Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7b1dcd88-e1b5-3d67-8f32-dc1c5d58cd55.roa
File:                     7b1dcd88-e1b5-3d67-8f32-dc1c5d58cd55.roa (raw, json)
Hash identifier:          t1rkZA9KCZxaiAmaNoUILFMPsG0pQHRP6xK/bNDlqMo=
Subject key identifier:   35:EA:E6:96:9E:00:6D:CC:33:BC:50:BD:DD:FF:50:76:25:48:24:F5
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584F549D548193C08FED6E0395AA
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7b1dcd88-e1b5-3d67-8f32-dc1c5d58cd55.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     1024
IP address blocks:        2602:fca7:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:54:81:93:c0:8f:ed:6e:03:95:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=78951497-63c2-45a5-93ce-0d6538c3d483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:15:c5:b6:53:c5:43:9e:e0:73:3c:ab:fa:
                    95:8b:6c:56:f3:14:da:a6:c6:fa:a0:6e:4e:ef:f1:
                    a6:57:d6:15:f9:dc:8d:44:91:56:54:5c:20:ef:30:
                    1c:2d:57:7e:cc:3d:c8:a9:ad:0e:58:6f:ac:53:c4:
                    53:5b:f4:bd:85:26:24:25:e3:47:84:49:26:68:45:
                    ff:be:48:23:a4:be:f6:20:67:60:79:e6:63:20:42:
                    70:31:d4:ac:09:35:92:88:9d:85:93:06:16:7c:e5:
                    06:88:bd:17:f6:2c:5a:31:30:a0:f3:54:c4:de:d7:
                    3c:8d:cd:a6:d4:6b:41:1f:55:ca:fd:c9:0c:b8:9a:
                    79:06:a3:af:86:98:21:e2:63:08:06:ae:44:44:12:
                    13:ea:c5:c8:d6:2c:69:4d:df:b0:92:97:75:21:0e:
                    82:d4:d0:63:1a:e0:d6:69:48:d7:b7:74:c9:31:ab:
                    c5:a0:69:9f:6f:85:20:8c:7a:fd:cc:8c:20:09:d9:
                    9d:8c:32:d6:ee:fb:52:ae:9e:fc:de:39:78:c2:c1:
                    0e:dd:8e:30:7c:d6:7a:fa:e8:9b:62:f2:c4:1d:6e:
                    45:81:42:e8:67:38:44:59:29:03:87:26:43:77:35:
                    3d:74:81:b8:49:24:54:85:79:d2:5c:77:80:0d:6a:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:E6:96:9E:00:6D:CC:33:BC:50:BD:DD:FF:50:76:25:48:24:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7b1dcd88-e1b5-3d67-8f32-dc1c5d58cd55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:12:71:b5:26:73:36:f5:1b:97:f4:ed:73:96:1e:da:dc:53:
         a6:70:31:c2:ab:fc:27:0f:cf:98:40:83:85:32:61:76:37:2a:
         ba:b1:b0:03:05:17:4b:5e:d4:48:9c:9a:17:d4:7c:5b:dd:7b:
         f5:66:b3:da:32:df:0a:1e:c5:10:73:7c:8f:39:4f:2a:b3:8e:
         19:c5:28:dd:61:d2:2b:b3:79:1f:19:3d:6b:b7:54:98:c3:08:
         49:ac:6f:7d:a7:e0:f5:68:3d:36:01:9a:25:66:6b:be:a5:4c:
         f4:9a:ed:7e:e4:b6:24:9d:ad:e6:7b:74:e9:87:48:bc:39:ca:
         ae:77:3b:2b:e1:ff:0d:b2:f2:cd:a5:0f:30:fa:5c:af:be:5c:
         61:9b:b7:12:f4:e6:ed:ae:34:45:22:f0:14:78:3c:d1:37:75:
         9b:cd:1f:5f:6b:71:cf:fe:45:b0:1b:87:c3:03:cf:c4:9a:c9:
         18:81:ee:48:d5:18:ef:40:33:29:5e:92:27:32:23:07:07:10:
         52:89:b6:1c:83:00:20:6b:76:37:65:b6:9c:fb:16:e3:c1:b6:
         d7:d5:03:d8:0c:c6:29:67:c3:1c:4e:fd:22:00:a7:e5:ef:ea:
         b7:07:f2:d9:f1:65:44:42:ed:f9:20:b3:76:55:9b:0a:3b:e7:
         2e:47:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:39:07 2026 by rpki-client