Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/56bd4512-b95d-3808-8554-9220c7024fbd.roa
File:                     56bd4512-b95d-3808-8554-9220c7024fbd.roa (raw, json)
Hash identifier:          Bi0A4eMIyULp1e8VNn3PyF3jU5lbIYi/hZYPpm3+giA=
Subject key identifier:   EE:19:76:F9:77:2C:2F:41:A2:8F:CB:61:CF:6C:C2:18:74:67:5E:33
Certificate issuer:       /CN=6510af47-9f04-4f45-970f-534894be357e
Certificate serial:       010D0C9F4328584F8F3DA9A0692AADB563A35F00
Authority key identifier: B8:3B:12:CD:CB:BB:A6:03:63:F0:3B:67:00:9E:33:A4:2E:0D:A7:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/56bd4512-b95d-3808-8554-9220c7024fbd.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     402665
IP address blocks:        2602:f378::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/6510af47-9f04-4f45-970f-534894be357e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/6510af47-9f04-4f45-970f-534894be357e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:a9:a0:69:2a:ad:b5:63:a3:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6510af47-9f04-4f45-970f-534894be357e
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=816c5bd8-c36d-4c72-af0b-82d35659c595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:11:25:5d:3a:b8:14:9c:9d:c6:c0:24:4e:
                    17:5f:62:95:1b:74:fd:34:9e:ed:88:d8:db:73:0e:
                    6a:35:bf:73:ea:ba:00:1f:4c:ad:bc:6d:15:d4:b2:
                    51:6c:b9:d0:c2:af:3c:91:4c:3b:b5:32:65:33:08:
                    ae:6e:6e:73:fe:2b:1d:22:3c:71:ff:0e:ec:32:f8:
                    cb:db:db:60:55:73:5f:8d:8a:7b:ba:88:99:e6:74:
                    0f:4d:cf:e1:36:4a:64:55:ca:50:6e:36:99:3b:48:
                    49:49:c7:35:5c:6d:fe:d8:ee:9a:51:e0:5f:90:66:
                    45:47:b7:b9:66:3c:59:9b:6c:dd:d1:61:30:45:e5:
                    f8:cd:84:b0:c1:ad:c0:36:c8:2a:8d:2c:a9:03:9a:
                    8f:f5:fc:4f:22:91:29:50:8a:0f:ae:c9:90:39:6a:
                    1a:91:60:63:ff:86:b5:8d:3b:df:d5:1e:e0:13:d1:
                    1a:f8:d8:94:71:e9:f6:9d:09:1a:61:a1:61:84:41:
                    b8:d9:cd:f9:00:9f:e9:ef:39:c6:35:82:b5:27:64:
                    54:18:f4:dd:f8:c8:4b:1d:71:a5:11:8c:9f:1b:bb:
                    4b:a7:7e:8c:cb:7c:39:51:6c:da:8c:69:09:25:06:
                    1f:cf:50:7f:20:cc:1b:e6:60:a2:60:75:0c:79:ae:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:76:F9:77:2C:2F:41:A2:8F:CB:61:CF:6C:C2:18:74:67:5E:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/56bd4512-b95d-3808-8554-9220c7024fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/6510af47-9f04-4f45-970f-534894be357e.crl

            X509v3 Authority Key Identifier:
                keyid:B8:3B:12:CD:CB:BB:A6:03:63:F0:3B:67:00:9E:33:A4:2E:0D:A7:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f378::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:86:4a:b4:67:c3:d4:58:89:75:2c:de:13:db:64:ba:0a:
         c6:26:64:57:26:f2:e4:20:25:d4:56:34:24:ea:38:7c:e9:86:
         5e:00:d0:a6:68:12:8c:93:9a:f7:bf:25:2c:8f:51:ec:dd:5f:
         8a:e5:81:96:bb:97:27:3c:cb:e5:fa:b2:e3:c5:cb:57:e3:54:
         41:ba:f4:bc:c8:03:48:7b:8b:16:99:ad:ed:23:f2:36:2b:1c:
         43:da:b7:80:63:9f:c1:1f:09:c1:bd:40:7e:90:41:f8:a8:f1:
         11:e7:fd:c9:d4:dc:5f:1d:22:e3:70:a6:b4:5b:27:c6:3f:90:
         81:9b:a6:d4:ca:d2:48:83:74:86:f0:2b:73:07:77:ca:3c:a4:
         5f:eb:2b:0c:0d:28:5a:d7:7f:4f:31:9c:9a:29:c5:69:30:0f:
         17:cd:41:76:2e:19:ae:7e:57:6b:68:e6:24:fb:d1:e1:26:27:
         a9:59:27:88:84:d0:a4:ae:00:50:4a:82:cf:dd:82:0b:a9:51:
         a8:76:9c:3a:3b:2f:d1:f7:f4:0f:61:e2:a2:37:7a:b9:b6:48:
         eb:51:86:84:b0:dd:af:07:50:78:15:f6:5e:b5:cb:f6:70:02:
         31:38:ef:aa:90:f9:4b:1d:5c:d3:c4:43:4b:df:db:e2:b7:25:
         85:de:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:09:46 2026 by rpki-client