Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/c1f9b90a-7114-3568-99ff-0e38c5f5327b.roa
File:                     c1f9b90a-7114-3568-99ff-0e38c5f5327b.roa (raw, json)
Hash identifier:          sqU17LN8cSUsJ9Y1e6iqMZfyklcxLm22jH5pvnaRvuA=
Subject key identifier:   B1:C5:86:5B:48:1B:24:8A:F9:41:03:13:98:4A:4F:B0:8A:ED:86:9E
Certificate issuer:       /CN=69c54836-fbb3-43bf-9e5e-1041e7098f72
Certificate serial:       010D0C9F4328584F067239352F7A0EA566468000
Authority key identifier: E8:63:20:33:D4:32:0A:11:DC:CA:8D:7D:90:F1:36:DF:C7:8A:4A:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/c1f9b90a-7114-3568-99ff-0e38c5f5327b.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396216
IP address blocks:        2602:f475::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:39:35:2f:7a:0e:a5:66:46:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c54836-fbb3-43bf-9e5e-1041e7098f72
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=5ddb1caf-1faa-43be-a9d6-6843d9dea33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:00:f7:7f:1a:ac:85:1b:e0:7b:a4:eb:af:
                    74:1a:ea:ff:aa:9d:04:05:3d:c9:3f:7b:1d:3d:9c:
                    bb:56:56:9f:eb:3b:ac:bd:56:34:a7:a9:ad:0c:15:
                    79:89:b8:1e:2b:68:8d:8d:2c:d8:a2:53:ae:e6:0a:
                    b6:f7:35:80:38:dd:75:36:8f:c6:fb:62:00:d1:0c:
                    f2:14:42:0e:52:8c:a3:9a:ef:aa:32:fb:59:12:a6:
                    fb:3e:3b:53:4e:3a:77:36:73:5f:cc:f7:e5:e5:1e:
                    41:81:7f:f8:7e:cd:fc:4f:cd:6a:a3:cf:83:9a:d7:
                    d4:d3:7d:c3:bc:0b:6f:c6:3a:71:d9:16:28:5c:7b:
                    d1:f4:87:6e:86:46:96:bb:a3:7c:75:2d:9c:7c:4e:
                    4d:25:17:0b:ac:51:fa:b7:80:3d:41:ce:fa:73:aa:
                    39:99:08:de:cd:16:5a:9b:9d:77:92:d1:03:81:21:
                    64:cd:9a:19:7f:97:ee:05:4c:3c:8d:43:8b:81:d6:
                    9c:a8:7e:b7:b8:71:91:e2:02:28:9d:87:a9:b0:50:
                    c5:15:d5:dd:dd:4f:de:0f:ab:3b:af:65:d1:c6:6d:
                    c8:91:37:ef:12:dd:dd:48:e5:39:97:bb:ec:a3:c7:
                    11:79:db:08:f9:6b:29:6a:75:a2:a5:fc:e2:35:ab:
                    24:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C5:86:5B:48:1B:24:8A:F9:41:03:13:98:4A:4F:B0:8A:ED:86:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/c1f9b90a-7114-3568-99ff-0e38c5f5327b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.crl

            X509v3 Authority Key Identifier:
                keyid:E8:63:20:33:D4:32:0A:11:DC:CA:8D:7D:90:F1:36:DF:C7:8A:4A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f475::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:3e:3e:00:d4:6b:87:dd:48:b0:77:34:75:f6:14:cd:9f:
         65:b0:87:3a:2c:02:bc:ac:3d:31:f5:d9:55:c7:bf:6b:83:fe:
         34:12:04:06:74:69:b3:e3:89:47:8a:1a:90:4e:72:05:6d:60:
         28:bb:02:d0:46:5a:93:2d:9a:e0:2b:ec:06:07:a8:77:10:6f:
         3a:7e:4f:d8:f3:d6:ce:bd:04:25:4f:22:e5:af:b9:e5:8f:4b:
         11:2f:e5:e2:c0:21:4e:44:6f:79:fd:2b:a1:82:ba:e4:83:5f:
         f9:d1:7f:34:d6:fb:53:24:cf:60:5f:0b:4f:a2:c5:d3:0e:37:
         36:4c:62:6b:1e:a9:53:13:13:f7:60:ac:a0:73:3f:23:42:c1:
         25:f1:a3:ee:62:9e:80:5d:fa:ec:66:fb:9e:fa:8e:ea:6a:ad:
         38:f1:1d:cb:e2:e1:50:f5:41:5c:bb:64:76:67:1a:46:06:57:
         c1:5e:23:37:0c:92:b3:21:bb:1d:55:78:31:01:cd:c5:a5:a5:
         e7:13:23:49:6f:4e:4c:24:aa:14:8f:a2:5e:ac:0e:2e:b2:7d:
         88:30:dc:d6:9d:28:84:1a:95:aa:aa:29:63:a5:64:d6:17:8d:
         67:4e:76:7e:37:9e:32:10:be:75:db:48:99:ad:94:6f:0a:58:
         0b:d1:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:15:40 2026 by rpki-client