Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
File:                     cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa (raw, json)
Hash identifier:          o56Ge1KOTmbdlnxv4LkJsrEtnuF5s+sZLI8HluaHc6Y=
Subject key identifier:   24:7A:15:5A:1A:44:8B:62:BC:6F:FD:1F:54:40:1D:4B:77:8D:8C:71
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F4328584F4975C6609C48B3030483D000
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393746
IP address blocks:        2602:f95b:3::/48 maxlen: 48
                          2602:f95b:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:c6:60:9c:48:b3:03:04:83:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2e164c20-d0db-4e25-9337-3777f7694415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:9c:b9:d2:48:34:30:d1:00:d2:79:ed:bf:
                    e6:fa:1f:d7:df:1d:da:23:d8:53:5d:5d:62:9d:f3:
                    26:50:02:a4:30:09:14:fd:a9:e6:81:42:25:de:d4:
                    fc:67:69:c6:dc:12:88:55:ab:87:c5:18:7f:13:1d:
                    e6:cc:43:de:d3:1b:29:2a:67:29:b7:b9:48:26:d5:
                    e1:7f:57:46:15:00:07:96:96:c8:63:74:63:e4:07:
                    7e:e5:0b:5c:95:54:11:4b:3c:d2:bc:1b:d4:f0:08:
                    d6:7d:89:b4:a8:ec:ab:d1:e0:48:8f:8b:c6:01:c0:
                    a4:54:3c:d9:df:f8:45:9a:43:19:5f:4d:61:31:a8:
                    8a:47:a7:00:d2:59:7b:d1:d7:5e:6c:98:d1:b9:41:
                    dc:b6:26:89:b2:37:9c:5f:36:76:21:30:87:af:52:
                    d0:c2:b1:fb:3c:8a:9f:3e:0c:f7:49:2a:43:a0:fb:
                    cc:0b:a6:2b:2b:53:7d:58:74:a5:a8:b6:3b:4f:d1:
                    a3:a9:7f:22:18:21:62:ab:0e:ce:7c:d4:52:be:32:
                    c0:90:f3:f6:d0:bf:34:cf:ab:7d:9f:0f:49:3c:c1:
                    c0:b7:a1:06:ab:1c:5f:41:2f:0f:1d:55:5a:c2:e4:
                    a6:90:4f:e5:9c:b8:c9:53:06:46:50:5e:e3:df:45:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7A:15:5A:1A:44:8B:62:BC:6F:FD:1F:54:40:1D:4B:77:8D:8C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:3::/48
                  2602:f95b:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:fe:c4:0a:a7:b4:45:cf:c8:7c:de:60:1d:4c:61:ea:24:
         15:12:89:c2:40:f4:97:07:d4:eb:ab:78:6c:21:65:4d:9d:db:
         45:f9:a1:45:58:bd:47:22:53:90:ba:ae:35:a7:c1:12:76:ee:
         be:0d:04:05:e4:8a:d7:a1:5f:0f:9e:d5:d5:50:05:a4:e8:ec:
         7f:19:98:82:25:57:4a:04:d6:5f:c1:26:72:e4:94:01:cc:08:
         d5:fa:2a:50:8c:46:58:70:4d:68:2f:c8:88:06:6f:7b:bf:97:
         44:65:ec:86:cc:19:d1:29:10:ec:2f:cc:b6:34:f2:6c:9c:ae:
         6c:b9:c0:f9:d4:ec:be:62:fb:a9:64:4f:0f:35:ac:7f:02:ec:
         4f:e7:60:9a:c0:b6:40:cd:ea:d6:bb:64:2d:8e:87:fe:79:67:
         43:6f:5d:f9:f7:61:36:9d:c4:39:20:81:95:8f:0b:a9:94:0c:
         db:17:74:35:d3:1e:49:5a:d4:c4:2f:ab:8e:8b:c8:96:c6:0f:
         b6:56:2a:57:ac:1b:84:e6:15:ff:99:5f:d4:3d:8d:a0:a7:fe:
         a8:9f:ca:b3:14:1a:20:9d:cf:8d:84:fb:90:02:03:a6:26:b4:
         80:bf:1d:f2:a4:cf:3f:e0:78:cb:0a:42:70:af:3c:0b:34:3e:
         df:ec:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:34 2026 by rpki-client