Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/4fabea2e-d871-3336-9a78-159212062d23.roa
File:                     4fabea2e-d871-3336-9a78-159212062d23.roa (raw, json)
Hash identifier:          9yu+ntEyj5+zIZ12Ny/T5ogIDQ4M2TYXHBQDZpZfdyM=
Subject key identifier:   CF:BA:60:90:A3:9B:66:F7:97:FB:3E:C7:1B:39:AC:7B:8D:4E:9B:C3
Certificate issuer:       /CN=d7c75743-409b-41fb-b744-8345baaf599b
Certificate serial:       010D0C9F4328584F4976AA61AF2E82F3810B7740
Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/4fabea2e-d871-3336-9a78-159212062d23.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20373
IP address blocks:        2602:f939:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:aa:61:af:2e:82:f3:81:0b:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=44d0c5e1-a55d-4832-bd9e-2e72b65b22e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:b3:3f:cd:ff:01:28:77:12:68:37:67:aa:
                    08:fb:ba:80:aa:a4:d8:9f:b0:88:2b:42:b4:a1:06:
                    88:95:10:5f:04:7c:c1:f0:12:bc:8f:ae:1e:17:a0:
                    7e:46:e5:5b:cc:6b:4d:69:16:fe:73:f2:03:a7:b0:
                    5e:0d:89:b3:20:90:60:d9:d5:e1:42:e7:1f:9d:c7:
                    f0:88:78:b7:65:47:3c:f0:0b:87:78:c6:b9:cb:92:
                    a6:dd:55:47:56:b5:be:d8:15:eb:63:65:c0:48:ef:
                    b4:ed:5d:bb:e2:7e:5a:e3:2f:e3:56:2a:71:5b:8e:
                    d7:ba:37:02:9e:bd:26:5a:d5:3e:64:77:45:0b:8e:
                    3a:a6:68:9a:f4:60:49:52:11:86:a2:c1:a5:64:20:
                    5b:ac:2a:1a:ab:65:79:87:b1:44:1b:a2:3e:60:c8:
                    61:21:9f:a5:66:75:df:b4:7f:53:31:28:59:99:c1:
                    b6:21:3c:aa:08:a2:4b:38:cd:65:3f:3c:53:8d:24:
                    77:d0:ed:d1:d3:18:e0:44:51:c2:b3:67:d4:cb:37:
                    72:15:9c:2c:90:d8:8c:80:24:00:74:11:ca:b8:72:
                    77:45:9f:a8:55:8f:57:a1:ce:5e:f5:ee:33:c7:a8:
                    ad:0b:a7:ad:9a:12:11:14:bc:cb:e0:eb:2e:e9:f2:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:60:90:A3:9B:66:F7:97:FB:3E:C7:1B:39:AC:7B:8D:4E:9B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/4fabea2e-d871-3336-9a78-159212062d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl

            X509v3 Authority Key Identifier:
                keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f939:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:70:9d:51:8c:87:7e:75:02:a4:11:a8:2e:21:29:6a:23:ad:
         5d:a5:83:a0:50:93:1a:74:43:7e:6a:14:e4:e0:39:77:9a:a3:
         04:2d:f1:81:e1:60:e5:3f:a4:8b:92:2c:f4:4b:d5:3e:81:5f:
         99:44:a8:b1:ef:a6:d0:ef:cc:8d:ba:8d:81:3d:8d:6d:a5:30:
         e6:cb:f7:be:23:ed:ef:10:6b:74:40:db:73:12:6b:c0:ab:ed:
         ba:9e:55:90:b8:54:33:a0:49:8d:9f:53:f3:47:49:0c:81:30:
         88:cd:13:eb:e3:19:77:b6:e3:dc:e2:4a:d6:70:a9:ca:81:29:
         60:94:99:db:ff:6d:29:c7:82:34:24:b5:2c:6f:4a:5c:be:0d:
         d5:36:17:fa:c6:2b:00:f8:4b:6f:45:dd:8f:a6:39:6d:c2:ec:
         98:46:87:bf:93:a8:92:94:25:33:5a:6c:9c:bc:5d:3a:3d:24:
         50:99:aa:4c:12:63:83:9f:90:6b:50:d5:b2:82:2a:48:00:1c:
         b7:90:d4:83:bb:be:68:7b:20:d0:ed:27:2e:24:b9:a2:9b:c5:
         aa:15:ed:dc:0b:a0:8e:bb:3c:21:92:60:81:d9:4b:db:c0:0a:
         e2:90:d4:21:cf:ab:c9:3f:52:c0:56:cf:2c:34:55:89:a6:a2:
         26:40:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:57:59 2026 by rpki-client