Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/d9469618-d0ed-3151-8392-185b3570460d.roa
File:                     d9469618-d0ed-3151-8392-185b3570460d.roa (raw, json)
Hash identifier:          vk8tT3wqp7UKYwN1OJq2zLTFnFsecTVOYJtCm+QdfSA=
Subject key identifier:   91:31:4A:04:46:08:58:09:26:36:9C:18:42:77:B0:86:AA:1A:34:28
Certificate issuer:       /CN=f9962fb0-221d-459e-957d-b8a95fae9d35
Certificate serial:       010D0C9F4328584F8741B97B64094F1E8FBBBF80
Authority key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/d9469618-d0ed-3151-8392-185b3570460d.roa
Signing time:             Sat 17 Oct 2026 04:22:00 +0000
ROA not before:           Sat 17 Oct 2026 04:22:00 +0000
ROA not after:            Fri 15 Jan 2027 05:22:00 +0000
asID:                     402654
IP address blocks:        2602:f382:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:87:41:b9:7b:64:09:4f:1e:8f:bb:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9962fb0-221d-459e-957d-b8a95fae9d35
        Validity
            Not Before: Oct 17 04:22:00 2026 GMT
            Not After : Jan 15 05:22:00 2027 GMT
        Subject: CN=d57c5622-b3c4-4030-8168-a1c86faf4c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:91:ff:79:97:98:d2:83:84:7b:2c:e6:8b:
                    28:77:53:af:cf:58:3e:04:0c:3f:83:ed:fd:4b:c3:
                    0b:47:33:c0:33:aa:78:2f:63:da:1e:8c:7a:e5:02:
                    19:22:ef:75:c0:6a:a3:64:0b:fc:36:5d:4e:4b:57:
                    f7:a7:8e:6f:21:5f:ad:4a:72:9b:a1:16:2f:c3:cb:
                    b7:f2:6a:18:a9:30:cc:0a:00:fa:d0:43:1a:81:08:
                    e7:74:70:5d:e2:d6:3b:c6:5b:c1:26:fa:8c:a5:b4:
                    58:4e:67:1c:ba:8a:65:b7:4a:3a:92:ea:1c:fd:3e:
                    11:ab:a9:fb:58:c5:11:7f:4b:30:64:fc:94:bc:7f:
                    86:45:01:7d:ba:d7:b6:50:11:1a:62:52:30:1e:47:
                    72:9f:76:68:0f:8d:fc:ff:9b:2c:7a:ed:58:0b:ff:
                    08:2a:5b:53:5e:1f:ad:60:6b:7a:67:35:cb:41:8e:
                    6e:58:12:a2:49:15:b9:0d:21:5c:1f:6c:ec:44:bb:
                    6e:b6:6c:15:7f:72:dc:40:17:3e:78:10:ed:3e:9d:
                    8b:e8:ce:a5:ef:4a:b0:92:cd:0d:dd:7b:3b:30:4b:
                    80:ab:1e:a1:02:14:fd:ab:07:ed:cd:21:65:cc:0d:
                    8b:00:9f:34:ca:ff:d4:16:2b:88:7d:05:e9:0f:f8:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:31:4A:04:46:08:58:09:26:36:9C:18:42:77:B0:86:AA:1A:34:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/d9469618-d0ed-3151-8392-185b3570460d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl

            X509v3 Authority Key Identifier:
                keyid:A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f382:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:69:26:bc:39:eb:58:f8:6c:3f:86:e9:63:4f:2e:7f:a4:0e:
         bc:32:0c:0d:d8:c5:48:23:24:30:ec:f4:ec:07:2b:29:d8:a7:
         0f:fa:84:67:9d:1b:60:0d:08:16:12:a1:d9:ee:ca:70:cc:56:
         57:47:a0:f3:86:72:b3:27:36:0a:bf:0f:7b:4e:84:df:c7:94:
         cf:96:c9:3b:b8:0e:cc:a6:03:37:d7:1c:41:85:7d:5f:4d:e3:
         5c:d6:bc:b2:f7:87:4c:c0:58:c0:4d:09:50:36:e5:e8:46:d3:
         c1:89:5d:72:50:c7:9e:d5:2a:bb:5f:95:65:be:c1:3c:cb:8e:
         03:47:f1:27:0d:19:b0:00:42:b3:38:ae:fe:c4:d0:1e:78:09:
         fc:f0:fb:9d:1f:97:d3:15:9e:aa:e8:8c:53:9d:be:2e:a7:30:
         9c:bd:ac:6b:1a:b3:6c:f9:c6:21:bd:54:ef:da:b5:1a:ec:42:
         6f:45:92:43:b1:a5:22:26:69:48:be:ab:66:83:fd:11:34:0c:
         a8:c9:1e:ca:79:5d:a9:b9:28:a4:f1:1d:f5:6b:63:ca:97:e7:
         3b:12:72:2a:09:88:4f:67:14:2e:b2:38:ca:9c:dc:bc:c8:ab:
         e2:e7:b9:ef:ca:74:b8:b3:47:71:80:1d:96:2a:8c:b2:e7:13:
         f6:fc:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:39:44 2026 by rpki-client