Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
File:                     cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa (raw, json)
Hash identifier:          wpQoTRyRtMylnNDF8pZ9U7mxM5qFqqMgJ/lKyjuWcSo=
Subject key identifier:   6C:05:66:25:9E:D3:E0:2A:84:2C:A3:C4:B7:84:63:1C:36:D7:8A:7F
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584F4977544D83A6CDBCE3A9E380
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8796
IP address blocks:        2602:f7c2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:54:4d:83:a6:cd:bc:e3:a9:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6a9e7e23-7585-4923-8934-733666ad640c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1c:36:03:c1:e3:bf:ac:e2:c7:e0:f1:3d:56:
                    0a:fe:af:cf:b2:c5:0c:71:8a:8d:40:ec:29:24:a9:
                    4b:c6:2a:76:70:16:33:a7:eb:ae:c3:1a:c4:14:c7:
                    cc:91:00:d3:da:17:14:13:4b:af:52:cc:8a:65:ce:
                    f9:23:91:7c:6e:43:70:7c:cc:72:8a:2e:7f:c8:58:
                    7b:9a:25:b7:32:89:9a:51:70:97:81:20:5c:97:7f:
                    5e:ca:c8:71:f2:de:e1:a0:3e:92:c7:9a:ab:b2:da:
                    88:9b:b8:9a:7f:ef:12:3f:4a:e6:72:06:bc:c2:47:
                    8a:15:02:e6:2c:2b:37:9f:6a:14:6a:89:c4:06:35:
                    f7:31:0a:a8:09:43:d8:f3:9a:97:4f:59:d9:92:53:
                    2e:9e:bd:0b:70:d1:8a:cd:d3:a5:27:da:8d:0d:19:
                    0b:d4:e0:2f:d0:9f:d1:d3:14:25:3c:d9:1a:e0:95:
                    5b:24:91:7b:f3:3f:03:9b:4c:d8:de:2f:55:10:af:
                    52:09:71:94:ec:3a:5c:99:88:09:db:f9:8a:5f:b0:
                    d7:64:80:41:22:73:b2:05:a5:ef:3c:5b:b6:83:e7:
                    37:9f:12:53:8e:9b:0a:b9:7b:eb:cb:6f:67:39:5c:
                    f8:d9:41:8f:da:b4:ea:92:5a:3c:ac:1b:82:46:c4:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:66:25:9E:D3:E0:2A:84:2C:A3:C4:B7:84:63:1C:36:D7:8A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:76:60:4b:d6:1e:61:3d:5d:fb:24:9f:51:d7:89:eb:d2:
         68:3e:e7:ee:2e:90:05:76:45:8b:49:c8:72:3d:2b:ad:a1:ef:
         7b:04:ab:70:e1:e2:34:7e:ed:c4:61:d2:05:40:92:c1:37:e0:
         f8:f3:d4:f5:34:1a:a7:5b:8b:eb:fc:41:eb:7d:b8:48:da:61:
         e3:0e:aa:8d:e8:8f:a6:16:94:2f:ac:b3:7d:85:9a:38:e6:93:
         09:a7:1c:f9:04:dd:0f:b7:31:14:69:46:9a:dc:e5:1b:90:8b:
         69:31:52:61:8a:30:78:42:4a:a4:ff:fc:21:30:17:ed:3c:9c:
         6c:49:83:25:59:be:2e:c9:36:20:57:d5:7b:8f:03:8e:f3:76:
         91:08:73:1c:ee:f3:04:53:93:da:d1:d2:23:65:11:db:0d:b9:
         d3:cc:87:11:71:ba:db:00:ff:c0:ba:bc:63:41:9f:b2:c0:03:
         3d:20:00:13:ad:6a:8d:3f:dc:d4:13:73:e9:25:82:08:60:b7:
         da:07:88:f0:e4:e5:7a:0a:a4:50:70:9a:45:89:e7:04:66:99:
         93:bc:4f:f4:0f:cf:01:d4:d3:f7:97:a0:43:84:e2:1b:c2:ff:
         da:ab:45:9a:3b:bf:55:5f:a9:4e:e1:b7:89:49:18:f3:c0:ea:
         ab:62:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:39:09 2026 by rpki-client