Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/cfa2666b-5316-3bde-aa82-8f16cbae5e69.roa
File:                     cfa2666b-5316-3bde-aa82-8f16cbae5e69.roa (raw, json)
Hash identifier:          Ntin0763cdyaLIJVw3pMur1owz58HDGcc8ewIWQeTs4=
Subject key identifier:   3A:68:CB:FD:96:7B:66:FD:F6:89:77:FC:2A:47:25:CA:52:9F:11:05
Certificate issuer:       /CN=270feb68-f8d6-4567-90e5-6325ba1775d1
Certificate serial:       010D0C9F4328584F31B7B5613B809947F98B8EC0
Authority key identifier: 37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/cfa2666b-5316-3bde-aa82-8f16cbae5e69.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     11421
IP address blocks:        2602:f429:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:b5:61:3b:80:99:47:f9:8b:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270feb68-f8d6-4567-90e5-6325ba1775d1
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=b9bad2d3-6d7b-43a1-9147-270daeb4ef1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:b5:c0:cf:06:c4:c1:29:4a:09:15:54:41:
                    93:65:c3:b9:80:8b:01:4d:68:16:69:13:77:54:96:
                    1d:78:6e:da:c8:db:d0:f2:81:f9:02:bf:5c:d6:f5:
                    fc:7b:55:6a:e0:db:70:5b:a1:11:ce:51:19:13:e4:
                    66:5f:43:45:99:02:17:70:35:b5:6a:2b:b1:ef:77:
                    a1:be:a5:25:c9:57:75:05:96:b2:c0:8e:86:4a:3e:
                    dd:57:2b:d9:cf:89:74:30:a8:2a:33:c9:23:96:5e:
                    ce:fb:14:a9:c0:52:f5:01:09:53:2f:6d:d7:37:4e:
                    a6:4a:40:44:f1:16:be:35:3f:4f:f8:4d:56:8d:59:
                    9a:83:d4:77:f7:04:9a:cd:2f:e1:f6:1e:0b:57:8d:
                    c8:e6:b2:b3:ae:08:04:6c:13:b5:b9:f0:92:fe:2d:
                    8f:c5:65:c6:66:3d:06:88:fe:a0:3a:e8:d5:bc:a9:
                    a3:d6:a1:2c:f7:fb:26:ff:5f:5a:c1:64:8a:52:7e:
                    1d:c3:4d:9c:e6:cc:1a:67:ac:80:8f:ea:5f:cc:fc:
                    a8:6e:fa:a1:fa:c6:3e:29:0b:1e:51:2a:b8:d8:74:
                    5c:f9:e2:eb:44:39:51:b7:92:b7:1e:72:d4:e8:54:
                    03:c9:86:dd:68:40:9c:ea:19:1f:16:a9:a0:78:f0:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:68:CB:FD:96:7B:66:FD:F6:89:77:FC:2A:47:25:CA:52:9F:11:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/cfa2666b-5316-3bde-aa82-8f16cbae5e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.crl

            X509v3 Authority Key Identifier:
                keyid:37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f429:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:87:2e:e0:60:7c:77:2e:ac:bc:ea:c5:7e:31:90:24:82:
         c4:5c:80:cc:40:44:48:69:1c:5a:53:ec:8b:ad:6f:97:24:15:
         f8:1b:a9:d7:ef:d4:85:d9:a7:58:17:ca:c6:ad:8e:47:3e:54:
         c6:24:06:41:43:95:8e:6a:43:b5:88:84:d4:41:85:53:1a:35:
         79:f0:e1:7c:22:27:d7:55:e3:23:4d:e3:99:76:c1:4e:3b:7e:
         1c:98:5c:bb:51:4e:1a:3f:dc:a1:d1:b5:0e:fe:e6:db:1a:55:
         e4:f7:2b:14:83:47:48:42:65:91:5b:5b:fd:96:2e:7d:f4:43:
         0d:2e:5e:72:24:89:9d:ee:83:52:6d:41:74:b7:75:2f:b3:76:
         d7:5f:bd:27:bc:16:09:f6:c0:66:35:35:b1:ed:0b:bf:c0:df:
         8a:c3:5e:4e:34:60:e4:77:a0:02:55:77:b1:13:e5:a6:ab:4e:
         78:3c:44:ca:d2:31:8e:73:a8:51:32:ba:71:65:6a:47:7a:a3:
         b5:bb:25:95:c9:3c:38:8b:62:54:b6:0a:94:b2:d8:ba:65:9b:
         18:02:0b:38:80:d7:0d:be:6f:55:09:70:9a:09:f5:12:61:c4:
         52:b4:b6:98:a4:e4:a1:eb:2c:96:09:f7:57:9c:52:f1:f2:a1:
         99:47:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:16:59 2026 by rpki-client