Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
File:                     3d7daaee-632b-306e-bcb0-783ea2fb4061.roa (raw, json)
Hash identifier:          wy8F+WJQgjzNOw38epNI9ImIp/latugshgup6Z84nP4=
Subject key identifier:   45:48:F7:5B:3E:6A:01:66:8E:7C:B4:88:51:ED:73:55:73:17:59:37
Certificate issuer:       /CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Certificate serial:       010D0C9F4328584F49762C82AEEF7CC52D0E9100
Authority key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23368
IP address blocks:        2602:fa60::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:2c:82:ae:ef:7c:c5:2d:0e:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3903cd0f-7ff5-4b8c-a02f-de4a07e0c737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:44:7f:0e:ef:6b:ee:b1:f8:01:49:e8:9a:
                    cc:46:df:57:a8:22:32:ff:40:a2:7e:94:43:47:a5:
                    93:02:1c:b7:4f:e7:d1:d1:3b:9a:32:74:1b:a3:c4:
                    e8:7a:aa:1b:4c:31:6f:60:19:7c:42:53:6c:fc:b0:
                    ac:3d:56:58:e2:c5:97:c3:6d:e5:de:ce:6c:c2:b6:
                    b4:3d:bd:02:d9:0f:ce:12:87:3c:fe:c9:20:96:74:
                    a7:4a:c7:21:b5:fc:25:94:e5:d9:4c:46:4e:ab:47:
                    c9:69:f2:16:b3:4e:64:c6:c3:b9:88:ac:ca:ff:64:
                    99:65:2e:f3:ca:47:c5:70:6d:8c:23:72:c7:34:77:
                    94:c9:32:68:d1:c4:b3:d3:8e:1b:b4:b6:77:aa:65:
                    a2:c5:19:23:e6:27:fc:7f:6c:2b:77:56:ba:dd:54:
                    46:74:dd:85:d8:92:f9:8a:ca:da:6d:ed:2a:95:e4:
                    97:07:c0:6b:cc:ad:f8:6d:b0:c6:2a:4d:40:46:ea:
                    fa:46:09:d2:c5:e6:e2:7b:91:89:d9:8c:e0:b5:7e:
                    75:75:5e:8c:6a:0c:94:38:af:ce:79:95:cf:f0:9f:
                    98:55:fb:78:f8:41:01:c0:97:57:20:46:77:f0:75:
                    60:3a:be:b7:be:9c:9a:56:86:61:27:65:50:97:ed:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:F7:5B:3E:6A:01:66:8E:7C:B4:88:51:ED:73:55:73:17:59:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl

            X509v3 Authority Key Identifier:
                keyid:10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa60::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:c3:e0:e9:2a:84:a9:d0:ef:7a:6a:e8:15:5f:90:67:7a:
         ef:e1:52:b2:4e:ca:55:c0:df:82:ca:c8:35:73:da:d1:f5:ab:
         6b:cb:7f:50:0a:36:62:66:09:60:73:11:8f:28:23:5c:ff:49:
         d8:70:bc:a6:e9:c9:10:ce:88:7c:13:76:ff:b2:6a:dd:18:6d:
         20:09:a5:f1:e3:55:d0:08:75:53:44:0d:6b:fe:8a:55:0b:2d:
         06:e0:8d:5f:66:de:b0:ba:b8:28:51:5d:5e:cf:88:ac:a3:cb:
         4f:bc:de:7e:02:ba:8d:b2:11:97:0b:84:8f:44:9b:ff:a7:41:
         2f:cb:83:5e:a4:a6:e2:f9:07:1a:9c:c7:80:46:70:51:eb:7e:
         98:20:ea:24:91:b3:7b:dd:70:c2:dd:23:ef:c1:c4:d8:76:84:
         6b:ee:6b:22:bc:e2:a7:55:96:b8:42:b6:c7:d5:a5:c5:c5:26:
         28:ae:44:83:fe:5a:05:62:bd:16:97:41:2b:d9:16:d0:25:cc:
         b4:d2:d6:29:8c:98:db:51:3f:72:23:76:cc:ff:29:29:4f:20:
         e8:4a:a7:f7:51:e7:d8:c4:88:d5:66:61:81:e2:74:f3:cf:0a:
         86:5b:e8:cc:01:88:da:f1:2f:85:0e:68:0b:89:9e:15:cd:6b:
         5d:14:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:50:25 2026 by rpki-client