Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/4afbdce2-040d-3c70-8578-c9ffbc66f643.roa
File:                     4afbdce2-040d-3c70-8578-c9ffbc66f643.roa (raw, json)
Hash identifier:          uo3Pkbole3L9qt70O4ZKx9yIVCGGEZtybeg/dhEEdcQ=
Subject key identifier:   95:9E:8D:D2:FF:85:CF:E2:13:9A:DF:B5:BB:1E:6F:4B:61:F2:C0:99
Certificate issuer:       /CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Certificate serial:       010D0C9F4328584EEA874F70DE2E9C6EF1E59100
Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/4afbdce2-040d-3c70-8578-c9ffbc66f643.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     19625
IP address blocks:        2602:fc59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4f:70:de:2e:9c:6e:f1:e5:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=836a653c-a79e-4bf0-a693-244ef3367153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:58:ae:5f:cf:cf:9d:af:94:b9:ca:29:9e:
                    a7:47:60:27:6e:14:22:0b:58:5f:f2:f2:06:2b:fa:
                    36:73:90:e9:ba:68:3b:6a:15:da:0b:76:f3:f7:20:
                    dd:58:c7:57:f6:4f:be:f2:4f:7e:c6:71:cd:34:c2:
                    6e:f9:b0:38:a4:92:e3:d3:0b:ad:07:d4:dc:86:58:
                    14:bf:df:19:78:72:9f:85:d7:80:fd:1e:bf:a1:4f:
                    1c:2e:e2:52:90:cc:10:e5:fe:61:ba:e8:b8:4f:5e:
                    42:1c:aa:6c:22:40:86:81:4e:cb:d1:b0:a0:d1:65:
                    ca:ac:8a:20:22:a1:2a:c0:1f:23:3c:64:ed:70:d3:
                    6b:1f:62:06:f4:10:c3:4b:58:bb:11:36:f9:df:e9:
                    79:83:13:95:d4:20:32:cb:91:a9:4f:ba:98:7e:a5:
                    83:35:19:f8:01:3c:97:7e:1c:3f:02:39:69:32:e6:
                    77:56:ad:78:ed:ad:a0:0b:d3:e4:7c:19:9e:88:0c:
                    cb:a8:a5:82:94:cf:70:2d:67:e9:ad:ad:80:76:c0:
                    06:69:9f:d5:4a:b5:ab:a7:cf:09:80:61:67:9e:c6:
                    f7:2f:a4:7d:cc:85:fa:25:24:c8:36:17:d6:84:0a:
                    a5:8d:df:82:27:3f:a6:f5:7d:b8:ef:95:e8:4f:5f:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:8D:D2:FF:85:CF:E2:13:9A:DF:B5:BB:1E:6F:4B:61:F2:C0:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/4afbdce2-040d-3c70-8578-c9ffbc66f643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:36:30:48:4c:27:45:ab:58:3d:2a:d0:ef:e5:be:c7:ae:c2:
         48:01:50:e1:6d:ae:ee:39:1f:68:2e:f9:40:f3:e3:55:c8:56:
         7b:ca:50:ad:fb:27:82:a0:c9:83:d3:e2:18:df:83:7d:e5:a7:
         cf:2e:47:0f:2a:1f:eb:0c:8c:2e:c8:19:f0:c9:89:0e:19:7d:
         3a:c8:31:e8:2f:72:eb:bf:51:40:b1:0e:4a:59:c9:c9:a0:e8:
         70:c0:08:1a:8e:a2:39:f3:1a:d7:87:da:82:f3:06:44:1c:b5:
         3e:f9:60:77:d3:5f:60:09:b3:30:6b:a5:63:17:0e:80:60:2b:
         9e:e0:42:66:00:dc:c5:bf:72:13:a9:ab:4b:98:c9:6b:6e:10:
         5e:6f:43:cf:59:3f:fc:e8:c1:58:70:0d:f6:a3:cf:8b:ea:2e:
         f9:54:f3:83:d5:57:c8:a8:6b:11:16:79:42:2a:ce:72:fc:ce:
         17:22:f7:6d:5e:55:83:7b:dc:1a:8f:f7:55:22:e6:4e:d7:5a:
         61:af:55:53:4b:86:72:8a:b7:08:e1:27:01:b7:d5:26:8f:09:
         ac:86:ea:55:d9:5b:c5:ea:34:0a:1a:39:7d:d0:9b:90:4a:4c:
         9b:28:98:09:e2:26:45:de:8d:bc:c5:3d:f5:44:9a:c6:90:f1:
         d8:89:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:29:05 2026 by rpki-client