Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2/6286fb20-e8b7-37b7-af86-ae49f161efc4.roa
File:                     6286fb20-e8b7-37b7-af86-ae49f161efc4.roa (raw, json)
Hash identifier:          g1rYVMXbX+hBjiRGOjt/7d4mp7veMOIj4+aX4KhXL2Q=
Subject key identifier:   87:29:DA:D0:D9:C1:D2:3D:8F:A3:69:B1:3C:91:73:92:3E:09:BC:F9
Certificate issuer:       /CN=a92cf697-d44d-47dc-aa07-e72f553830d2
Certificate serial:       010D0C9F4328584F760574F77F03073752B9F3C0
Authority key identifier: 08:A4:5C:03:84:CA:E8:52:E2:E0:96:F1:E2:EF:E8:1E:C9:74:A4:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2/6286fb20-e8b7-37b7-af86-ae49f161efc4.roa
Signing time:             Sun 11 Oct 2026 00:11:50 +0000
ROA not before:           Sun 11 Oct 2026 00:11:50 +0000
ROA not after:            Sat 09 Jan 2027 01:11:50 +0000
asID:                     403036
IP address blocks:        2602:81f:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2/a92cf697-d44d-47dc-aa07-e72f553830d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2/a92cf697-d44d-47dc-aa07-e72f553830d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:76:05:74:f7:7f:03:07:37:52:b9:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92cf697-d44d-47dc-aa07-e72f553830d2
        Validity
            Not Before: Oct 11 00:11:50 2026 GMT
            Not After : Jan  9 01:11:50 2027 GMT
        Subject: CN=d28113d2-26fc-4f62-9027-e1a3a845b2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:51:c1:d5:23:50:e9:e8:72:69:bd:0e:58:
                    35:fa:f9:4e:46:48:09:31:e9:26:f7:1b:52:4c:2e:
                    a9:3c:2e:1f:5f:a3:9e:1f:6b:6f:b9:ef:62:91:34:
                    3a:1d:b2:ca:23:a4:c1:09:66:92:99:d2:79:ea:68:
                    f4:18:c2:48:44:a3:95:75:e2:01:8e:ce:6c:3a:e0:
                    23:32:66:d8:3a:35:b9:af:82:b8:19:0a:e1:e3:e5:
                    a3:98:56:e5:3e:57:41:5e:d1:84:1e:af:77:63:ac:
                    c6:90:22:33:10:a1:13:dc:ba:9e:48:42:4c:80:1e:
                    4d:df:d9:79:02:84:cd:2b:e1:3d:97:b9:f0:f0:74:
                    3b:c6:57:1a:c5:72:03:85:31:d0:c4:30:62:72:48:
                    cb:b0:dc:2a:27:8f:84:50:fd:59:a6:7b:76:42:1c:
                    0d:eb:e3:6f:57:c3:f1:69:5d:25:7d:45:9c:ec:b5:
                    f3:cc:22:90:6a:e2:41:71:b9:1d:e8:de:be:84:25:
                    44:88:2a:81:f4:19:76:b5:d2:d5:da:ac:a7:d2:73:
                    cf:21:f7:a8:20:c6:e6:73:c7:93:be:01:e4:12:47:
                    5b:28:4e:86:86:c5:09:92:f7:6f:c8:85:52:d0:05:
                    29:92:6f:a9:58:19:43:78:35:f8:a3:b2:26:dd:a1:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:29:DA:D0:D9:C1:D2:3D:8F:A3:69:B1:3C:91:73:92:3E:09:BC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2/6286fb20-e8b7-37b7-af86-ae49f161efc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2/a92cf697-d44d-47dc-aa07-e72f553830d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:A4:5C:03:84:CA:E8:52:E2:E0:96:F1:E2:EF:E8:1E:C9:74:A4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a92cf697-d44d-47dc-aa07-e72f553830d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81f:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:b9:96:2a:33:d9:52:20:30:04:a4:11:98:4b:a7:83:08:
         21:9c:07:3b:b2:6a:58:11:32:8e:bf:d2:ff:f6:e5:79:07:0b:
         06:f4:5a:78:85:72:85:26:ea:29:ef:16:3b:92:69:83:cc:79:
         85:c7:9b:e4:bd:b0:8a:6c:60:a9:4c:2e:24:b6:c8:f8:74:2a:
         e9:4b:8e:b1:20:c2:93:05:0d:a6:d5:34:24:f9:a2:9b:69:7d:
         34:12:35:46:ac:4a:dc:b6:c4:66:dc:e6:be:1b:4f:1c:7c:35:
         70:68:94:19:12:18:a7:53:a4:8a:9e:3f:83:fa:b8:38:0a:8e:
         28:a6:3a:e7:a2:04:dc:00:8b:8c:df:06:a6:5c:ed:37:aa:1c:
         46:e9:f3:96:b6:b9:fa:58:50:8f:89:04:6c:13:23:7a:f7:20:
         7b:20:f2:54:2a:2b:95:d1:1f:2e:23:51:6d:eb:3f:fb:b4:3c:
         66:42:fa:a7:08:24:ce:fb:fb:3c:9c:e3:e3:f7:2f:c8:ea:3d:
         be:09:4f:ab:98:3b:f5:e6:7f:bc:41:22:84:51:4e:f2:31:0a:
         d3:50:93:ea:4c:2c:f8:b7:bc:0f:22:25:71:5d:24:28:50:38:
         19:3d:11:e8:55:f4:94:f2:11:94:5c:1c:db:2a:cf:46:8f:ce:
         4f:76:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:29:59 2026 by rpki-client