Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/845171f5-1a1d-372f-b1a1-ff4de042b373.roa
File:                     845171f5-1a1d-372f-b1a1-ff4de042b373.roa (raw, json)
Hash identifier:          2IRgYvlR0YoQtcR0meBVWX+W097AvN22Tl5Q+vOQJLo=
Subject key identifier:   C5:09:D7:6F:1F:28:9D:32:77:AB:64:FA:5A:9F:10:C0:97:01:F8:BE
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F4328584F3E47D70B37E92492B5D38560
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/845171f5-1a1d-372f-b1a1-ff4de042b373.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     203899
IP address blocks:        2602:faac::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:d7:0b:37:e9:24:92:b5:d3:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=205da258-a913-42d2-8cba-7b9e6daf6f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:47:14:a5:48:bc:b3:15:0b:a6:13:d6:88:
                    a6:42:c0:d2:1d:56:5f:67:72:33:cc:3d:03:ae:f6:
                    e7:5e:61:4f:c6:f6:49:e3:53:24:a8:a6:b1:df:b7:
                    e5:f7:82:50:7b:a5:a7:43:19:af:ec:f0:2c:a5:6e:
                    86:9d:db:d3:0b:d4:e5:23:8d:2b:7a:0a:bd:ff:a1:
                    2a:33:ef:b8:36:5a:6a:79:a5:f6:81:c4:85:67:5b:
                    23:72:8c:f7:45:44:99:dd:cb:d0:a0:24:d4:2c:da:
                    bf:bc:91:f9:60:0c:d7:bb:f6:fa:05:92:26:90:d0:
                    33:20:0a:83:f8:8c:c1:2f:38:47:c4:3f:bb:65:ff:
                    9b:db:93:1d:e9:68:e0:17:17:ba:10:50:ed:62:0d:
                    ec:1b:ab:6f:15:dd:ad:85:d3:b5:5a:5c:fb:73:76:
                    ee:f3:5f:df:ae:b1:35:d1:c9:74:fd:7c:62:ec:9f:
                    80:cc:cf:f0:82:06:03:53:b3:57:40:1a:51:e6:43:
                    94:db:c1:0e:e0:88:5a:2e:41:39:66:98:b3:7a:bc:
                    07:16:0e:3f:55:71:07:c9:84:ce:35:31:70:49:aa:
                    34:db:f2:32:82:03:cd:04:c5:2c:7a:2c:b0:a1:f8:
                    47:32:63:8a:c3:f8:b3:79:6c:4a:ba:14:76:07:16:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:09:D7:6F:1F:28:9D:32:77:AB:64:FA:5A:9F:10:C0:97:01:F8:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/845171f5-1a1d-372f-b1a1-ff4de042b373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faac::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:28:f2:17:1b:5a:0e:eb:5f:90:45:49:47:bd:f6:bb:3e:c6:
         bb:20:01:dd:c9:31:8d:72:c8:e3:43:8f:fa:e0:5a:80:96:7b:
         bc:d8:51:fe:64:59:5f:e2:88:0a:a9:98:78:ac:64:6e:21:93:
         6e:ff:13:f6:a5:fa:e3:d4:90:a8:b0:d8:5c:4e:b4:0a:3d:25:
         55:db:59:d2:4b:51:6a:f2:bc:14:bd:24:30:9a:36:8d:cd:37:
         3c:e9:a9:a5:2e:43:60:8b:d9:6e:60:a5:43:54:c5:31:8f:8d:
         af:e7:e5:00:b4:a0:04:8d:fc:25:91:19:c5:80:2d:bc:89:a7:
         68:8d:b9:86:0c:fb:9e:fd:7c:c1:38:62:0f:c5:9c:be:88:62:
         24:01:4e:d9:d6:f0:50:8a:1e:b4:73:fc:12:6d:bf:6f:68:99:
         8f:e0:88:d4:7f:a5:11:d8:b1:c2:af:07:7b:4d:e5:ff:3f:f4:
         76:4b:04:5a:14:c8:90:87:ad:7e:22:b9:e4:87:98:4f:84:ff:
         f9:a3:fc:8b:fe:28:f4:52:41:3a:54:18:15:30:ea:1a:8c:49:
         aa:b4:2a:a9:14:2d:83:1b:79:eb:83:7a:c4:37:16:f6:97:3c:
         30:c1:f0:76:b7:05:74:c3:30:55:4f:15:b4:ba:1d:b8:f2:71:
         da:c0:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:22:55 2026 by rpki-client