Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/330dc7af-8c26-3313-9103-f86db4b861d5.roa
File:                     330dc7af-8c26-3313-9103-f86db4b861d5.roa (raw, json)
Hash identifier:          y45BSKY/UujbCfhICCR+of2UoO3Hf4iB/wLnDUbpaXc=
Subject key identifier:   BF:8E:06:90:C8:72:AB:77:33:E4:06:A5:B2:AF:35:EF:38:7D:48:10
Certificate issuer:       /CN=734e4882-902d-4048-bebd-a21b61bd145c
Certificate serial:       010D0C9F4328584F6F22CE54B2B8B389FD3FD060
Authority key identifier: 7B:CB:39:A2:4C:C9:BE:AC:FD:47:7F:A5:0C:C1:5B:67:8C:A6:33:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/330dc7af-8c26-3313-9103-f86db4b861d5.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     17267
IP address blocks:        2602:fd97::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/734e4882-902d-4048-bebd-a21b61bd145c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/734e4882-902d-4048-bebd-a21b61bd145c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:ce:54:b2:b8:b3:89:fd:3f:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734e4882-902d-4048-bebd-a21b61bd145c
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=fcf9184b-50d3-4864-9f02-de997e607be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:bb:86:0d:d7:de:e2:35:d5:47:3b:b6:58:
                    99:ad:cf:cc:77:ee:82:8d:cd:81:36:39:83:c4:ab:
                    6d:6b:61:9a:9b:a7:26:47:f8:65:56:d4:f4:49:25:
                    c1:a0:36:bd:98:b2:9e:a5:3a:f0:21:68:5c:23:0b:
                    99:6e:00:16:57:d0:e5:4b:07:ea:bc:aa:3c:00:c6:
                    44:2e:7d:23:63:2b:da:94:6d:72:32:c0:47:46:18:
                    49:c1:53:d2:ca:ff:df:71:f3:78:a6:bb:62:01:c8:
                    ab:bd:d1:f3:b9:35:1e:24:c9:23:6e:91:60:5e:55:
                    fe:e6:70:db:d4:8e:26:96:e7:a8:4c:77:e9:87:1d:
                    21:89:7d:75:f4:83:38:d5:10:de:5f:12:00:f7:66:
                    cd:a8:60:88:86:a7:65:8f:1b:0d:ef:36:a4:3c:95:
                    60:31:68:0d:8d:72:1e:48:de:fd:92:46:f9:c1:d3:
                    ba:a9:7d:81:bb:02:14:ef:5c:99:9c:d7:83:8f:69:
                    f1:33:ea:2e:76:30:b7:06:ee:96:dd:3c:0a:1d:0a:
                    0c:67:27:4e:17:ba:70:2d:5b:4f:8b:2d:dc:12:e2:
                    18:b8:10:30:26:b2:47:f5:30:e8:c4:de:92:9e:c1:
                    2b:ec:5a:f4:3a:64:e8:36:cd:e4:fb:1d:48:21:f8:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8E:06:90:C8:72:AB:77:33:E4:06:A5:B2:AF:35:EF:38:7D:48:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/330dc7af-8c26-3313-9103-f86db4b861d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/734e4882-902d-4048-bebd-a21b61bd145c.crl

            X509v3 Authority Key Identifier:
                keyid:7B:CB:39:A2:4C:C9:BE:AC:FD:47:7F:A5:0C:C1:5B:67:8C:A6:33:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd97::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:09:a3:60:4c:e9:72:88:d9:6b:82:50:c7:95:62:03:98:
         db:4a:cb:15:74:6c:99:50:41:3a:3c:6b:1e:0d:96:48:36:1c:
         cf:59:7e:c4:f7:cc:f9:97:68:ef:ef:ba:da:49:25:5a:a3:fd:
         19:c3:1c:d9:6f:d8:14:b5:0f:36:36:56:d9:aa:83:fd:2d:3f:
         54:c1:ba:61:09:0c:8a:bc:d2:26:10:b1:6f:7e:28:0b:d0:5a:
         db:b8:7f:fb:73:63:3e:6a:e9:1d:51:d6:bd:93:76:73:22:50:
         e1:5f:b7:55:94:3d:4c:fe:16:02:2e:f2:ad:ce:17:79:ee:b8:
         e0:8f:09:53:51:4d:8e:ac:b6:87:2c:f2:4e:59:6f:71:2f:ef:
         19:e4:58:f0:e5:90:f0:70:e3:49:68:7f:20:60:d1:0c:7b:28:
         3f:5c:3d:62:0a:3c:29:dd:c6:a1:87:46:02:5b:f1:0c:49:30:
         ef:66:42:be:65:2f:55:86:d4:d3:04:ad:db:5a:8f:b3:f0:e9:
         9d:5c:a7:50:e1:a3:cb:cb:b3:2c:b7:34:d2:78:5c:0d:d2:84:
         f9:99:cd:4c:15:8e:15:4c:d8:3b:06:ec:d0:53:45:0f:a5:62:
         7b:aa:49:73:6b:eb:c3:f3:e4:29:03:8a:b3:3c:b9:f6:1d:e1:
         6d:77:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:07:04 2026 by rpki-client