Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/7f37b900-7a4d-3d11-83e4-9a77945d7855.roa
File:                     7f37b900-7a4d-3d11-83e4-9a77945d7855.roa (raw, json)
Hash identifier:          75bS+/e8/W+4xcjRs18K62OWS8kNPS2IOVrnENoZd3M=
Subject key identifier:   D6:90:D0:EF:7F:F4:59:48:E6:D2:77:9C:45:E5:20:82:8B:67:DF:46
Certificate issuer:       /CN=2b41a59d-bac0-456f-82a5-a12979543eff
Certificate serial:       010D0C9F4328584F89A8449AB7D17D9A7EFA5080
Authority key identifier: 72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/7f37b900-7a4d-3d11-83e4-9a77945d7855.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     64515
IP address blocks:        2602:f4fb::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:44:9a:b7:d1:7d:9a:7e:fa:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b41a59d-bac0-456f-82a5-a12979543eff
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=1451f78a-f056-4102-a863-e4b9634d4521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:92:95:c1:0f:5a:38:89:89:ca:09:35:2f:
                    5a:ed:79:8d:da:9f:19:a5:d2:4c:43:23:32:ad:c4:
                    58:c4:0f:49:c0:97:8a:69:f7:d3:88:dc:38:48:e2:
                    43:4b:13:10:bb:90:3d:c6:df:53:2a:47:19:23:8f:
                    12:21:6c:c9:f4:51:31:a6:a2:b3:7b:95:b2:be:c3:
                    56:4b:f3:3d:9a:e4:84:fe:33:6f:4d:5a:7d:a1:82:
                    b8:91:93:8d:33:9b:20:cb:09:8f:19:4d:9e:8a:a5:
                    0b:47:2c:d9:9e:f7:af:3b:a9:65:56:f7:8b:62:ac:
                    2f:a4:3a:43:c4:67:88:99:3b:25:84:94:fc:9c:e4:
                    44:bb:33:de:33:5b:a2:3d:34:c5:d6:c2:37:af:6a:
                    24:24:60:1f:af:58:fd:86:de:6e:0f:aa:73:3b:92:
                    bf:00:f6:ec:6c:f6:e6:af:39:98:67:7a:fb:b0:da:
                    1c:b2:ae:e5:9e:57:f7:16:41:50:f1:ee:b2:6d:4f:
                    ab:e2:6a:75:e2:9d:ef:aa:75:25:24:3c:bb:fd:ac:
                    81:ff:35:27:9b:de:aa:53:2e:b3:e2:28:0a:ca:87:
                    d1:52:4a:72:b0:7b:80:5c:67:66:4f:85:4b:47:c8:
                    96:96:6c:8d:bd:b7:8a:45:92:a8:97:95:c1:47:5b:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:D0:EF:7F:F4:59:48:E6:D2:77:9C:45:E5:20:82:8B:67:DF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/7f37b900-7a4d-3d11-83e4-9a77945d7855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4fb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:40:6b:7e:6a:ae:01:db:8c:25:43:af:90:09:0f:f7:2c:
         32:5c:1e:18:81:18:93:fc:bc:f9:cc:cd:1d:9b:94:ce:43:ad:
         67:d4:19:d1:f5:b2:96:71:68:58:36:30:11:fe:28:75:11:aa:
         e1:a5:0a:be:9e:5e:d0:7b:d3:5e:09:dd:e6:06:a4:93:85:aa:
         f1:73:3b:b9:9f:f0:6c:f2:cf:f8:e2:e8:77:90:c0:90:c4:25:
         9e:5d:65:29:6e:35:61:9c:41:72:bb:41:11:82:53:74:9f:76:
         f1:aa:bc:7a:da:30:6b:eb:7c:b4:ed:41:5e:d9:8f:df:4f:5a:
         c9:07:8b:d7:6c:39:cf:ea:b6:c9:54:e5:56:fc:da:ec:08:c0:
         00:09:fb:6a:bd:e2:2b:19:2b:d7:47:90:52:87:f3:b0:60:73:
         cd:05:30:1b:c3:83:f7:ed:32:a4:2c:97:ea:b6:c7:37:23:a1:
         a0:36:f8:42:cc:d3:36:de:69:d2:08:33:dc:11:59:a5:11:a0:
         74:bb:a2:59:fc:e1:e2:03:12:72:5d:55:d6:b8:fc:dd:75:9d:
         d4:0d:59:4f:c5:f9:b0:25:25:e9:e0:3e:8b:12:9a:50:b5:00:
         c5:8c:12:a3:e3:1f:6c:99:bc:ba:9a:a9:71:b5:e9:0f:06:81:
         8e:9a:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:11:32 2026 by rpki-client