Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d/9bcbc6c1-19e7-3866-80ce-cae90819a30c.roa
File:                     9bcbc6c1-19e7-3866-80ce-cae90819a30c.roa (raw, json)
Hash identifier:          Fa5gVW9rMEH7xKeMnhSZppCR6YX2SDIuq9JcTnyllGs=
Subject key identifier:   03:E4:04:A3:5E:EB:12:A0:EE:4B:63:FE:28:D2:C0:8A:57:60:0D:3F
Certificate issuer:       /CN=82e2b446-6e48-49cc-b87c-ad8a0e50c95d
Certificate serial:       010D0C9F4328584F9F5009BA74BD990ADDE42700
Authority key identifier: 61:1C:11:F3:A4:DF:57:E5:05:CC:93:F3:33:74:A6:A6:47:40:20:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d/9bcbc6c1-19e7-3866-80ce-cae90819a30c.roa
Signing time:             Sun 25 Oct 2026 19:10:15 +0000
ROA not before:           Sun 25 Oct 2026 19:10:15 +0000
ROA not after:            Sat 23 Jan 2027 20:10:15 +0000
asID:                     15222
IP address blocks:        2602:fa26::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d/82e2b446-6e48-49cc-b87c-ad8a0e50c95d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d/82e2b446-6e48-49cc-b87c-ad8a0e50c95d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:50:09:ba:74:bd:99:0a:dd:e4:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e2b446-6e48-49cc-b87c-ad8a0e50c95d
        Validity
            Not Before: Oct 25 19:10:15 2026 GMT
            Not After : Jan 23 20:10:15 2027 GMT
        Subject: CN=f257032e-c806-4a1a-b62a-abee7b628e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:6d:74:f9:b7:7f:df:a2:c5:79:df:10:70:
                    20:42:81:1d:4b:29:09:ca:9c:97:ba:aa:cb:19:f1:
                    b4:fa:42:a0:9e:ba:b0:30:2e:94:7d:f9:01:90:84:
                    70:65:d9:65:d4:96:ce:4d:8e:03:5f:52:63:36:3d:
                    e7:9c:1c:fb:29:98:16:db:fb:6e:97:f5:b7:d0:15:
                    74:f9:12:f0:98:64:1b:f7:dc:b2:91:f0:10:2f:c9:
                    64:d4:a3:f6:df:be:0a:ae:10:93:db:d5:f4:82:5c:
                    cf:43:7c:92:46:ce:36:9b:09:a5:6a:02:7c:04:4f:
                    3d:b7:da:cf:1d:a0:b8:64:34:de:a3:50:b7:aa:36:
                    cc:08:77:8b:78:bb:56:f8:06:a6:98:fd:56:1f:77:
                    39:92:f4:e6:bc:89:cd:4a:f2:d2:22:58:3e:94:4f:
                    9d:37:b0:3c:59:4b:55:ab:48:a7:eb:0b:50:d4:8e:
                    7e:bb:ed:3a:5f:9c:8c:0e:26:52:1a:fb:06:db:5b:
                    91:07:ba:ee:47:a4:dc:d4:59:b1:69:a0:7f:ca:25:
                    b9:5f:a4:67:63:e9:3f:af:a2:28:4a:4a:09:9d:9a:
                    f3:27:72:eb:e7:61:f7:d3:ec:c7:06:fb:b8:27:9c:
                    b9:fb:ae:ce:ee:83:74:f8:7f:24:db:34:6e:c9:0e:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:04:A3:5E:EB:12:A0:EE:4B:63:FE:28:D2:C0:8A:57:60:0D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d/9bcbc6c1-19e7-3866-80ce-cae90819a30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d/82e2b446-6e48-49cc-b87c-ad8a0e50c95d.crl

            X509v3 Authority Key Identifier:
                keyid:61:1C:11:F3:A4:DF:57:E5:05:CC:93:F3:33:74:A6:A6:47:40:20:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82e2b446-6e48-49cc-b87c-ad8a0e50c95d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa26::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:20:a4:ba:3c:b6:42:82:8b:7b:fc:ac:c7:94:d7:e1:b6:
         d5:89:5f:a7:76:7c:71:91:c4:cc:af:f1:02:4a:39:d2:c9:c7:
         62:a2:f3:4e:08:57:81:89:75:9a:29:81:d7:73:1e:6f:2c:d2:
         d7:77:29:84:79:fe:f9:c6:f3:1d:a8:1b:b2:84:05:99:bf:86:
         03:f4:41:be:8f:c9:05:35:23:8e:88:8a:87:22:85:99:9e:5c:
         be:b1:22:3b:e4:d6:1a:14:35:0c:f4:92:e9:8b:a9:c9:d7:0b:
         bf:11:a6:00:10:1e:99:71:82:d7:bd:5e:cb:51:cc:ad:7f:7f:
         16:1d:1c:75:f0:46:0f:95:a6:d8:33:48:5c:36:54:44:9f:31:
         2b:b6:14:0b:4e:ba:e8:f9:cc:43:fe:c0:77:cb:16:09:65:03:
         b7:ee:08:02:9f:4e:db:a6:07:d5:a1:86:85:6a:b5:db:ba:85:
         9c:d0:74:20:68:a5:b2:b7:70:a0:b3:00:d0:7c:eb:68:c6:8b:
         8a:53:20:99:49:36:08:36:c0:e1:5e:a1:02:fd:78:35:02:4c:
         75:78:b4:b7:3c:70:c9:8b:dc:ca:3a:2c:01:3b:d8:87:8f:1d:
         b1:53:b8:a0:1c:99:80:70:ca:65:2c:95:9c:c6:63:e4:05:0c:
         d3:1a:87:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:15:15 2026 by rpki-client