Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
File:                     3c7bdba5-8362-330b-97ea-a2d35f272c00.roa (raw, json)
Hash identifier:          yo5CP84BfqQQIpcpynlESij7SOuGpuVq9beS8w8BMmQ=
Subject key identifier:   AC:66:1B:48:8C:C6:CF:90:D5:E7:F8:D8:49:42:3C:EA:FD:C6:E6:D9
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584F4975AA36A1370F42ADF9AFE0
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26768
IP address blocks:        2602:2a4:9d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:aa:36:a1:37:0f:42:ad:f9:af:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c50f4261-5376-411e-bdbf-c452b36ca44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:36:ec:f3:c9:92:06:63:1a:8e:4a:e9:34:
                    86:18:32:af:c1:9b:f2:8a:49:18:6d:dd:18:b9:d7:
                    db:6f:12:7f:c7:16:f3:1a:94:f5:4d:c0:af:ba:43:
                    18:4a:39:bd:0e:17:58:8c:44:5d:4d:50:94:83:54:
                    3c:31:02:2e:7b:d4:81:7c:a5:ff:e1:43:30:fc:37:
                    28:71:2a:14:fa:01:3e:ec:76:a2:2d:f0:5f:29:57:
                    a3:fb:c5:d9:aa:a2:dd:ab:30:45:5f:b1:92:0e:0c:
                    5d:b8:f8:84:90:3d:62:c2:33:cb:28:ac:4f:83:e2:
                    a8:df:b9:8e:04:1a:c8:68:9b:a1:91:b9:07:72:90:
                    9c:f5:0b:3d:84:b6:a5:08:c6:bd:b9:a0:b4:c4:4b:
                    07:17:f9:b2:87:34:14:39:33:49:23:75:55:7d:f6:
                    0b:08:9b:35:a7:fb:b7:05:f9:4b:6e:8c:15:cf:81:
                    58:9e:c9:9b:02:f8:dc:fe:8b:94:f4:6a:3a:89:d0:
                    b1:f3:09:5e:42:cf:ca:91:87:7a:01:8f:ef:18:c3:
                    c1:65:e5:1d:e9:29:b3:3b:3d:c6:8d:a4:68:e1:24:
                    f4:37:67:80:e4:e0:a8:0e:2d:bf:09:9e:7a:3c:29:
                    95:4c:18:08:d6:7a:30:81:81:e2:df:01:bf:1b:5f:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:66:1B:48:8C:C6:CF:90:D5:E7:F8:D8:49:42:3C:EA:FD:C6:E6:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/3c7bdba5-8362-330b-97ea-a2d35f272c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c6:97:20:69:3e:71:16:e4:17:f1:6e:e8:4e:e4:3b:5d:20:
         9e:9a:75:45:30:ba:c2:48:66:f8:82:f2:99:a7:0f:b3:c8:94:
         e9:f4:6d:57:7d:19:68:68:c9:25:dd:9d:74:c6:db:c6:d5:c1:
         5e:3d:f3:dc:eb:04:9a:f1:9e:94:c1:1e:4f:63:a1:8e:6b:ed:
         46:7d:25:c0:84:a8:6f:2f:19:23:05:25:2b:33:8a:98:b1:25:
         ca:c5:7a:8f:50:f5:26:a2:ec:ff:b3:e7:c3:ca:6a:24:f9:27:
         ad:cd:b0:9a:f6:29:da:5d:e3:7b:7e:c4:40:93:94:35:19:b7:
         f1:35:2e:7a:a2:e4:4d:6a:7f:db:89:9f:2c:73:5f:6e:19:24:
         a6:e7:fe:ef:79:18:78:fd:96:46:25:37:bd:da:5d:fc:1f:0a:
         04:21:b4:85:4f:a9:93:c3:dd:82:96:6b:09:09:c7:bf:b8:ce:
         72:12:31:71:80:90:97:fa:11:56:3f:cd:a9:b1:f1:3a:9b:0e:
         32:fa:91:3e:e3:6d:55:cb:3d:3a:60:14:4b:2d:ea:45:65:cd:
         f4:8b:71:be:eb:6f:0e:09:6b:a8:a0:0e:83:fd:29:cd:ab:73:
         13:14:c0:95:76:df:48:d2:6b:5d:d0:cc:ee:06:8b:66:33:03:
         c0:d6:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:57:15 2026 by rpki-client