Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/92ece1aa-fc26-32cd-9a6d-0b2ab3a65f2a.roa
File:                     92ece1aa-fc26-32cd-9a6d-0b2ab3a65f2a.roa (raw, json)
Hash identifier:          StY1l96cObSswaGEqgt84xyLtHHyFhk6IqKFsbfR1LU=
Subject key identifier:   CD:E8:22:E0:DB:D9:7F:97:13:96:6C:37:F5:C7:EC:BA:9C:1C:03:37
Certificate issuer:       /CN=270feb68-f8d6-4567-90e5-6325ba1775d1
Certificate serial:       010D0C9F4328584F31B7B5D057B5ACB47B402550
Authority key identifier: 37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/92ece1aa-fc26-32cd-9a6d-0b2ab3a65f2a.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     11421
IP address blocks:        2602:f429:50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:b5:d0:57:b5:ac:b4:7b:40:25:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270feb68-f8d6-4567-90e5-6325ba1775d1
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=3b14868a-0712-4e22-bce6-6f5c0c2f10cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:6c:cd:9c:a7:8b:31:0f:b0:2c:b1:5a:65:
                    0a:9a:5e:c1:d9:40:5c:19:3e:8c:25:47:f5:fc:39:
                    c7:d2:1b:a1:92:a9:fb:3d:e9:39:02:44:9b:4c:bb:
                    28:08:b8:c7:95:47:76:fd:2b:9d:a2:1a:3e:90:d1:
                    3e:53:bd:e8:5b:4d:7a:d8:b1:c8:c1:42:53:d7:aa:
                    66:1d:ab:f1:e0:54:4f:64:fb:8f:9a:99:c3:85:7e:
                    fc:d5:d0:37:e7:18:a2:db:1b:e6:87:c4:9f:fd:41:
                    c1:1b:6d:49:25:e2:21:91:45:0b:08:5e:49:a5:8d:
                    6a:e4:3c:21:0f:80:30:e5:ba:30:bb:fd:2d:2a:58:
                    0e:3e:52:3f:8c:bb:57:5c:ef:f0:30:4d:7b:73:c7:
                    5a:17:0b:57:5e:48:9b:76:75:4d:5e:89:42:d1:9f:
                    99:8b:94:3e:4b:da:ce:10:5b:56:d3:b3:1a:9b:75:
                    04:41:cb:d1:15:02:28:72:ea:fc:67:f3:3f:34:9f:
                    1c:08:1b:80:71:e1:c4:d5:4b:42:9d:94:96:28:32:
                    2b:d3:1c:ee:ea:2e:82:0f:e7:3a:2e:b1:37:3b:a0:
                    c9:4a:b7:32:b0:60:d7:14:0d:c9:74:7b:84:a2:00:
                    04:64:6f:b0:33:fd:c5:a1:a2:9c:56:f2:32:96:24:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:22:E0:DB:D9:7F:97:13:96:6C:37:F5:C7:EC:BA:9C:1C:03:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/92ece1aa-fc26-32cd-9a6d-0b2ab3a65f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.crl

            X509v3 Authority Key Identifier:
                keyid:37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f429:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:41:c9:bd:f8:f4:ce:f9:4c:e2:71:27:f9:30:9e:f6:8c:c9:
         2f:8c:da:eb:6d:52:9f:b2:a7:23:00:9a:c5:95:70:a0:d2:e2:
         3b:a2:81:91:e7:6d:2d:fe:d5:d0:01:e2:00:8e:e3:f9:58:17:
         95:39:45:a7:ec:ce:f9:9b:2b:9a:99:84:98:ee:4c:f3:46:a3:
         65:c8:0b:d8:bd:b6:2b:25:d4:ea:9f:a7:ef:57:c2:67:5f:ce:
         85:2b:43:9a:c9:97:96:a5:f4:e8:dc:71:e9:0a:12:c0:bb:b3:
         45:2b:10:00:c3:0b:27:f7:11:ad:b2:7d:24:f7:e6:17:b0:90:
         1a:f3:6a:cc:77:73:6f:91:9a:30:c4:57:7c:40:2b:c1:56:95:
         d7:c2:6c:78:0b:bf:65:1a:f1:b2:2e:e4:b7:d4:ac:df:dc:bc:
         da:83:d7:fe:be:26:29:a4:fd:e4:c2:04:28:71:a5:d9:05:06:
         37:0e:b6:30:51:a7:f4:a4:f3:41:2e:d3:2e:a5:b7:d3:8b:b1:
         46:2f:31:fe:90:c2:87:41:6d:42:ae:94:64:68:e4:62:98:ee:
         88:e0:7e:cd:5e:5d:de:bb:bb:bf:25:ae:00:bf:f1:d4:32:08:
         0a:16:44:8b:c2:c2:d2:7d:d0:3f:86:bb:a7:03:fb:10:85:7e:
         be:81:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:09:49 2026 by rpki-client