Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2a02a96f-732c-347d-b56b-b374e0d12acc.roa
File:                     2a02a96f-732c-347d-b56b-b374e0d12acc.roa (raw, json)
Hash identifier:          eLNqkV+mJWTZrwKTFz3wTL+wGlGSTV2xzU+6/x3EbCs=
Subject key identifier:   22:A5:A7:D1:9C:8D:4D:C0:CC:83:58:DF:4E:13:7B:9E:1B:96:57:F0
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584F49736093BBAD68CA748F7700
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2a02a96f-732c-347d-b56b-b374e0d12acc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19165
IP address blocks:        2604:5500:4000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:60:93:bb:ad:68:ca:74:8f:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=57e7f13f-04c7-424f-a274-0ac8c529ab89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:19:84:f0:35:5e:9f:d8:90:6b:9c:53:c2:83:
                    03:5e:45:14:76:6d:f8:ba:e6:56:72:93:b6:e2:e5:
                    77:6f:57:5c:09:81:c3:38:ac:0c:93:72:79:7a:9a:
                    21:fe:c4:5a:7e:f3:72:7a:83:67:b4:47:ce:4b:26:
                    dc:7b:76:d0:72:c0:9b:18:24:95:70:30:e0:04:71:
                    8a:3d:85:d3:a7:9d:80:6f:26:9f:a5:9b:cb:0d:92:
                    1e:f2:36:f2:c4:45:cd:1e:af:e4:2b:a6:66:fd:73:
                    9c:22:dc:f0:36:11:d8:2d:37:b9:44:25:07:3d:2e:
                    fd:c1:3c:8a:43:92:01:b5:74:3b:6c:39:76:72:5f:
                    b1:d8:db:d3:5d:fe:6e:c2:72:00:5b:7b:c6:30:29:
                    00:d6:9c:2e:36:4f:18:c1:d9:54:82:4d:76:53:a1:
                    70:01:9f:6b:2f:b7:b4:9b:86:c4:34:9f:97:c3:ff:
                    32:83:ca:f4:c1:11:01:92:c3:0d:63:b6:79:65:1c:
                    a3:27:2d:1e:05:c7:4b:ea:d3:06:4a:37:aa:12:b2:
                    73:1d:7f:e6:4e:6c:ca:ca:94:e4:99:e8:d5:56:98:
                    54:70:d1:4e:33:08:a6:e4:0e:fc:61:b7:bd:e9:86:
                    5e:f6:43:ce:6e:e8:4b:34:db:b5:40:d7:17:7b:be:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:A7:D1:9C:8D:4D:C0:CC:83:58:DF:4E:13:7B:9E:1B:96:57:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/2a02a96f-732c-347d-b56b-b374e0d12acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5a:31:83:93:1c:f5:e9:a1:a4:06:29:ab:55:42:18:2a:53:
         e9:e5:50:c5:b2:13:fe:4a:9b:d4:d6:fd:51:61:9b:ce:19:8c:
         41:66:95:f2:7a:1b:90:79:6c:87:ad:71:a2:2f:d1:e8:18:08:
         39:e0:96:43:1e:4f:a7:4c:46:37:b4:f7:73:aa:1a:c3:b8:df:
         89:92:f7:e0:7a:da:7f:0c:b6:96:9e:e1:eb:b1:e9:40:6d:49:
         8f:54:30:58:3f:22:1f:36:4c:9d:80:c6:aa:5e:42:5d:53:ae:
         ad:82:73:ff:87:09:b0:75:e0:2b:14:d1:3b:a8:3b:5a:42:02:
         82:d0:39:0f:99:4d:2d:20:10:54:ae:8f:f5:74:6f:05:50:3d:
         84:6d:22:3a:90:89:be:cb:c4:fa:61:75:e5:c6:87:05:9e:24:
         b9:f4:71:36:b9:51:47:e2:fd:78:0e:49:5a:7f:c3:e3:6c:a5:
         e1:3b:39:54:e9:7f:a1:d8:28:83:5e:09:65:72:55:6d:ce:c3:
         fb:8e:33:4b:f7:0b:96:d3:02:5d:15:22:0b:35:ea:dd:70:9d:
         bb:44:be:d6:6a:a8:ef:54:8c:bd:63:10:47:9d:74:a7:b0:71:
         c7:41:e9:fd:be:1b:f7:14:f4:fc:3f:8d:f5:6b:89:d0:54:84:
         02:22:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:42:14 2026 by rpki-client