:13:7a:5d:92:3e:b7:42:07:a1:05:39:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:9D:99:89:1D:5F:9A:E7:B3:03:7C:A1:D2:2E:F9:46:52:08:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ae30dce5-b747-36f1-822d-670c642511ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.crl

            X509v3 Authority Key Identifier:
                keyid:96:C4:FD:95:70:1B:04:D8:09:D6:30:1C:F6:08:08:0E:D1:B8:36:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4bc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:ab:90:16:4b:3a:30:23:23:b2:05:77:03:67:74:af:02:
         07:95:fc:14:9c:99:6a:ec:9d:c4:da:ab:92:17:13:fc:2f:68:
         14:77:81:f8:a7:6e:50:8a:fa:e3:e2:32:ab:67:53:70:3e:b2:
         9c:89:8f:8c:5d:78:44:fe:4f:ae:97:15:cb:40:0b:af:8c:45:
         03:47:9c:2e:b1:57:d1:70:16:c1:3a:9c:f7:ff:54:54:b7:2e:
         fa:e3:c3:c7:cb:ad:6e:a8:18:86:21:be:66:72:6d:a3:90:08:
         c0:34:18:f1:14:ec:68:ca:07:a9:da:29:bd:4f:d9:40:86:b4:
         00:49:a8:3f:1e:d0:cc:2f:c3:24:bb:e3:10:c3:61:93:c8:b2:
         bd:74:8b:64:ea:3d:83:f8:53:ff:94:16:0a:56:05:0f:75:7a:
         2a:21:d8:15:67:77:4a:ad:bc:1f:f3:9c:3f:91:0f:3c:02:38:
         08:2a:e3:f8:db:7d:25:83:e4:21:ba:f1:4b:90:59:8c:63:cc:
         5f:c9:b3:fa:f6:68:ba:a7:05:2e:40:50:5c:88:98:e4:d8:9e:
         04:5e:a8:d7:58:eb:5d:a1:94:7d:0e:68:d8:b5:4f:5d:d5:7a:
         c7:43:26:be:e7:5b:38:9a:02:d6:10:71:42:81:1e:47:08:de:
         e2:9d:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:14:19 2026 by rpki-client