Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/6ad60f04-f75c-3c94-a53d-3f172e4462d5.roa
File:                     6ad60f04-f75c-3c94-a53d-3f172e4462d5.roa (raw, json)
Hash identifier:          28NJZPRXzFeOYWi31hLdErSJ9X4xHmimbwzc9ZVXk+k=
Subject key identifier:   49:E3:BB:0F:31:5C:77:49:99:F9:C8:13:CB:11:B5:A1:28:5F:B0:1E
Certificate issuer:       /CN=e20843e1-dc3e-47a6-a0d4-c529ca572b54
Certificate serial:       010D0C9F4328584F6BE6FDEA2BFD87342C4A1460
Authority key identifier: BD:2E:9E:69:35:B5:E0:45:A7:7C:56:B9:B6:F9:97:56:43:9B:47:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/6ad60f04-f75c-3c94-a53d-3f172e4462d5.roa
Signing time:             Wed 07 Oct 2026 09:12:22 +0000
ROA not before:           Wed 07 Oct 2026 09:12:22 +0000
ROA not after:            Tue 05 Jan 2027 10:12:22 +0000
asID:                     402987
IP address blocks:        2602:f2c5::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/e20843e1-dc3e-47a6-a0d4-c529ca572b54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/e20843e1-dc3e-47a6-a0d4-c529ca572b54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6b:e6:fd:ea:2b:fd:87:34:2c:4a:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20843e1-dc3e-47a6-a0d4-c529ca572b54
        Validity
            Not Before: Oct  7 09:12:22 2026 GMT
            Not After : Jan  5 10:12:22 2027 GMT
        Subject: CN=4ac8cf3a-6522-4234-b933-f410216655d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:01:f1:f5:e0:31:78:f0:60:56:d2:4c:96:
                    c1:4a:1b:cd:98:81:c0:6d:f6:23:48:a6:f2:b5:7f:
                    83:c1:d9:8e:6d:29:45:e5:d1:73:74:15:cf:2a:60:
                    35:d2:ef:65:39:bd:e3:72:d6:4f:10:25:bc:28:56:
                    6d:a0:18:e7:5c:26:a2:a6:f5:25:15:cc:7b:c0:3a:
                    af:18:a4:bc:35:11:84:38:02:72:70:8d:b9:f6:65:
                    c6:35:5c:ca:c3:7c:b1:8f:3b:66:c1:4f:e6:63:4b:
                    7c:7a:4f:37:08:d3:c4:e3:aa:1c:75:63:00:ce:b5:
                    74:5f:6e:30:71:47:c4:46:73:e8:6d:f2:cf:80:44:
                    1c:67:af:a0:6a:03:f7:87:69:13:db:4e:48:3b:37:
                    26:d0:0a:af:f8:79:eb:a7:55:3f:e5:a3:29:56:1f:
                    1c:7d:0b:7a:90:61:80:07:17:f5:86:fc:1f:4e:b0:
                    ff:0a:57:96:20:c5:83:86:3c:c4:44:bc:de:4f:9c:
                    20:ec:a9:10:cd:38:19:62:b1:4c:95:f8:d6:72:be:
                    2d:96:37:78:10:c7:eb:81:a1:8a:34:83:71:41:6b:
                    c8:9d:a1:c0:7d:c1:1f:90:a6:8b:13:bd:c6:a7:64:
                    f3:59:ee:ed:7f:d7:63:38:3b:9d:7f:d2:cf:de:11:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E3:BB:0F:31:5C:77:49:99:F9:C8:13:CB:11:B5:A1:28:5F:B0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/6ad60f04-f75c-3c94-a53d-3f172e4462d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/e20843e1-dc3e-47a6-a0d4-c529ca572b54.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2E:9E:69:35:B5:E0:45:A7:7C:56:B9:B6:F9:97:56:43:9B:47:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:96:85:bd:30:2d:79:3d:7e:87:a0:a0:92:63:4d:c7:9c:
         d5:f6:21:89:be:6b:c9:c3:26:3e:c7:d9:40:13:bf:e6:29:b7:
         b9:02:a5:05:85:34:fb:63:17:96:17:0f:e1:51:17:70:fa:7e:
         f1:3a:08:fd:65:55:6e:5a:1e:00:20:90:06:8e:4f:ec:dc:2f:
         85:21:47:e8:b1:6f:46:45:e3:70:88:79:7d:d4:d5:08:b5:6a:
         7a:da:21:69:f5:02:8b:67:d5:f2:00:77:34:77:a8:5c:c5:71:
         35:8b:95:9f:96:64:96:05:64:92:82:bd:97:e3:ba:b0:53:51:
         d2:5c:fc:69:41:7f:d4:3a:4c:6e:ab:43:05:80:05:f4:5d:5a:
         86:e9:66:db:37:bd:f2:c4:b4:65:3a:8e:1a:ae:39:1b:f1:13:
         86:aa:5f:aa:96:33:1a:c7:41:87:1f:63:2c:5d:1b:a0:b3:81:
         8c:fe:c1:54:e1:d2:51:dc:90:79:f0:a9:38:05:de:65:dc:a2:
         bf:3b:04:7e:1e:89:fd:df:cf:30:44:47:87:d7:ee:92:6b:35:
         1f:89:8e:54:39:64:12:52:f2:76:ca:e9:9b:5a:32:22:04:8e:
         a6:ae:ed:10:95:98:f6:07:96:5b:cc:4a:f7:c4:cb:af:f4:77:
         4f:8c:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:17 2026 by rpki-client