Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
File:                     a18857b3-bcc7-3703-9486-773d81f811bd.roa (raw, json)
Hash identifier:          vtEluqkfaXvVSKbg+OIm87YLBMBlPsyOYXAKzYRtNMQ=
Subject key identifier:   C1:72:3D:E1:4D:A5:D4:0F:5B:30:44:32:E9:77:9B:81:5B:25:B0:3F
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584F497537AD7F958B34BF0D3980
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2602:fa36::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:37:ad:7f:95:8b:34:bf:0d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17be18a1-e62a-4ef4-b4e5-9afb4c9a8318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:02:f9:b7:b9:7d:b6:c1:c9:20:3a:96:c2:
                    ec:57:84:f6:48:71:d2:3e:83:4e:50:d2:b1:41:f5:
                    78:3a:44:52:c5:91:5c:4b:ba:b5:78:6c:43:20:65:
                    55:fd:13:0b:0b:f0:c0:48:ed:5c:03:6b:14:c3:e6:
                    16:40:c0:67:81:49:94:14:c6:11:18:1e:fd:1d:be:
                    57:e0:9a:23:85:6c:a1:35:dc:46:05:49:03:40:d0:
                    6a:e8:2a:a1:16:cd:4f:78:11:5f:98:1d:ce:b6:06:
                    d8:85:b7:4b:cb:fe:f0:f1:b0:15:ed:e0:97:6e:3b:
                    63:fc:fe:fe:1d:ad:ff:02:ae:d3:7e:06:a3:b0:97:
                    5b:00:20:ac:a4:82:37:66:65:16:2a:3f:9e:ee:13:
                    d4:36:b0:5f:45:3a:bf:39:43:eb:8a:d5:91:f7:71:
                    18:34:4e:bc:f8:2b:72:bd:6c:64:5e:22:a7:0a:a5:
                    f1:d3:4a:bb:15:44:f4:25:43:0b:ed:4a:04:3b:1a:
                    66:f2:f5:80:78:d3:e4:72:64:c3:8b:b9:30:96:b8:
                    05:4e:5c:fb:cc:12:ec:87:97:83:73:10:a2:19:f4:
                    c5:15:4b:ce:29:f0:53:ff:3b:1b:5a:7d:7e:bb:37:
                    58:26:25:d0:89:a0:ab:f0:a7:25:a9:40:83:ad:7a:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:72:3D:E1:4D:A5:D4:0F:5B:30:44:32:E9:77:9B:81:5B:25:B0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c0:88:ed:c1:12:5d:fe:b8:16:09:14:4a:25:b1:11:47:8b:
         35:63:6f:cb:0a:de:b1:05:c2:62:ab:0c:b2:69:d8:b2:04:a7:
         5f:4b:9e:88:77:f0:a4:d3:e6:6b:0f:1b:00:a8:29:43:22:77:
         5c:98:ec:1a:17:95:d4:0c:29:da:b9:f0:b2:a1:5c:a7:a0:65:
         eb:f0:bb:7d:39:6b:74:c6:4d:74:60:54:5e:4b:96:1c:18:38:
         62:02:0f:31:bc:de:d6:0e:6a:8c:1d:a1:b5:86:47:be:23:2b:
         bc:c0:34:ad:c1:8d:de:df:8c:d0:d2:6c:d8:96:42:79:a8:05:
         69:f7:c1:47:25:89:1f:9a:6b:cb:f9:a8:e0:85:41:82:3b:94:
         ec:0a:f1:15:41:03:a5:fa:7e:89:80:c3:89:ed:76:4d:c0:21:
         a6:0c:53:e5:87:33:06:bc:42:73:3f:dc:a3:fc:d9:b8:64:7b:
         f2:71:c8:e9:b5:7b:8d:38:19:94:4b:48:6f:97:7a:cf:c4:98:
         82:18:12:68:d5:c5:a5:15:f2:b3:18:b9:94:31:33:f7:b7:aa:
         49:59:1d:00:d7:d1:0e:c4:4e:ed:f2:a9:a3:22:88:bc:e5:3e:
         c2:c2:cd:ab:8a:96:04:a8:ba:c9:93:63:0c:8f:9c:74:fc:48:
         19:f1:9c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:44:02 2026 by rpki-client