Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa
File:                     b8134718-5688-387c-a697-5002eba38eab.roa (raw, json)
Hash identifier:          WBz935FPy8oj0Zllijf46CRM6Qk4y5TWBRL2m4B2CZU=
Subject key identifier:   8D:84:82:9D:96:D8:1A:F2:C4:E1:5A:84:CA:52:4E:20:86:72:5C:B0
Certificate issuer:       /CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Certificate serial:       010D0C9F4328584F3FAD3E7453D4143A8D949040
Authority key identifier: 4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     32872
IP address blocks:        2602:fa69::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:3e:74:53:d4:14:3a:8d:94:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d30c475d-8944-47ed-ba1d-63ff537595ba
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=40b8d2f3-c1f4-4af7-815e-9a4d9c25c021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:45:bb:44:af:cb:dc:ca:15:a6:2e:93:01:
                    6b:0c:57:81:56:fa:87:95:0f:99:b0:84:52:05:de:
                    a9:bc:4a:9f:e3:7f:14:d4:4b:b4:9e:76:6d:61:0e:
                    31:fd:a9:93:4a:1e:fa:2b:6c:6e:b0:df:d1:02:39:
                    74:75:9c:ea:ae:39:75:57:28:dc:bc:f2:8c:fc:8d:
                    fc:93:6f:5d:dd:69:34:df:4b:b3:26:cd:64:e9:27:
                    55:ee:e0:0e:66:0b:cd:ee:16:0b:49:e8:c9:6e:55:
                    ed:e9:14:3d:5c:a5:7f:bb:63:5e:e2:aa:1a:99:55:
                    ac:2f:c4:99:ff:ea:c4:0d:69:b4:ee:7e:e1:9c:a2:
                    62:a6:a1:1f:8a:39:72:19:54:59:84:68:40:e0:f5:
                    07:19:1b:95:33:a8:f4:14:31:b1:8c:b7:91:87:c0:
                    70:00:66:4f:d7:bc:30:8f:7e:9a:c5:8b:af:28:f6:
                    a5:c7:8a:41:dc:53:1a:a4:8d:96:e4:39:36:70:0b:
                    d9:b0:5d:7b:ba:32:27:15:cc:bf:cf:5b:13:07:41:
                    6b:fa:83:ce:6d:f2:e2:3e:fd:e4:76:7a:ba:8a:c6:
                    dd:8c:86:11:09:ac:b5:96:63:35:de:55:df:57:26:
                    8d:e6:35:e8:92:a5:8c:93:1d:d2:f4:68:6c:6c:c5:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:82:9D:96:D8:1A:F2:C4:E1:5A:84:CA:52:4E:20:86:72:5C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl

            X509v3 Authority Key Identifier:
                keyid:4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa69::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:cb:0a:fd:70:97:15:c6:75:72:c5:3e:68:25:0d:36:93:
         12:f9:2b:1f:d2:9e:08:5a:7c:e0:a8:9d:14:71:03:9e:77:cc:
         b1:ee:0f:ba:d4:76:3c:87:98:91:82:3a:76:8f:8a:37:fc:af:
         44:31:bf:e6:3c:6a:fa:3d:62:16:d2:8b:94:d4:ca:43:75:4a:
         c2:da:bf:98:8a:c9:c0:85:83:3b:8a:f9:6c:35:1a:36:cd:02:
         73:b8:f6:e8:f8:17:ca:b7:1f:70:8e:2c:7c:6f:f6:be:b7:93:
         c3:26:13:3f:23:2a:2c:17:66:3d:6a:8c:2a:f0:91:8c:8b:e3:
         0e:ce:ac:25:20:ce:4d:bd:40:d7:41:42:fd:e7:92:80:54:9c:
         66:c3:20:57:f7:fc:d6:7c:82:3b:0c:7e:9f:7e:c9:f2:3e:e4:
         5b:d6:5f:78:e4:1d:0d:ca:2b:23:8e:12:60:da:7d:05:48:39:
         f2:d6:c0:e2:26:3a:f7:fb:89:16:5c:b3:ed:3d:84:25:de:22:
         fa:31:9f:b3:bb:c6:fa:a6:fc:52:82:08:2c:c0:70:6e:52:8f:
         2e:40:3d:00:c2:3d:f0:56:d0:2e:00:d5:a4:4c:3f:c0:17:3e:
         99:fc:5b:81:61:88:dd:d3:b4:0d:46:98:3f:f6:a7:01:b3:56:
         1b:cb:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:23:39 2026 by rpki-client