Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/acdafd29-c353-3bb0-95f9-2396f870d560.roa
File:                     acdafd29-c353-3bb0-95f9-2396f870d560.roa (raw, json)
Hash identifier:          z+n+V/BMxEJ2or2qfEKJhNrhMTvcZOVSk7Z7k+2NyX4=
Subject key identifier:   57:76:84:32:1B:D0:FA:80:F8:DA:8F:39:70:68:54:51:DF:C0:3E:88
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F4973CFE566D3ADE497B63940
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/acdafd29-c353-3bb0-95f9-2396f870d560.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        2602:ffe4:c07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:cf:e5:66:d3:ad:e4:97:b6:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a4121219-b7b9-4172-a460-bf026638f88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:c2:8a:85:39:5f:f3:f9:3c:1b:9c:81:3e:
                    95:fd:bc:2d:60:d8:8d:2a:45:7c:a8:7c:7c:5b:f1:
                    46:95:22:6b:a6:b1:76:6a:fb:d9:4a:bd:d8:84:58:
                    2a:82:72:5c:ab:bd:5a:46:8b:e2:01:00:49:55:e5:
                    76:a3:4b:7e:1f:46:51:a2:50:df:26:f7:07:e7:57:
                    a8:7a:60:a5:58:96:32:12:8f:b6:16:7c:cf:c1:83:
                    56:2c:92:f7:d2:b5:0d:74:70:94:45:5d:0e:3b:8d:
                    90:c4:0c:90:31:25:1a:1c:c1:88:5a:88:c0:30:6c:
                    81:cd:89:b9:17:ef:4e:89:72:9c:f4:4d:c2:08:11:
                    26:4f:67:3d:2d:43:38:59:4c:de:6d:38:bc:34:a4:
                    8c:fd:38:34:30:f3:ef:1f:9a:51:3b:68:2f:73:0e:
                    b6:82:73:44:e2:0e:47:89:bb:26:c8:cf:7b:d2:2f:
                    aa:b6:9c:f0:5c:03:46:d3:a9:bf:3e:5f:09:34:ce:
                    64:47:f9:c2:a0:c7:78:d3:cd:1e:00:79:bc:1a:a2:
                    56:42:77:83:17:c4:9b:2e:ed:00:4f:45:73:6e:e4:
                    10:a1:49:4d:25:86:eb:e4:3a:39:f1:57:29:14:7c:
                    66:cb:e9:81:0b:d8:6f:eb:d8:ce:1c:a7:ec:4d:68:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:76:84:32:1B:D0:FA:80:F8:DA:8F:39:70:68:54:51:DF:C0:3E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/acdafd29-c353-3bb0-95f9-2396f870d560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:63:5a:b0:7a:55:e4:4a:bf:9e:62:03:98:c8:87:5f:a9:24:
         75:0a:27:2a:25:ad:7b:e1:b9:2d:61:89:ad:2a:b6:c6:d3:5f:
         c9:23:60:a5:28:32:d4:69:2e:c6:69:79:eb:59:05:0f:88:fa:
         f4:7a:fc:e1:6f:85:41:b1:e7:bf:b3:34:0d:17:44:73:4c:b7:
         d2:e7:86:fd:f8:08:c7:23:35:b3:a1:98:48:83:02:49:e4:92:
         6a:74:e9:a6:75:91:e1:9a:49:cd:4d:37:f3:74:af:69:83:4b:
         bf:dc:ba:08:48:59:b0:8c:da:35:88:a3:9d:14:36:24:fe:5b:
         3a:20:c6:35:c8:e6:4c:75:54:0a:90:66:61:63:00:81:27:00:
         43:02:c5:d2:92:e1:be:be:2e:c1:ba:d3:77:4f:5c:7e:bc:36:
         cb:dc:32:a2:ab:c0:28:32:98:d2:cd:f6:b2:e7:be:8e:f3:e3:
         95:7b:27:6d:b2:78:82:93:26:9b:e8:f2:f6:99:98:15:ad:36:
         4f:5c:91:29:bc:af:86:f3:98:db:30:4b:0f:0f:43:65:99:d9:
         d2:a5:ec:a8:97:65:51:9e:f2:9c:7b:76:1a:5e:1a:d7:6c:af:
         4f:88:78:9e:dc:c5:90:e0:78:40:6a:25:b9:6d:b3:7d:be:26:
         0e:a0:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:33:05 2026 by rpki-client