Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa
File:                     553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa (raw, json)
Hash identifier:          eKTh3JERVCackNCsEAcifhppAMPijgHbIdzfnLwk7BE=
Subject key identifier:   99:AC:6A:4C:89:5A:C9:DE:42:0E:15:C8:8E:44:81:7F:8E:18:D9:15
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584F6292DC7ACEA1ABF93A09B3C0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     39618
IP address blocks:        2602:fd92:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:dc:7a:ce:a1:ab:f9:3a:09:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d9140a26-b3fc-4bd6-9ee8-8fad7e8f4696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:f6:4f:f3:ec:88:79:c8:90:94:e4:9b:1d:
                    ec:58:3d:06:3f:09:6c:57:92:6b:41:68:fb:86:0b:
                    90:57:e9:e4:4e:35:c1:66:f2:ca:a4:11:02:d4:e3:
                    0c:95:5f:f6:c2:a3:7b:9d:82:d8:c9:18:32:71:aa:
                    8c:55:ff:c2:df:e3:7e:07:a9:30:88:7f:98:cd:d8:
                    01:9a:96:56:8d:bf:5d:84:39:09:56:86:45:20:02:
                    16:31:91:63:0d:22:71:db:5f:d1:a5:2b:1d:c6:e7:
                    1c:3f:50:f0:0d:d6:18:9b:09:d9:e1:68:6b:43:1d:
                    5b:36:4b:e3:c5:f8:24:ac:68:80:c0:15:52:96:15:
                    57:db:9a:99:80:73:84:9a:43:c1:67:2b:e4:8d:ca:
                    57:05:d2:5b:aa:b1:95:13:ea:e0:c1:d2:39:09:7e:
                    60:df:c9:20:62:c7:66:ce:11:b9:cb:84:1f:2f:2f:
                    1c:2c:a9:aa:98:78:0a:53:aa:71:1c:7a:7b:b4:79:
                    c9:ed:e9:c1:f3:b5:aa:e9:c9:ca:d0:a1:c1:22:8e:
                    b5:7d:62:a8:64:f2:4b:4e:ec:4a:09:13:e4:70:d5:
                    f9:14:31:76:e7:9d:e9:67:45:6a:95:a4:e9:7b:d1:
                    ec:d7:8b:29:28:3a:9a:aa:da:7c:28:35:86:ac:03:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AC:6A:4C:89:5A:C9:DE:42:0E:15:C8:8E:44:81:7F:8E:18:D9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/553e39fc-7f0d-37f2-b0ab-4b9c561aa0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:96:df:05:01:b3:f4:a3:ab:70:e7:a0:42:00:77:7f:a4:de:
         03:28:00:19:e4:57:71:0b:04:94:7b:86:8b:db:3b:e7:88:b5:
         9f:59:26:33:72:1c:01:b3:1c:dd:dc:60:d2:9c:0d:5e:23:e5:
         e0:d1:ef:a6:cf:23:be:ed:25:a5:c2:3f:3f:1e:d4:40:0a:94:
         3f:b2:f7:79:d2:07:d3:13:b0:c4:bc:17:b2:7b:df:51:9b:f0:
         67:f2:a9:40:e5:2f:76:21:32:54:ee:cf:5d:bd:24:59:06:8e:
         7b:08:fb:9f:31:bf:3c:bf:ed:01:31:1a:74:57:fd:fa:72:0a:
         8a:e3:39:06:61:7b:f0:7f:80:39:b6:ec:d3:ac:03:a2:3f:f0:
         34:d7:54:08:48:8e:cb:90:bb:a5:a5:23:e5:c0:c7:96:6d:16:
         97:a7:de:08:6e:12:a7:63:f7:ab:ca:99:9c:a1:96:33:aa:0e:
         34:19:11:12:11:c5:ac:f0:ff:42:0e:69:91:87:e5:56:0f:39:
         7f:2e:d2:db:25:68:a7:dc:e2:d8:44:23:78:a1:7f:c5:9a:d5:
         a6:d5:a1:5c:1a:0a:af:3c:01:7d:b8:c5:d2:f6:37:00:79:03:
         be:e4:d6:87:f8:72:d2:03:20:85:c1:a8:1c:65:4a:7e:98:7e:
         11:69:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:27:36 2026 by rpki-client