Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/85983c61-c312-3659-88af-8191bd12c8f0.roa
File:                     85983c61-c312-3659-88af-8191bd12c8f0.roa (raw, json)
Hash identifier:          nL/WHNJOmuCJjOLRfP7aXhNqnuXTTtlg65eQ7nmsEOY=
Subject key identifier:   B4:1D:5C:4E:1C:21:36:32:37:76:19:BC:CA:22:45:5A:BD:56:C3:AA
Certificate issuer:       /CN=371eb60e-706e-49df-ab2d-603b6a056c68
Certificate serial:       010D0C9F4328584F3E961DC90274B665EED35D00
Authority key identifier: 89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/85983c61-c312-3659-88af-8191bd12c8f0.roa
Signing time:             Mon 21 Sep 2026 03:38:02 +0000
ROA not before:           Mon 21 Sep 2026 03:38:02 +0000
ROA not after:            Sun 20 Dec 2026 04:38:02 +0000
asID:                     23005
IP address blocks:        2602:f983:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:96:1d:c9:02:74:b6:65:ee:d3:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371eb60e-706e-49df-ab2d-603b6a056c68
        Validity
            Not Before: Sep 21 03:38:02 2026 GMT
            Not After : Dec 20 04:38:02 2026 GMT
        Subject: CN=7aa85f41-1df1-4fcf-a643-fa63e32b4e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:69:e4:d3:8e:ea:ec:31:1e:98:51:16:ab:
                    79:b1:f7:c9:1f:96:1c:fe:31:5a:72:24:f4:ff:30:
                    6c:15:47:55:bc:01:80:88:4e:98:51:0a:42:a9:59:
                    c2:72:72:da:5a:37:e8:95:10:0f:2a:ef:1b:43:85:
                    04:11:44:96:52:f9:ce:bb:78:38:8a:73:3c:fd:92:
                    a8:d3:63:85:49:f9:a5:e5:39:da:e8:ea:e2:12:6b:
                    40:34:02:1d:f2:10:3e:a4:10:10:94:62:5e:d3:76:
                    5d:a3:e6:1c:e8:0d:05:8f:e0:86:48:9d:36:4e:ad:
                    92:5c:ab:5f:08:48:d7:cb:91:de:cf:49:c1:d3:bf:
                    7d:90:c1:09:cf:7e:03:e5:2e:97:39:03:c6:7e:84:
                    9d:3b:7e:1d:49:f1:ad:07:19:60:8e:30:5f:81:62:
                    60:b1:a9:d4:3c:6f:21:6d:e8:af:46:9a:80:70:89:
                    15:d5:6a:4c:26:cf:2f:ca:da:73:ce:a2:df:89:cd:
                    be:e2:d7:3d:f8:28:55:37:c0:21:a6:5c:18:14:69:
                    93:f6:12:50:20:49:09:4a:af:85:0f:95:dd:f5:91:
                    76:a1:11:3f:b6:94:1b:6c:af:66:c6:0f:85:40:53:
                    eb:d6:66:4f:58:58:f8:fb:0e:91:c8:6c:10:c0:77:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1D:5C:4E:1C:21:36:32:37:76:19:BC:CA:22:45:5A:BD:56:C3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/85983c61-c312-3659-88af-8191bd12c8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl

            X509v3 Authority Key Identifier:
                keyid:89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f983:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:55:f3:81:d4:c3:de:47:4e:b2:37:41:aa:5a:a5:5b:3c:
         d3:2c:11:65:03:c2:65:ac:fd:a3:e5:b5:58:24:99:bb:09:f0:
         09:14:c1:0a:2d:9c:a5:dd:ca:0a:67:fd:a6:c3:86:b0:d7:58:
         18:c8:ac:51:37:d8:c0:cf:2e:cb:0b:14:bb:cf:2b:81:73:4e:
         2f:e4:d9:6b:e6:3f:0e:08:fc:10:a7:ba:16:b5:1b:c5:cb:90:
         3c:2b:7f:db:56:90:98:b7:3e:2e:a1:28:ea:37:e4:3f:dd:b8:
         7e:d5:21:9d:cb:34:c5:b5:d5:03:e1:d6:57:91:2e:bc:5a:d4:
         86:d1:a3:1d:d1:89:4f:7f:cc:f4:7c:d1:8a:a1:b3:ea:66:61:
         75:b3:4a:23:5c:75:e6:37:20:e0:20:17:86:91:07:24:3f:67:
         c8:7a:1d:ed:12:24:07:72:b8:6a:e7:4b:10:11:34:b8:87:9a:
         0a:4a:61:a1:ea:cf:f8:e6:df:f2:01:06:e7:e2:56:ec:96:c4:
         04:ea:c2:76:9c:92:f4:cf:74:08:55:7c:5f:b9:33:b3:34:0c:
         e3:96:e9:8a:46:fc:e7:df:40:ba:ed:f9:a4:a0:eb:6a:0a:73:
         b5:62:75:59:ab:3b:0f:d4:c7:49:a2:c0:32:4c:2f:48:d9:5a:
         be:8d:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:16 2026 by rpki-client