Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/cd994807-3869-30d9-8edd-6f0f438f5329.roa
File:                     cd994807-3869-30d9-8edd-6f0f438f5329.roa (raw, json)
Hash identifier:          52/QUwEKD3Idv4PSMFp8jiZqpIEdaBlno6zR1yR8N58=
Subject key identifier:   2A:58:5F:73:15:4D:2C:79:E8:84:30:C1:7D:EB:E2:BA:78:AA:14:99
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F4328584F14678BC83D13503A3E6D0300
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/cd994807-3869-30d9-8edd-6f0f438f5329.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     401085
IP address blocks:        2602:f802:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8b:c8:3d:13:50:3a:3e:6d:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=75e7ae4b-60ec-400f-ad60-e5f844c4b11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:33:b7:a9:9f:9f:fd:fb:46:46:87:d7:67:9a:
                    df:49:e1:70:dc:64:d3:6f:a0:67:74:42:db:46:ce:
                    c9:e1:f9:c0:6f:6a:8f:cc:50:1f:fb:34:cc:74:88:
                    91:3c:b2:4c:f3:78:a1:92:11:1a:e4:74:25:fe:42:
                    21:49:b1:ac:d3:63:e4:87:cd:1d:9b:34:37:3a:ab:
                    29:1b:3c:59:12:7c:66:86:b1:09:d5:25:e9:56:8b:
                    3a:9f:79:0a:20:40:c9:71:34:84:e3:c8:12:12:96:
                    a2:17:af:15:69:84:68:0c:2a:1f:96:18:cd:97:bc:
                    5a:2e:92:7d:d1:83:95:7e:cc:ec:94:47:a4:24:ac:
                    66:f1:ef:e3:8c:f4:e4:41:73:a0:59:83:60:3f:b3:
                    97:f2:76:39:f8:1d:39:57:af:99:20:e3:56:74:95:
                    a1:9e:29:a6:a1:00:85:92:5f:ad:31:7c:f0:ea:60:
                    a2:cc:d2:74:a2:fe:d5:ba:f1:c7:98:48:53:35:47:
                    39:df:d0:45:18:db:ac:01:77:96:2c:17:af:dc:93:
                    f4:4a:ab:f4:13:ce:ba:2b:14:a9:ed:15:12:33:40:
                    33:77:89:75:ea:e3:f8:cd:97:cd:fd:f6:ca:53:27:
                    42:1f:87:a0:6b:e0:9f:26:d1:f0:2c:4d:0b:dc:65:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:5F:73:15:4D:2C:79:E8:84:30:C1:7D:EB:E2:BA:78:AA:14:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/cd994807-3869-30d9-8edd-6f0f438f5329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f802:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f7:56:a8:2f:b1:c0:89:5a:5f:d9:36:6e:01:4a:ab:49:57:
         a6:ee:98:9c:d1:2c:65:62:01:bd:97:02:87:b3:b5:23:31:3b:
         4f:30:f1:09:c8:2c:85:c5:b2:3b:95:5b:9b:c5:4b:ba:d2:f3:
         32:97:88:40:de:01:50:d4:e6:15:e3:e2:bc:cc:e3:31:12:a5:
         a2:5a:21:2a:81:e6:6c:d9:04:4c:28:69:c3:ce:40:dc:56:b2:
         1a:f8:74:66:34:ef:42:c1:3a:cf:ed:1b:6f:17:bc:4c:61:56:
         f5:a1:75:86:10:07:d0:dd:a8:b0:bc:2d:90:0e:75:be:5c:b2:
         1c:2e:bf:a1:2f:e2:2b:dc:61:5d:fc:d8:74:9d:8c:40:17:f2:
         40:7d:e9:2b:2b:72:56:ef:85:11:26:ef:a7:c7:bd:71:66:43:
         8c:80:ca:60:63:fd:8c:0e:37:d9:ce:02:fd:b2:cd:72:4c:48:
         20:0c:12:7e:06:c0:82:5e:91:01:8c:82:bc:67:8d:9e:30:48:
         d9:93:93:7e:14:9e:ee:6a:59:2e:62:44:c6:5f:d7:b6:b4:19:
         cc:33:93:3b:d0:c0:0d:5e:9a:ae:35:17:3a:1f:d0:e0:72:c2:
         d2:c2:dd:9a:59:cc:07:f4:6b:88:1f:c5:c2:62:e8:55:df:6e:
         81:93:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:48:28 2026 by rpki-client