Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa
File:                     ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa (raw, json)
Hash identifier:          jX2b4XAC8+ty6xbtZFi3QRQqY99wRbrD4JIdPeZim8c=
Subject key identifier:   48:C6:53:9A:4E:C4:DB:6A:5D:B0:A0:A7:99:D9:21:7B:51:BB:06:1D
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F4328584F498A948057531CA4150FEA48
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53397
IP address blocks:        2602:fd61:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:94:80:57:53:1c:a4:15:0f:ea:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=faa150ff-11ec-44f7-8f9a-4ab1056634b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:8b:85:3b:5c:e2:1c:7d:14:ff:3e:9c:8f:
                    6d:de:4a:6c:46:25:3c:21:70:4c:a6:d4:fd:aa:18:
                    7e:42:5b:be:4f:f2:f8:78:88:74:ec:ab:1b:6e:8d:
                    41:08:90:4f:b0:3e:ce:94:0d:64:f9:53:db:14:28:
                    69:1f:09:a0:63:2b:99:2e:83:e7:75:3e:49:9d:54:
                    3c:39:83:96:2e:5d:43:c5:23:60:06:4e:f1:f9:0e:
                    3e:f9:b9:e4:31:ad:c2:00:25:fc:16:21:1e:14:e9:
                    59:84:4d:8b:7c:75:17:8d:f5:e5:4f:3b:8a:be:cf:
                    98:dc:b0:03:da:6a:43:40:8a:75:6f:ed:70:14:9e:
                    a2:80:75:d3:c6:80:c2:6b:c4:4b:a9:38:36:72:e8:
                    50:86:51:67:71:3b:7a:21:3e:2a:e6:90:89:ca:bf:
                    0e:3a:0a:0f:17:55:5e:06:28:62:ba:bb:a8:71:5b:
                    40:ce:cf:aa:9b:52:64:5d:81:00:ff:30:88:4b:b4:
                    99:c9:e3:ca:98:91:4f:06:68:54:8b:f5:95:f3:e7:
                    83:14:84:7b:c3:57:20:b4:07:92:c6:55:6f:dd:1c:
                    6f:85:d2:98:70:b8:09:c3:aa:6c:92:ae:7c:ba:62:
                    c6:ec:5b:ec:00:d0:c4:89:7c:a4:4c:57:c5:fc:f7:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:53:9A:4E:C4:DB:6A:5D:B0:A0:A7:99:D9:21:7B:51:BB:06:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ef05f7e9-1a0f-3202-a7c9-1034f952914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd61:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:42:04:7b:af:2a:b9:07:24:1d:52:2a:d7:7d:f8:5a:be:
         10:61:51:6e:e9:d1:88:d9:3d:fc:32:a7:6f:30:ce:3c:2f:d0:
         8d:07:41:d6:7c:72:36:76:a7:70:40:12:02:2e:fa:b9:05:0d:
         43:be:86:39:19:26:86:7f:19:e1:6b:6d:f7:f5:5a:eb:5b:e2:
         90:69:00:52:59:f5:a0:07:0b:f7:8c:b7:d0:04:8a:3e:63:da:
         ca:de:01:a8:ef:e0:05:e7:58:90:7b:a6:23:df:d1:72:63:94:
         46:dc:fe:58:59:09:4b:f2:d5:4a:5e:39:65:6d:3f:a9:69:2a:
         c8:11:9c:47:04:eb:a5:2a:b1:2f:ef:f7:1d:32:f6:6b:d3:d2:
         03:5d:3a:6b:09:c2:99:91:33:a8:e3:35:32:79:41:3d:af:3b:
         ca:59:a3:72:f6:13:72:6b:a8:fe:39:ae:b5:2b:73:d3:1a:ca:
         ee:bd:c6:b8:73:7c:53:b2:ed:37:d9:c3:ba:ce:a7:6d:e8:92:
         9d:cb:0e:b6:8a:2e:53:5d:32:23:8a:5e:2a:18:c3:41:49:dc:
         40:a6:47:c1:b9:0f:f0:a8:a5:b8:44:a2:e0:91:2c:08:8b:bd:
         a5:8e:1c:ab:ea:08:2f:5b:ee:2a:cf:fe:75:8f:21:6c:d1:51:
         53:0e:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:14:22 2026 by rpki-client