Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa
File:                     57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa (raw, json)
Hash identifier:          UNYItRINVfZA2P5JlKnaVFeK346sC6UHkA6cYyqAv+Q=
Subject key identifier:   7A:2A:7F:1C:26:A8:78:4C:D4:43:D5:0A:75:59:57:0F:8B:86:ED:95
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584F4976B1C8DD3BEF4374939B10
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     29802
IP address blocks:        2602:f972:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b1:c8:dd:3b:ef:43:74:93:9b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc984a6c-1483-4236-8ea7-c3b8034a474c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:15:54:cc:63:96:c1:7f:0b:3c:bc:b8:99:
                    54:99:22:15:41:6e:7c:c9:16:ac:3b:9a:f0:f2:a8:
                    46:20:f5:3a:2d:75:ac:c8:48:b7:13:f8:2e:f3:67:
                    5f:ec:36:8b:89:14:f3:b6:75:1e:2a:5f:e4:29:dd:
                    d3:52:3d:3c:dc:e9:3d:08:4f:75:34:2c:69:c1:27:
                    b9:1e:3e:a6:9d:62:05:e4:31:bf:26:93:bc:03:44:
                    c6:30:e9:da:6c:76:aa:52:fb:3c:8d:f7:e8:b3:44:
                    d7:f0:59:a9:7c:e5:a6:a5:ce:4e:01:fe:cb:31:c7:
                    a9:65:ac:3d:c3:1a:34:3e:4a:29:68:d1:09:36:1c:
                    e8:fa:c9:2f:52:f3:73:df:f6:db:11:3a:b3:82:0a:
                    5c:04:0d:ca:a9:4b:b8:af:84:ba:04:fa:9c:9b:91:
                    44:a2:61:3c:5b:cf:ce:25:e4:2f:18:32:11:99:54:
                    71:64:14:37:c8:2f:6f:48:4f:fe:88:1f:30:1f:ee:
                    94:02:db:a4:04:c0:29:8f:22:eb:73:b4:e7:a1:cd:
                    a5:2d:2b:86:4f:6d:dd:96:8d:e0:05:78:33:5c:ff:
                    78:2d:dd:c6:48:24:b9:39:00:c5:f4:ba:39:41:0e:
                    f4:e3:6b:86:cd:a6:db:e4:5a:97:49:32:a6:bf:13:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:7F:1C:26:A8:78:4C:D4:43:D5:0A:75:59:57:0F:8B:86:ED:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/57a1cd5f-2da1-39dd-b9eb-6bd4f104146d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:50:0c:36:9d:e7:fc:21:38:0e:43:60:92:3f:02:47:41:00:
         c0:f9:f2:d3:91:6f:58:ac:ff:9c:62:2b:f3:5e:ea:49:43:ca:
         9b:87:00:fd:de:98:fa:27:f4:bf:1d:57:81:58:8b:bb:cb:6e:
         2f:3d:40:88:61:2c:5c:04:c8:90:43:2e:fd:88:5e:6b:3c:11:
         12:da:6d:f5:16:26:99:bd:b5:ff:31:37:2a:a1:f2:78:7d:99:
         4e:e1:18:98:20:dc:be:b3:27:88:85:f5:14:87:2d:ae:b9:41:
         79:ad:c0:23:27:03:93:4d:db:b5:cc:6c:ee:59:fe:cb:8c:f8:
         6f:cc:62:c6:61:00:59:43:ad:00:c0:7b:71:ee:2d:77:68:70:
         a8:63:29:be:e5:d3:93:4f:3b:4b:10:7b:5b:f9:7f:88:9a:b9:
         71:a7:47:2b:98:b0:aa:c9:1c:7c:12:4c:5c:63:a4:b3:cf:01:
         ef:31:4e:ac:e8:fc:76:87:26:ac:be:f8:a1:9d:2b:33:42:bf:
         77:cd:1e:c9:e3:53:be:e2:f3:b3:cd:ea:12:b7:5d:2d:a2:40:
         3f:c4:0e:f8:9c:2d:16:ff:83:70:ad:29:fd:40:69:e6:ed:f7:
         7f:50:ae:76:c1:36:10:20:46:19:87:e0:f8:d7:d5:fb:e3:d0:
         db:bd:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:52:03 2026 by rpki-client