Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07/9a289497-8d18-36f3-853a-3e8b63e6e037.roa
File:                     9a289497-8d18-36f3-853a-3e8b63e6e037.roa (raw, json)
Hash identifier:          ST0tNCJ4ijOi8EG7W/ODVOEzU6/lRHggZMbq1t/uhSk=
Subject key identifier:   6B:7F:8B:21:BB:34:79:C0:C8:5B:62:84:B5:9E:17:B2:AD:AA:F4:FA
Certificate issuer:       /CN=3998cbbc-351c-4180-bc36-ad66f0c76b07
Certificate serial:       010D0C9F4328584F0823A4CC40D14E9C5E988F40
Authority key identifier: 8E:3E:A1:7E:31:FC:C0:18:20:0C:7E:DB:38:DE:7B:D2:8B:EE:C5:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07/9a289497-8d18-36f3-853a-3e8b63e6e037.roa
Signing time:             Tue 01 Sep 2026 15:33:44 +0000
ROA not before:           Tue 01 Sep 2026 15:33:44 +0000
ROA not after:            Mon 30 Nov 2026 16:33:44 +0000
asID:                     399187
IP address blocks:        2602:f305::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07/3998cbbc-351c-4180-bc36-ad66f0c76b07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07/3998cbbc-351c-4180-bc36-ad66f0c76b07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:08:23:a4:cc:40:d1:4e:9c:5e:98:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3998cbbc-351c-4180-bc36-ad66f0c76b07
        Validity
            Not Before: Sep  1 15:33:44 2026 GMT
            Not After : Nov 30 16:33:44 2026 GMT
        Subject: CN=4bb0696c-bc7f-4a52-adec-fbbcbad4ba06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:f0:fd:5b:12:fb:0c:30:ad:5b:eb:62:75:
                    17:fa:70:84:01:7b:2b:a6:14:d1:c3:d1:af:28:59:
                    ea:53:ff:6c:e7:4f:e9:19:98:b5:7b:8b:e6:5c:09:
                    9d:92:54:ae:08:8d:86:13:66:2f:92:c3:64:e3:42:
                    28:6f:2b:13:b0:3c:3a:fe:24:14:bb:b8:ab:b9:c2:
                    ff:a5:16:ab:39:a5:55:26:1e:34:ef:56:79:29:47:
                    15:ed:84:e3:52:f0:82:ca:50:8d:87:49:d9:45:fd:
                    49:19:85:5a:05:b6:cd:a0:41:f3:e0:c8:67:36:a1:
                    85:ed:38:cc:e4:16:af:6c:e9:fd:9c:c9:16:c8:b5:
                    e2:38:dc:cc:ae:b5:8d:a1:3f:1a:fc:ca:48:0d:77:
                    b0:6c:2d:38:7f:ce:19:e3:73:e3:ad:17:a7:4f:6e:
                    17:1e:84:88:94:98:39:63:3c:a8:07:73:03:96:75:
                    b3:e1:7c:91:5e:3b:4a:c9:3d:ac:be:a7:06:d9:3c:
                    b6:59:3d:6d:b2:d0:14:21:8b:c9:b7:9d:29:f3:c5:
                    6e:d3:7b:b4:f7:26:33:b2:59:3f:24:55:91:ca:0a:
                    53:1e:4e:b2:88:5b:55:5e:c7:c6:8c:f5:61:9e:99:
                    f9:1f:86:a7:94:3c:86:f8:cf:ff:2f:3a:d3:67:0a:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:8B:21:BB:34:79:C0:C8:5B:62:84:B5:9E:17:B2:AD:AA:F4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07/9a289497-8d18-36f3-853a-3e8b63e6e037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07/3998cbbc-351c-4180-bc36-ad66f0c76b07.crl

            X509v3 Authority Key Identifier:
                keyid:8E:3E:A1:7E:31:FC:C0:18:20:0C:7E:DB:38:DE:7B:D2:8B:EE:C5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3998cbbc-351c-4180-bc36-ad66f0c76b07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f305::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:12:36:8a:1c:2f:0d:a7:f6:18:b7:73:55:d8:25:92:56:
         33:ec:ff:ac:56:3e:ec:58:42:5a:6c:a9:2b:48:d4:26:b4:6f:
         8f:5d:62:5e:83:71:ff:0a:5f:5b:0e:f7:d9:47:ac:e4:e7:ce:
         8d:43:60:62:0b:83:62:68:d5:4e:a7:ec:85:c5:6e:17:75:c5:
         86:12:bd:47:e4:c2:27:21:72:e4:c2:ac:04:5f:1a:2d:f5:35:
         cd:d5:6b:31:ef:5c:69:62:0f:b1:df:a9:7a:f3:1e:0e:74:82:
         a6:8b:23:88:e3:75:00:29:69:89:1e:1d:03:ef:bf:01:e3:d7:
         35:2a:b3:03:7d:c9:72:22:ef:b2:e0:7b:e9:01:24:0b:e9:2e:
         c4:0e:65:5f:6b:2e:f8:6b:c2:e7:93:6f:50:a9:f6:5b:1d:11:
         ab:b6:1e:ef:4d:3e:e6:66:5b:f9:e1:4e:b5:35:ab:4f:bc:23:
         d7:78:48:52:7e:28:61:82:04:dd:ce:28:75:db:fa:6f:f5:aa:
         3d:86:ce:95:fe:c7:7a:4c:ce:37:15:de:15:b9:88:d9:03:0a:
         57:81:68:e2:c3:41:37:53:de:ef:5a:03:0c:d9:23:a3:23:b2:
         c2:6f:a1:28:99:e1:bf:f2:db:fa:7e:43:03:65:16:af:7c:64:
         0b:59:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:34:23 2026 by rpki-client