Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/f67319b6-e61e-3d7a-be4b-e14eae7e7c86.roa
File:                     f67319b6-e61e-3d7a-be4b-e14eae7e7c86.roa (raw, json)
Hash identifier:          TAxmtRIw8sAr0bluE3NSyxqbADXyFT12Og4KTqIB2pQ=
Subject key identifier:   A8:16:CE:CF:8C:4F:27:D5:1E:D7:50:D4:A6:7D:22:23:81:BF:8C:C4
Certificate issuer:       /CN=47883700-ff2f-46de-915d-654724c2ddea
Certificate serial:       010D0C9F4328584F4987945CFB6DA79620551FC0
Authority key identifier: 69:1B:A4:4A:B0:39:C9:BB:0F:36:74:08:C7:98:2A:3A:26:75:B6:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/f67319b6-e61e-3d7a-be4b-e14eae7e7c86.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11508
IP address blocks:        2602:ff03::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/47883700-ff2f-46de-915d-654724c2ddea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/47883700-ff2f-46de-915d-654724c2ddea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:94:5c:fb:6d:a7:96:20:55:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47883700-ff2f-46de-915d-654724c2ddea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=68986fd3-a33b-4e79-bdcf-fad917c0d846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:75:1e:34:58:f7:6f:b9:ca:f5:34:a2:43:
                    96:3d:8f:6d:34:07:fd:6b:7a:e2:de:60:4d:e2:b1:
                    08:05:b1:c9:f9:7f:e8:d5:92:10:fa:ed:64:74:fa:
                    56:eb:ff:02:e6:ff:da:86:a3:a1:0e:bb:7a:e5:23:
                    b0:f3:3e:df:28:0f:30:a3:f9:f1:dd:bb:51:7b:9e:
                    13:19:d2:53:00:2b:22:4b:09:46:58:25:8b:ab:f2:
                    ad:9c:ca:ab:26:a6:93:45:5d:dd:37:3b:f1:e5:6f:
                    cf:49:b5:a2:9c:b7:cb:b8:d0:2a:2a:ad:71:d8:29:
                    66:fb:4f:e3:81:3b:45:5e:26:df:05:33:f7:66:47:
                    c3:5b:6e:1d:84:d7:32:12:fc:30:4d:23:30:6b:31:
                    62:1b:a5:b3:13:69:85:65:c4:1c:74:fb:f6:be:c5:
                    ec:cc:35:b8:e6:dd:fe:70:7e:33:60:b7:99:5f:7f:
                    2e:9d:c0:04:09:3c:b5:1a:12:b4:69:0e:57:2b:5d:
                    76:6b:18:b2:43:6e:90:c8:22:a2:6b:d1:b6:bf:9c:
                    ba:ce:b4:d2:cf:30:b4:90:99:f4:7c:71:af:9b:29:
                    ad:49:01:7c:79:02:58:e8:b3:c1:83:af:4d:4c:4f:
                    cd:2e:fc:52:80:23:15:0e:72:2a:cf:c3:13:e0:8c:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:16:CE:CF:8C:4F:27:D5:1E:D7:50:D4:A6:7D:22:23:81:BF:8C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/f67319b6-e61e-3d7a-be4b-e14eae7e7c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea/47883700-ff2f-46de-915d-654724c2ddea.crl

            X509v3 Authority Key Identifier:
                keyid:69:1B:A4:4A:B0:39:C9:BB:0F:36:74:08:C7:98:2A:3A:26:75:B6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47883700-ff2f-46de-915d-654724c2ddea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff03::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:e7:c8:70:c0:84:38:c9:99:06:ca:30:27:f1:90:03:77:
         2a:77:11:81:1b:c3:b6:36:03:5c:de:ae:b5:2b:39:a8:07:62:
         25:0f:1a:20:c7:ef:83:e3:80:21:a8:c0:4e:4b:51:1e:62:39:
         c8:32:04:2a:39:2d:2c:5d:39:ea:1e:69:ed:f4:30:ce:58:14:
         f2:a4:3c:85:ae:f0:40:03:e2:f8:12:5f:01:4f:5c:f2:aa:a1:
         6e:1e:84:04:da:78:0b:73:b0:a6:02:50:e5:8f:c9:d9:d4:4c:
         e5:99:33:2d:e9:29:11:81:09:56:fe:a7:bf:79:ec:4a:8f:d9:
         f5:df:e6:1e:d1:9f:25:00:08:52:f0:93:2b:1a:f6:07:90:dd:
         1f:3f:0a:8c:ba:89:1f:c1:8d:bc:11:cc:27:a7:70:fb:6c:df:
         0e:2f:9c:0f:90:db:f8:4e:76:7a:4c:f8:d6:75:f2:74:28:d0:
         76:82:1c:c0:7f:fe:32:96:0d:c4:eb:93:bf:d4:20:51:60:5f:
         28:8a:ec:e6:88:e3:d9:e0:22:23:1e:fe:19:b3:e2:d3:d7:20:
         b2:3c:ad:cb:d2:f6:46:38:12:a1:68:e0:a2:07:20:06:aa:24:
         db:d7:7f:bb:9b:fd:fd:f5:39:d2:9e:87:33:aa:ca:41:56:24:
         82:12:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:23 2026 by rpki-client