Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/447faf1c-d97f-3375-9605-c58ffb1c57bf.roa
File:                     447faf1c-d97f-3375-9605-c58ffb1c57bf.roa (raw, json)
Hash identifier:          xTxI1a/eVo9ywVFpWzFqGQDkY62pQQLG6ZMhdO0QbaA=
Subject key identifier:   4C:3A:3D:2A:0C:78:73:B0:BF:B1:1D:6B:4F:02:BE:19:5F:A0:4C:FB
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F58CD666E8DA96D27834A7040
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/447faf1c-d97f-3375-9605-c58ffb1c57bf.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     16740
IP address blocks:        2602:f5c1:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:66:6e:8d:a9:6d:27:83:4a:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=18fed348-0e4e-4782-805f-9da0d8b8e7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:1a:5a:2a:68:3e:d7:59:86:a5:74:bc:9e:
                    c0:7e:c5:c2:06:9a:3a:10:5e:bf:b9:48:90:59:93:
                    a7:34:b4:04:10:4b:5d:8a:6e:f0:7f:83:49:d2:ab:
                    91:e9:c2:99:98:ca:bb:28:db:96:76:dd:09:7f:65:
                    f4:3c:63:43:ed:c2:2d:7b:39:80:0e:9c:4b:91:85:
                    49:5a:a9:4a:fb:e1:62:08:68:a2:70:71:4e:bc:1d:
                    d8:84:2b:67:5f:c1:82:12:62:12:b7:9a:e8:4c:05:
                    b3:0b:22:00:a4:fd:51:b7:99:c2:d0:76:6a:60:98:
                    41:b6:db:5f:22:0b:7e:e0:e8:e3:b5:f7:9c:ce:fe:
                    a6:81:67:9a:8e:d0:88:8c:df:40:0e:81:9c:85:14:
                    e2:8c:1a:ad:a1:0d:e1:36:3f:26:29:e3:78:40:5f:
                    75:3c:9f:dd:82:ce:48:f5:13:0e:a5:52:9c:50:e6:
                    5c:f4:05:ea:88:0c:09:71:a1:a1:1d:b0:28:bc:ca:
                    77:2c:b6:90:65:75:d1:7d:a0:3a:9c:bc:3b:6d:d9:
                    0e:64:f8:15:80:7d:03:9e:34:ff:c0:1c:71:df:0e:
                    4e:2a:6d:e3:b4:18:50:99:80:53:07:df:b1:b6:db:
                    8c:f8:fc:43:96:27:91:77:f0:aa:41:63:f2:7a:76:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:3D:2A:0C:78:73:B0:BF:B1:1D:6B:4F:02:BE:19:5F:A0:4C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/447faf1c-d97f-3375-9605-c58ffb1c57bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:db:85:81:40:ff:cf:c6:92:86:96:99:a6:fa:d2:04:ae:
         c3:b8:4a:47:0e:19:46:96:fe:2b:a5:c1:05:10:80:7c:bd:ef:
         34:3b:ae:f9:80:5e:50:01:0f:8a:0d:a4:0b:46:1a:46:6e:ca:
         5f:b7:30:8f:68:88:9a:ff:7a:d7:b2:e1:51:45:b1:5d:71:ea:
         2f:80:4d:c2:2a:c6:ea:6c:93:fb:51:b2:1b:9e:bc:6b:33:dd:
         88:55:c3:ba:60:0e:4d:bf:dc:57:58:51:b8:f3:08:e0:e8:8a:
         8f:b2:36:49:ea:3d:37:44:c9:49:eb:31:09:9f:dc:f1:49:31:
         00:b3:4f:f6:d4:4b:34:82:85:01:b3:4f:e9:c8:48:85:1b:71:
         3a:5f:a6:2f:19:9f:68:90:ad:be:8d:76:d3:10:fc:b1:31:c1:
         66:9f:3d:32:e7:8d:05:19:d4:2a:4d:26:d7:2f:ba:30:7d:e2:
         e4:93:00:12:d7:16:4b:ba:37:8e:7e:a1:84:18:5f:01:19:dc:
         5b:71:72:dc:4c:e4:6f:8c:c2:aa:2c:77:89:ad:c0:15:af:4a:
         c0:15:8c:9c:8c:44:21:2f:cc:4c:0e:9d:a0:d2:30:b8:e3:34:
         b9:a0:7c:97:f8:fa:75:ee:e9:70:41:96:23:33:28:19:99:59:
         30:ba:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:22:32 2026 by rpki-client