Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa
File:                     30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (raw, json)
Hash identifier:          4KwLDZ38I5DBdpOzXTyqpCbgfa+dMJySgjwbD8bSNNE=
Subject key identifier:   4D:BA:58:C3:00:B8:FD:DB:4D:96:64:77:08:27:73:20:02:4F:6A:84
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F4328584F4973D6F9AB82EC901E52A8C0
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400442
IP address blocks:        2602:fbc7:1::/48 maxlen: 48
                          2602:fbc7:2::/48 maxlen: 48
                          2602:fbc7:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d6:f9:ab:82:ec:90:1e:52:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9b585899-b7ec-44e1-be54-1865aa45bcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:ce:1c:7e:b4:f2:f0:c1:38:31:ca:ea:5b:
                    2a:3d:c7:9b:3d:5d:a0:8f:9c:e8:88:71:29:47:f7:
                    a4:c6:90:41:3c:f0:3e:c6:1e:52:ed:57:05:70:c4:
                    c5:54:4a:be:ee:6c:06:13:9b:4e:20:59:ff:7b:37:
                    de:14:8a:35:ef:83:51:19:d3:91:fa:1f:a6:08:1f:
                    cd:4d:2b:92:7b:7a:0a:64:8a:67:6e:56:75:93:56:
                    70:13:5a:de:56:5f:de:03:7c:e1:c5:c7:27:f2:45:
                    cf:a4:6c:9b:d5:4a:e2:e8:16:de:20:40:8f:c8:cd:
                    5c:b5:ac:0e:ce:55:c1:fd:95:c8:0b:9b:c9:c4:26:
                    75:00:ce:34:75:a1:ec:85:1c:b3:d1:59:37:16:d1:
                    3d:5a:d4:32:b5:0f:e3:04:1c:98:ca:74:36:d0:d4:
                    00:57:92:93:16:dc:6c:99:91:00:19:bc:d7:91:ba:
                    de:3d:73:fa:ae:48:04:0a:02:9c:30:a7:ca:ca:dd:
                    89:7e:f1:bc:07:02:00:bb:4a:84:c8:00:06:1a:eb:
                    b9:81:59:5b:07:8c:54:aa:17:d1:bf:ba:dc:7d:b4:
                    c6:ac:2f:c6:e2:88:19:91:19:a3:2e:db:3e:9f:ce:
                    50:75:a6:06:81:40:f4:4c:31:17:51:56:17:ff:5b:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BA:58:C3:00:B8:FD:DB:4D:96:64:77:08:27:73:20:02:4F:6A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7:1::-2602:fbc7:3:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:0c:25:e7:f7:8e:01:86:49:2b:e5:0c:f4:87:d9:d0:b9:
         c2:e4:1f:0e:c2:e6:85:a1:79:87:57:65:cd:79:f2:c6:96:f2:
         db:f1:55:ed:aa:55:99:51:c1:28:52:03:b6:d5:87:95:6c:a8:
         c2:85:8e:a9:15:08:d3:1b:36:ee:6e:73:08:86:96:b1:5b:ad:
         a5:f0:e3:13:47:83:70:cf:c0:5a:7f:65:52:3f:8c:4e:b2:66:
         df:05:51:9e:d9:02:af:5b:56:84:76:d6:33:e3:99:4b:86:03:
         a6:24:91:00:e1:f6:d2:e5:c1:98:d3:1f:98:81:dd:8c:4e:ee:
         a5:3d:f8:89:27:39:b7:d0:7e:3d:00:7f:6f:85:d6:cb:db:f4:
         99:b1:c9:85:e3:ab:c1:b5:66:ce:0a:f6:8c:f7:7e:83:e5:bd:
         4b:84:6b:4a:84:73:3a:5a:dd:b3:df:e6:bf:37:c4:6b:a7:bc:
         f5:b2:ae:c0:84:bb:06:1d:78:02:8f:ee:84:fb:d7:72:b6:b5:
         76:3b:b4:14:93:2e:63:2f:8b:91:ad:6c:09:d5:ad:76:c3:52:
         fb:68:60:c1:20:63:be:7c:2c:fd:76:67:9d:5d:00:43:30:2d:
         33:de:f5:e5:4f:48:8f:25:49:1c:9c:83:1c:06:6e:4d:13:07:
         ee:9a:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:31:29 2026 by rpki-client