Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/5ca92b6c-5585-34ac-8627-c6637dceca48.roa
File:                     5ca92b6c-5585-34ac-8627-c6637dceca48.roa (raw, json)
Hash identifier:          za6ozCS8vIJFiioqR7rSSIfp19g/qc/Zy6+pZFuaegE=
Subject key identifier:   57:57:C0:E7:B7:94:71:EC:66:6E:43:49:07:5F:0C:06:C9:67:65:26
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584F2EED1043BF9478C4E30F3380
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/5ca92b6c-5585-34ac-8627-c6637dceca48.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     835
IP address blocks:        2602:fd50:400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:10:43:bf:94:78:c4:e3:0f:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=9b47fb9a-71c3-4c33-a690-2b38c0d29dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7d:b1:ec:ac:4d:03:8d:90:fe:7f:1f:08:40:
                    c4:02:d5:5f:d0:02:1d:6a:29:82:d6:87:6d:8c:95:
                    70:1b:74:8c:f6:4d:9f:92:a3:58:9e:91:83:54:d6:
                    4c:65:3c:80:e2:14:90:ac:32:a0:25:08:ab:11:13:
                    b0:ed:02:ba:5c:d8:50:d3:25:f9:a6:22:49:ca:9e:
                    b8:1b:4b:b2:b4:1b:c3:a0:02:48:4a:c4:fe:b2:6a:
                    94:9c:91:e5:32:37:6c:43:1f:a5:9b:a1:dc:cb:7c:
                    9d:b0:b7:31:c2:d4:ad:9b:9e:9c:e6:6e:48:bf:f7:
                    22:31:62:c0:09:f9:26:f4:7a:73:fe:06:87:1f:1e:
                    d9:1d:93:85:cd:37:6f:2f:16:e3:59:c2:8e:2f:bb:
                    66:fd:fa:9a:30:36:73:fa:b3:ff:6f:28:2a:64:aa:
                    4c:a8:7e:16:35:db:84:69:fd:57:ee:84:26:bd:c7:
                    b5:6a:6b:fd:05:60:e0:83:44:2d:fa:cf:4e:10:7f:
                    9e:57:bd:49:18:99:62:bd:a7:da:55:6f:79:73:e4:
                    10:7b:75:bc:a9:cf:47:07:3e:dd:9e:c6:d9:12:d6:
                    4d:1c:66:6a:85:2e:3c:a4:0c:3e:d2:b1:13:62:a7:
                    9a:5b:6e:08:b8:2a:d7:88:fa:89:b2:9f:06:c0:32:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:C0:E7:B7:94:71:EC:66:6E:43:49:07:5F:0C:06:C9:67:65:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/5ca92b6c-5585-34ac-8627-c6637dceca48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:72:75:7b:eb:24:ac:c6:cb:eb:33:e7:75:3a:e7:7a:14:
         d0:6a:73:7d:8f:c8:71:d5:df:6a:1d:7b:a2:ac:3f:22:d7:4c:
         67:5a:68:2d:d1:44:43:1b:10:a1:8a:47:05:90:cb:e3:dd:38:
         23:ae:65:d8:e4:2a:3f:f3:44:a5:53:21:30:4e:fa:52:91:81:
         56:e1:fc:47:d9:1a:1b:db:68:fe:54:4e:e3:d0:fe:a8:4d:1e:
         30:81:6e:08:8f:9d:10:d1:55:fe:59:c8:4d:7c:99:e9:69:d3:
         d2:d0:1f:c6:69:99:b1:39:3d:ce:0c:08:c4:f1:06:f4:3d:c9:
         7d:6b:9a:9d:53:11:dd:a9:6d:3e:fd:76:1a:7b:aa:88:72:2e:
         17:11:20:79:95:8b:72:0e:27:e0:de:e5:d3:0a:65:ce:db:99:
         f7:5e:db:29:a1:56:08:11:ab:48:2f:57:5f:09:ed:43:5a:7c:
         34:cf:54:ad:62:86:c1:f4:dc:e2:dc:b2:64:46:a3:20:9f:2d:
         cf:cc:71:b5:d6:e6:ee:1b:d3:e5:20:5c:41:44:1d:e5:94:8e:
         3a:59:17:b3:db:a1:ef:f2:93:3f:fa:8c:2d:76:d8:7c:05:d8:
         e5:3b:40:61:05:9f:52:eb:75:be:8f:e3:a4:27:5e:4b:22:93:
         11:4b:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:35:34 2026 by rpki-client