Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa
File:                     897074be-6233-32df-a4ab-14bb263538b9.roa (raw, json)
Hash identifier:          Gr9nJqQyLSZqqzLLZ/SnNsUR+T7PtZTRcSjtJum/abo=
Subject key identifier:   71:5A:4E:B9:0C:C7:76:3D:4E:36:5F:CA:C7:30:3B:E6:60:C0:CA:1D
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F4328584F4973E84959851263B2C1D8C0
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1011
IP address blocks:        2602:fac8::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e8:49:59:85:12:63:b2:c1:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3f5bd424-3da3-444a-91dd-3402f698d348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:3a:f2:c9:2e:25:c0:cd:24:da:d6:ae:6b:
                    cb:ad:e6:1c:96:bf:52:97:36:04:06:9b:76:b0:26:
                    08:95:67:bb:1d:64:4f:4e:a2:f7:3e:5a:a2:61:a7:
                    b5:75:fe:4c:6b:45:1c:ac:d8:04:ab:e8:66:f0:17:
                    c9:29:fd:1c:01:b9:6d:3f:42:9d:7b:0c:de:7b:4b:
                    a9:18:45:53:1f:c4:98:a3:2e:db:59:8c:aa:35:45:
                    bd:40:23:15:3a:26:00:f7:e3:3b:64:af:99:65:01:
                    14:c4:0d:e0:37:a1:d5:18:e3:bb:c8:61:af:d7:f7:
                    97:53:3a:c3:ef:ee:58:4b:f7:a7:8d:26:ba:57:52:
                    c5:66:5d:b0:9d:21:32:cd:fb:cc:d9:aa:0a:2d:96:
                    ec:d7:d9:01:b6:26:10:3a:02:37:06:f8:49:db:b4:
                    0d:44:9f:ab:34:8d:9c:fa:d1:b1:76:ef:fe:9a:8b:
                    22:dd:52:ab:9c:4a:f2:24:2a:95:5f:a5:32:50:5d:
                    03:4e:00:0a:39:e3:04:2c:d5:5a:a4:85:6b:38:a4:
                    e4:5c:0b:52:92:09:56:1f:95:0c:ca:4b:bc:64:a3:
                    c6:b1:e0:84:14:d1:ca:c0:4c:50:61:f3:35:bd:41:
                    68:8a:09:9a:29:34:21:9b:39:20:df:af:e6:61:45:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5A:4E:B9:0C:C7:76:3D:4E:36:5F:CA:C7:30:3B:E6:60:C0:CA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:54:d8:56:89:26:00:d0:86:a1:fe:ad:b8:06:5e:3e:d4:
         34:24:2d:5b:0d:24:f8:76:8f:aa:28:a7:6e:91:6c:58:e3:a4:
         33:ee:4b:f9:2f:80:5d:6a:36:7b:fd:0f:74:bf:65:7d:73:38:
         e4:51:88:72:23:11:f9:75:8d:36:e4:43:fb:af:f1:89:1a:56:
         d1:2a:3d:16:42:7e:f1:26:00:40:61:82:43:36:1d:3c:70:42:
         ed:d8:97:d6:ff:47:df:d5:f2:89:18:b8:60:26:da:d6:1d:7d:
         76:01:be:05:d2:f7:38:a0:de:15:6a:48:e0:d3:b9:02:65:ff:
         5a:6b:54:81:72:40:12:80:e5:44:d3:03:4e:31:3e:7c:af:68:
         ad:e0:2e:76:a2:96:cd:4f:12:c6:21:e7:50:4f:7d:5a:d5:27:
         e8:7c:42:e9:c4:b2:bc:44:7a:14:af:24:cc:0d:42:e9:a5:dc:
         37:f0:23:47:ca:e4:f3:41:f4:66:7f:6f:2b:66:eb:2a:94:20:
         06:ec:b0:12:88:75:fc:6e:ea:37:d9:cf:40:ae:47:69:b6:61:
         4a:ee:2f:6a:0c:6d:33:61:ed:9f:c6:e7:04:a2:a6:a5:ec:14:
         19:b1:1d:76:5c:7c:f5:d2:e9:ff:96:c5:b5:d6:8b:85:81:17:
         5e:59:fd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:51 2026 by rpki-client