Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa
File:                     896b036b-108b-332b-bc99-80c95a5b6278.roa (raw, json)
Hash identifier:          aDwbrWpy0/rH4KEBCXuID6Wic1AxWTeoggDZDw7PZ6Q=
Subject key identifier:   F8:48:BD:19:98:A0:6D:13:7F:44:55:A2:A3:8E:F5:1C:FF:9E:F2:87
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584F4973E27FC3C582DFB560DF00
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400587
IP address blocks:        2602:fb95::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e2:7f:c3:c5:82:df:b5:60:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98034daf-cebe-4592-b959-3ee0eee41c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:0e:03:02:fb:80:93:e0:0c:fb:86:02:6f:
                    86:61:49:f9:65:c9:df:1d:2f:d0:46:8b:ea:30:79:
                    dd:ef:d3:33:4e:6c:14:7f:a7:d9:3b:42:f8:36:0b:
                    28:62:49:00:65:4d:73:74:db:de:92:0d:d0:22:55:
                    c9:ab:35:97:4b:b9:79:2c:a7:3c:d6:22:18:56:ee:
                    d7:44:0d:93:ac:33:87:fd:bd:2c:90:12:e2:b6:82:
                    07:ea:e3:ab:b0:da:33:d4:05:52:6b:67:56:a5:8d:
                    62:40:dc:89:df:89:7d:51:3d:46:c4:ad:6f:ab:59:
                    8a:d2:d8:c6:ed:0a:e5:2c:c9:72:90:56:3d:75:8c:
                    d0:03:5e:c6:81:cc:ad:9c:56:83:7d:6b:70:c0:5c:
                    9e:37:a5:40:45:19:17:a9:6e:b8:1e:cd:57:fe:3a:
                    32:10:47:e4:62:f8:f8:12:c4:8b:ee:ab:f5:c6:0e:
                    45:2d:64:b8:0a:18:2b:40:b6:fe:cf:11:8d:28:82:
                    ee:28:91:c4:62:11:c8:37:43:39:58:d1:47:70:93:
                    dc:be:73:0f:4d:cf:53:00:6e:80:d9:1f:4c:3f:c3:
                    3d:c0:62:33:80:cb:c7:59:11:da:c1:77:e5:69:1a:
                    27:41:f5:8f:d6:c5:ff:e2:76:a2:48:fb:a3:d3:ad:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:BD:19:98:A0:6D:13:7F:44:55:A2:A3:8E:F5:1C:FF:9E:F2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:13:7c:74:3f:6d:d0:3b:f7:60:f7:76:61:6a:c8:55:99:
         ca:d8:c7:b3:06:04:53:5e:97:e6:79:8b:28:55:59:27:0f:2a:
         c9:33:12:70:42:34:b8:0c:8d:8c:15:27:e2:74:9e:6c:b3:7b:
         e6:6d:9f:57:54:71:ec:2a:17:23:84:c6:39:0d:46:01:c5:bf:
         d3:ce:47:cc:af:97:d2:f9:97:4a:1c:c9:e9:50:e3:87:7a:45:
         7c:32:8d:9c:60:4e:9f:42:8a:d0:19:26:7e:69:33:b2:be:39:
         ff:14:6a:f4:58:19:3e:a7:36:e4:9b:b0:8c:a0:7f:54:2f:65:
         d8:57:94:3a:95:1b:ce:99:bc:07:ed:04:09:20:2b:46:14:f0:
         16:ba:1b:67:37:87:16:db:b7:dd:87:7c:2a:df:9c:83:9d:cc:
         64:68:5b:00:6c:e3:43:8a:f3:f4:54:b8:88:78:42:4e:65:33:
         6c:43:54:aa:75:5c:bc:c6:38:8b:87:8c:e7:15:78:92:12:7d:
         82:c4:c9:cd:ab:26:ee:76:a0:5f:e9:56:fa:c2:e1:77:39:b9:
         7d:cf:b6:d1:6f:d1:e5:72:fc:88:48:2a:e2:26:13:67:86:3a:
         44:21:92:2d:7b:b8:ec:bc:0f:e0:d2:6d:c2:07:1e:0f:fb:b1:
         0f:24:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:53:52 2026 by rpki-client