Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/49142997-3803-3a83-97cc-18506cb9ec80.roa
File:                     49142997-3803-3a83-97cc-18506cb9ec80.roa (raw, json)
Hash identifier:          gHM/47snRxn8IA8hRbZIhwiEFfuc73+18FOihDIkoh0=
Subject key identifier:   FB:29:AD:2F:E4:62:4F:A7:F7:30:B8:7C:C9:06:73:FE:23:9E:C6:11
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584F497392CB17D0F0E69EABDF80
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/49142997-3803-3a83-97cc-18506cb9ec80.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63018
IP address blocks:        2602:f7f8:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:92:cb:17:d0:f0:e6:9e:ab:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=37ef0804-329e-4cdb-86f1-fbb97a79efac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:46:48:c9:ec:67:d2:72:d4:1f:fd:a4:21:
                    d2:66:65:1f:80:2d:38:26:b1:5a:4d:fd:f0:bc:ac:
                    57:de:cf:42:64:06:c5:33:71:81:f8:65:3e:06:6f:
                    b5:e1:1f:66:32:11:79:a5:d0:dc:b0:6f:a6:98:5f:
                    55:cd:55:87:f3:88:65:12:5a:3f:60:ff:e7:41:81:
                    20:1f:05:25:d0:d3:e0:f3:8d:b5:39:09:84:57:46:
                    98:d2:1d:3d:ce:84:e1:85:e1:5c:68:91:ea:1b:f3:
                    67:b6:4a:6e:cc:54:93:68:63:85:f3:af:e2:f4:15:
                    38:33:2c:dc:85:6c:a1:45:a4:bc:1d:45:9c:f6:9e:
                    bd:78:08:6d:20:d0:a7:ea:f7:64:e4:4f:a0:94:c1:
                    e4:ac:33:4b:df:05:72:fd:db:58:3a:2a:fa:56:c3:
                    a1:04:af:fd:e7:b2:f5:ad:30:23:1c:78:20:12:d6:
                    fa:35:6a:64:39:60:f8:f7:7a:9c:b3:7e:1c:6c:e9:
                    40:87:d4:e6:5d:f9:34:f1:06:81:21:8e:46:2c:63:
                    93:ba:76:19:9f:d3:13:5b:d9:d3:a5:10:d0:1b:0f:
                    5c:b8:26:25:4b:00:c1:6f:0e:62:a0:83:1f:f1:82:
                    ee:bd:63:61:f6:37:d1:c7:43:42:23:b9:21:37:58:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:29:AD:2F:E4:62:4F:A7:F7:30:B8:7C:C9:06:73:FE:23:9E:C6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/49142997-3803-3a83-97cc-18506cb9ec80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:3b:0e:5b:00:0f:ba:4c:ec:d2:4a:3f:e3:d1:9f:e7:d7:
         51:02:5a:d6:68:5d:74:9f:16:23:6f:8f:ff:7f:ee:25:44:d0:
         fc:e3:9d:18:52:5f:87:1a:c1:8f:26:14:80:67:5f:ed:3e:24:
         46:05:a6:33:bc:5b:ec:14:a3:8c:ac:cc:da:14:8f:1e:b7:f2:
         90:d6:96:44:b3:cb:ae:2f:9e:09:8c:a6:32:3f:7a:78:95:75:
         10:a4:b4:91:d6:c4:e2:32:c7:a6:bd:85:38:00:11:17:99:8b:
         61:a8:ef:12:e2:c0:35:54:d7:67:c5:f3:7d:72:87:fc:02:1e:
         40:6e:8d:d6:41:d9:9e:fd:8c:87:65:ac:2f:3b:f7:87:dc:50:
         1a:6e:a5:e5:00:1f:fb:57:ce:e5:5f:c5:b4:50:28:e2:87:df:
         e3:47:4f:57:b1:31:13:0f:7f:98:de:83:93:dd:b1:15:58:d2:
         0c:bf:00:67:b2:f5:9c:65:d1:04:55:b7:ce:94:e2:16:dc:fc:
         71:77:24:c7:e7:c8:88:d7:bd:a0:f7:02:07:ec:11:3a:d8:47:
         9a:f7:48:6d:86:db:b7:45:e1:04:bf:eb:67:1e:65:a4:cc:13:
         e6:3b:2f:c6:34:e4:4d:46:87:eb:40:1b:ec:46:cc:c8:fc:83:
         63:30:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:03:47 2026 by rpki-client