Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
File:                     075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa (raw, json)
Hash identifier:          GJ45cbS87EbynoQVhCiB/o0zKXtm87FQce2DUILYlwM=
Subject key identifier:   C2:1B:AD:5D:48:DE:0A:AE:FB:8E:F0:46:9B:0E:B5:2F:42:6B:63:22
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F4328584F4F081622EBAB969EC2189800
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     399542
IP address blocks:        2602:f8ef:fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:16:22:eb:ab:96:9e:c2:18:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=ea29071e-5013-425e-8a9f-9c0b67164ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:07:9d:70:4b:b2:c8:49:9b:d8:8e:63:30:
                    d5:b0:c2:ef:a0:66:92:5e:04:12:f5:79:b6:f1:52:
                    0f:b1:b4:74:34:67:57:f9:4f:ee:c0:a0:d6:80:ee:
                    60:2c:ee:1d:a4:c0:2c:3a:32:ff:9a:31:e5:e7:6b:
                    6c:a6:9a:91:aa:3c:a9:e4:a5:8a:54:12:62:f8:97:
                    25:82:44:d9:47:97:be:ea:20:3c:b5:5f:15:81:7e:
                    16:9d:a3:5f:21:9c:65:a2:b5:c7:1d:2b:7f:25:a6:
                    b5:4d:ef:72:b8:af:5f:37:ed:f7:bd:fc:13:1c:5f:
                    1c:7d:b6:0b:74:e9:5d:bf:d9:a9:74:e6:21:39:b9:
                    3b:d3:09:6c:61:85:7a:c4:00:05:51:4a:5c:2a:86:
                    aa:3a:23:16:ea:52:c1:d9:f8:81:04:d5:0c:51:26:
                    48:39:5b:d1:6e:f3:30:ac:90:6b:0e:05:fe:38:73:
                    21:e4:e4:97:72:61:55:a4:60:0b:d2:38:67:ae:4c:
                    1f:78:2f:a0:5e:d2:cd:ba:e5:48:85:b0:22:ea:c5:
                    7a:1b:79:77:54:15:d6:ce:04:97:bb:ac:8f:c2:f5:
                    c5:bf:c7:57:9c:8d:d7:2f:77:03:46:ae:4a:9c:ea:
                    e1:d4:8a:b7:8d:f7:41:c4:3f:32:0f:3e:fc:64:82:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:AD:5D:48:DE:0A:AE:FB:8E:F0:46:9B:0E:B5:2F:42:6B:63:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef:fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:d0:bd:69:cf:ae:84:54:14:84:ec:f1:99:cb:bb:cc:45:
         ca:c8:20:02:8a:c8:c7:7c:5c:6d:b2:d2:4b:a5:67:54:24:88:
         e6:4b:38:37:bb:b9:f6:88:22:10:0e:56:19:03:e2:82:f6:a9:
         07:63:69:44:20:c9:6b:60:a2:43:86:5e:20:95:b6:e1:c6:7c:
         b4:75:3b:f8:68:3a:af:8c:bf:9d:e3:ce:6a:e0:a2:4d:ad:26:
         07:12:b1:6e:23:db:67:da:de:c9:0f:a4:3d:b2:84:6d:fd:0e:
         06:4a:d2:34:9c:f8:5a:8b:dc:e6:10:77:be:f0:4c:73:0d:5c:
         87:8f:3a:05:85:f4:ee:87:a3:41:d9:27:cc:71:c0:2d:f5:ec:
         99:c7:77:26:12:16:63:ac:3a:6c:ff:80:e7:ca:42:f2:98:d6:
         dd:66:34:49:e3:35:45:43:a4:f5:c1:d9:1c:13:12:50:34:da:
         ef:aa:89:6a:f4:09:89:d1:80:12:f1:cd:72:5e:90:26:00:07:
         6b:0c:46:b9:37:83:94:48:3c:bf:cc:2d:bc:93:c9:75:33:98:
         56:87:64:37:00:97:c9:98:19:18:bf:ca:77:4b:f4:c7:4c:c6:
         44:1c:aa:41:aa:30:84:75:a2:97:d7:5c:62:f8:d8:53:7c:0b:
         b1:95:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:45:38 2026 by rpki-client