Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
File:                     a2851502-ec1f-392a-80d4-f10b991ad233.roa (raw, json)
Hash identifier:          3lvyCfok/JxbXKo0DsbYJetZTtQWojZCGwntfDrffA0=
Subject key identifier:   CB:00:44:C3:8D:99:22:DC:7F:BD:55:22:27:02:C0:88:3C:46:4E:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F629301ABBC70CCE331153A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        2603:9001::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:01:ab:bc:70:cc:e3:31:15:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=1eef1d31-ac02-4879-8e2d-b916ce640770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:49:16:fc:44:6a:fa:12:fb:ad:8f:de:42:
                    fd:ce:c7:bf:2b:0c:60:7d:04:bd:89:f7:43:8d:47:
                    48:bd:76:3e:34:20:7a:2f:ca:31:a2:f4:83:15:96:
                    64:73:46:3b:e9:93:97:d5:3e:08:4e:9d:f8:39:ad:
                    65:2c:25:b8:31:23:db:40:db:e5:3b:4a:9d:07:29:
                    e9:83:1a:10:88:18:74:06:6d:d9:87:ff:5a:23:90:
                    fb:71:03:54:bd:7c:8a:0d:26:dc:4a:50:a8:0f:51:
                    8e:06:33:ac:84:93:6f:33:dd:49:4c:a3:ff:ae:59:
                    55:71:0c:1c:d0:78:fc:25:1d:53:f6:e4:87:aa:b2:
                    54:00:90:a4:59:4f:e0:6d:d5:0c:57:8e:f7:5b:6e:
                    54:9c:d8:35:0f:93:5e:a7:a1:38:2b:3d:d7:bb:43:
                    98:86:d0:ff:5a:38:2a:ab:bc:b8:3d:c8:31:33:6c:
                    f9:7e:4b:c5:c5:09:6d:38:3b:55:5d:4f:06:55:df:
                    be:f6:ec:b7:23:0a:b0:c3:c9:f9:e9:d1:da:b8:f5:
                    3b:f8:99:ec:56:1d:a0:9c:39:59:58:3f:2a:e6:a1:
                    00:77:5b:f0:67:ac:ff:61:84:63:77:0b:0a:08:8d:
                    4f:b7:f8:68:6b:f2:24:af:99:61:74:ed:f0:d8:48:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:44:C3:8D:99:22:DC:7F:BD:55:22:27:02:C0:88:3C:46:4E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9001::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:55:3d:f0:9b:3e:52:f8:30:c5:e7:4d:4d:6f:f9:8c:c7:be:
         72:d9:92:85:bc:06:20:d7:f8:49:c9:93:d6:20:09:1b:14:81:
         1a:80:3f:07:ab:e9:a7:73:eb:26:8e:77:0e:90:08:de:48:9d:
         e7:f6:06:a5:75:c6:c3:65:7b:43:78:9a:c4:14:f6:ff:0a:10:
         7f:0c:2b:ae:17:11:ab:29:9c:67:72:6d:b4:90:11:1a:51:4f:
         29:da:40:a4:62:ee:72:2a:22:fb:02:8a:8e:b2:56:ac:ca:86:
         da:64:7c:47:b4:ef:83:7f:36:be:5c:da:8c:ed:a1:46:56:cb:
         c2:60:03:6e:0d:bc:0a:8a:5f:26:67:a7:55:11:15:8d:2e:e7:
         fd:fe:11:c2:44:70:38:8c:68:3c:9b:f9:d4:f5:55:22:07:22:
         f3:7e:89:d2:e2:e7:72:09:e5:8c:03:ac:aa:a3:34:5e:a7:55:
         8b:9a:0c:49:76:1c:37:70:0c:b1:d0:73:62:bf:0b:05:aa:1f:
         7f:b7:d2:06:93:9a:1d:52:d6:81:e5:20:e8:b6:68:44:88:a6:
         d2:7d:2d:28:fe:04:0d:b1:95:1f:2a:f0:e5:1f:a1:7b:f2:7e:
         0b:33:d6:52:ec:49:b9:41:e9:77:e0:9a:1e:51:bd:dd:5c:79:
         43:39:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:26 2026 by rpki-client