Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/87ea4941-8eef-3fe7-8704-2fb525e0d5fd.roa
File:                     87ea4941-8eef-3fe7-8704-2fb525e0d5fd.roa (raw, json)
Hash identifier:          WbYf69aMphgpSV4irmI914GdyzR1uMVBo/BPYhG1ZPc=
Subject key identifier:   0F:12:5E:61:AE:9F:0B:2A:7A:A0:F7:B2:0D:5D:1A:7B:EC:85:45:8E
Certificate issuer:       /CN=371eb60e-706e-49df-ab2d-603b6a056c68
Certificate serial:       010D0C9F4328584F3E95538E5A1D075E9887A580
Authority key identifier: 89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/87ea4941-8eef-3fe7-8704-2fb525e0d5fd.roa
Signing time:             Mon 21 Sep 2026 03:36:26 +0000
ROA not before:           Mon 21 Sep 2026 03:36:26 +0000
ROA not after:            Sun 20 Dec 2026 04:36:26 +0000
asID:                     4213
IP address blocks:        2602:f983:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:95:53:8e:5a:1d:07:5e:98:87:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371eb60e-706e-49df-ab2d-603b6a056c68
        Validity
            Not Before: Sep 21 03:36:26 2026 GMT
            Not After : Dec 20 04:36:26 2026 GMT
        Subject: CN=71ea7161-e421-45f2-a2a5-9081685b499d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:56:96:3b:34:d1:81:0b:97:c3:1e:5d:eb:
                    3a:96:0a:ea:23:42:91:0f:9f:3a:45:3d:95:d7:2c:
                    0a:1b:00:24:63:18:96:2c:f4:2d:ac:bd:7f:9a:2f:
                    99:96:87:87:f3:5f:8c:5d:3c:94:50:46:f6:6f:7a:
                    61:8e:bb:87:a9:3c:ce:bd:17:a5:f5:43:4f:d1:ff:
                    30:3a:1b:cc:5e:78:71:b7:15:36:a8:8a:d4:32:7b:
                    26:ab:94:14:f4:1e:19:e8:bf:d2:09:cd:ea:b7:10:
                    6c:1d:15:d2:d1:a3:9e:53:29:73:8a:70:70:ee:08:
                    50:7c:71:2b:7e:cc:f5:54:2d:8a:e2:fe:58:3a:a5:
                    5f:c6:e3:c2:90:b4:c6:d3:da:ce:74:cc:ea:eb:a2:
                    9c:8b:a2:2c:98:80:3a:60:4a:7f:6c:fb:6b:18:58:
                    61:22:39:71:12:bb:60:c9:a5:16:79:d0:e4:0e:d7:
                    10:89:95:4c:36:fd:97:3a:e3:3e:ea:39:e9:56:3c:
                    29:43:fc:e7:1f:6e:e8:a1:18:1b:36:c7:3c:af:f9:
                    fb:1e:08:16:cf:33:38:f3:eb:34:ee:24:e0:b7:98:
                    9a:c4:c2:2f:58:fd:8b:6d:ad:c8:86:6d:5f:69:0a:
                    3d:17:e1:4c:56:7f:83:3b:11:d5:1a:87:59:57:50:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:5E:61:AE:9F:0B:2A:7A:A0:F7:B2:0D:5D:1A:7B:EC:85:45:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/87ea4941-8eef-3fe7-8704-2fb525e0d5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl

            X509v3 Authority Key Identifier:
                keyid:89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f983:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:80:3d:0f:7c:54:a0:23:1f:12:38:69:9f:a8:06:6c:80:
         d6:40:ef:6a:a2:5a:9e:86:3d:9b:69:37:12:d0:33:e3:dc:42:
         cf:b9:36:a4:3b:d8:79:74:e7:da:e1:95:dc:e3:50:d9:1a:cf:
         b2:26:90:7f:5c:26:01:32:73:96:a3:7a:5f:44:88:e3:0f:68:
         52:c2:3c:53:b2:67:32:c8:ca:43:9e:60:7c:6e:09:57:c0:b5:
         b9:b8:6f:7f:8b:d7:6d:db:2c:31:87:42:76:39:1b:fa:36:92:
         9f:21:b0:26:15:52:57:2c:b7:04:4b:8c:e2:39:f4:cd:85:ad:
         c2:bc:ea:fd:1c:a2:ae:f9:8f:6a:cc:e9:bd:f1:81:36:c5:59:
         01:f1:d7:89:0d:8e:93:a5:10:b7:8a:e5:d7:64:9b:10:eb:93:
         20:1c:18:0e:02:08:69:ae:76:a0:42:8d:38:54:84:82:ab:66:
         60:9c:c6:3f:21:05:48:b4:06:66:b2:a9:8c:93:3a:6f:b2:68:
         cb:ae:3e:f2:2d:32:fa:b1:16:a8:35:ec:43:ce:ac:d3:ed:b3:
         6a:61:1c:22:3e:f2:57:64:21:eb:5f:d4:f0:8c:96:41:4d:ce:
         0d:52:94:c2:af:3c:40:dd:b2:2e:cb:b4:22:0a:08:5f:06:cc:
         1a:67:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:04:32 2026 by rpki-client