Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
File:                     17c97364-2d34-322a-90a6-f80a73c7f5ac.roa (raw, json)
Hash identifier:          Y7PJTtR7mR9qU/TzvbFQaxEEbI2Fv68Fro1zqlTWdRA=
Subject key identifier:   EA:14:D9:67:96:DB:78:ED:A8:C2:20:15:80:8D:F5:6C:FA:4E:AE:D7
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F4328584F42781D8E3650269CDB1DDA80
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     397423
IP address blocks:        2602:f94c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:1d:8e:36:50:26:9c:db:1d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=9d3e11ff-91dc-418c-950e-e58bf857f5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:e3:8d:bd:cd:9f:d8:3a:72:45:0d:7c:fb:
                    ce:67:25:1d:98:f4:d8:8d:75:01:40:33:c5:52:76:
                    a0:42:97:fc:ee:b1:e8:e7:b7:2a:44:10:d1:0b:91:
                    74:71:cf:99:79:cb:1c:86:07:2e:f8:aa:30:59:67:
                    f5:39:27:9b:6a:47:bd:94:cb:59:aa:02:6d:08:bf:
                    00:75:b8:4e:67:a1:db:5a:3a:a6:64:b4:8f:b7:79:
                    bb:ad:95:5d:df:35:03:7b:a5:2a:5d:fd:79:c8:71:
                    94:16:6f:b3:77:04:68:e7:7c:dc:d2:9c:3a:88:76:
                    0b:5f:cd:11:10:83:1a:85:de:eb:dc:48:3c:3e:91:
                    ea:9f:e2:63:3a:bb:14:c8:92:15:63:c0:f7:63:ad:
                    c3:b3:8f:20:42:61:92:04:90:f5:ba:2a:1e:cd:e7:
                    61:6d:64:55:b6:6d:5d:14:cb:e7:be:43:50:35:80:
                    14:37:1e:48:4d:fa:29:90:c7:6f:a6:78:37:5d:82:
                    08:16:f4:04:21:61:46:bd:95:81:92:9d:bd:df:d2:
                    52:5f:69:92:19:d2:99:88:3a:b1:b0:90:11:6b:44:
                    0c:b8:07:71:80:f2:62:bc:f7:09:31:3a:06:19:33:
                    2a:6b:2c:4a:9c:5c:4c:d1:ae:c9:e8:df:bb:1d:86:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:14:D9:67:96:DB:78:ED:A8:C2:20:15:80:8D:F5:6C:FA:4E:AE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:27:bd:4e:a3:ff:94:6f:c6:c9:25:a8:16:ea:80:99:e9:75:
         f3:5d:61:04:43:eb:a8:9c:57:a0:ab:23:90:4b:10:d8:d2:65:
         4b:79:6b:aa:98:69:7e:8a:78:8a:78:4b:eb:0f:91:b6:a4:50:
         4e:02:e5:8b:76:0c:2b:c6:92:25:2e:f0:10:eb:be:a1:ae:99:
         61:ff:11:10:5f:df:00:80:15:5e:c9:6b:14:0c:f3:fe:86:30:
         38:e4:bf:2f:53:af:3e:bb:2e:8e:80:f8:21:97:f7:52:b0:99:
         4e:1b:62:68:b2:75:bd:65:55:8b:f3:51:cc:85:30:66:9a:bc:
         3f:fb:7b:84:bd:38:b3:c7:82:ef:09:95:48:30:3d:fc:39:b7:
         65:13:b6:3d:d8:55:65:81:bf:0b:c7:8d:80:7d:6a:15:c0:87:
         52:42:c6:a3:02:ad:32:c1:27:8a:fd:a1:44:84:68:f4:f7:2c:
         60:5e:17:b7:c5:38:ef:aa:18:fa:cb:c4:f3:34:13:5c:25:6e:
         b7:af:2b:f4:22:f8:27:38:53:b0:87:90:06:58:41:5e:06:ab:
         00:71:dd:06:00:0a:4e:c2:16:c0:db:86:21:42:d8:fb:1a:09:
         92:c7:94:e4:39:99:d7:83:0c:82:5d:7b:7b:c1:b6:c7:64:b2:
         98:26:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:33:13 2026 by rpki-client