Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa
File:                     5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa (raw, json)
Hash identifier:          shg1PVgDGUdCAna63JW37us9BwXXTw1feHlYVqKiV44=
Subject key identifier:   73:7E:67:31:03:57:19:C3:D8:E3:51:95:DD:7F:F7:69:85:FF:BB:12
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F4328584F5E62B9AEF49EED84D6C10780
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     25846
IP address blocks:        2602:f947::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b9:ae:f4:9e:ed:84:d6:c1:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2c41f07f-dd4f-4725-a939-610a33d69607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fb:58:c4:57:56:6f:96:a5:a1:77:a0:32:e9:
                    76:49:32:64:b0:1e:17:53:95:a3:40:65:4e:d0:fb:
                    eb:b9:76:50:0b:54:b5:c3:05:a4:a5:3b:e3:3f:6e:
                    25:0b:0c:f1:05:76:8a:34:73:8a:0b:12:35:75:db:
                    e5:a0:e8:e9:0f:f5:57:b9:da:14:87:af:bd:7c:c6:
                    d8:e9:0c:da:43:cd:41:ff:18:3e:8a:7a:3e:23:49:
                    e7:31:30:62:ae:b4:89:a0:0c:5c:0f:6c:2f:8d:e5:
                    02:5e:87:1e:e4:f5:04:f0:5f:90:51:b0:00:99:5b:
                    1f:78:ad:5d:fb:c3:de:8a:d7:0d:37:9a:29:e3:5c:
                    3a:aa:6d:34:42:2a:f6:bb:29:65:cb:95:65:8d:a5:
                    8e:31:8a:f6:e1:ab:da:ff:ab:f0:41:2d:62:ef:88:
                    dd:3b:7c:9d:31:45:4f:40:a2:94:b0:18:2b:51:84:
                    11:17:c2:ba:72:07:1c:c5:1a:25:1c:39:81:91:7d:
                    5c:79:61:55:ac:38:ae:54:83:c7:d3:f6:47:07:3e:
                    b3:cc:e6:3f:de:7b:56:59:5a:1e:1e:cb:bc:7e:18:
                    72:e2:a9:ae:19:68:cf:77:7a:e6:47:2e:22:0b:1f:
                    ea:20:0a:06:3c:3a:02:99:9a:53:d9:0f:43:48:36:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7E:67:31:03:57:19:C3:D8:E3:51:95:DD:7F:F7:69:85:FF:BB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/5cf2ae30-8629-3de8-86b0-71abc4c207f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f947::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:79:e9:b9:45:10:89:0a:75:04:39:f2:f5:e9:1e:7c:64:
         41:21:d3:cf:64:0b:3a:c8:9b:71:74:8f:ec:e5:3d:b1:48:67:
         08:e8:29:f4:7c:ac:10:81:dc:d1:fa:1c:20:f1:b0:1c:7a:21:
         23:09:80:ac:4f:4e:d5:06:5f:9f:f5:35:0f:2d:d4:c9:e3:fe:
         c0:39:b9:e7:bf:cb:21:d1:1d:cf:60:37:7c:33:e9:de:ec:24:
         95:49:32:02:eb:16:7e:a5:5d:39:79:79:f2:1b:99:45:51:3a:
         52:c2:3f:06:d4:88:91:0a:5c:48:70:50:e4:41:8b:6c:cd:fa:
         cf:20:d3:c3:5f:92:3e:43:45:2c:06:5b:f3:74:eb:e4:cd:21:
         53:77:79:dc:da:f1:59:4c:63:5c:67:df:77:54:10:a4:91:10:
         4f:14:41:34:81:4e:a6:ad:77:e8:72:41:c9:27:2b:bd:ac:8e:
         db:02:ec:9e:7f:75:3b:dd:44:e9:72:57:80:0a:49:6b:39:9c:
         ec:b1:75:89:f2:3c:e5:64:f3:b3:b7:cf:17:85:49:0b:b4:7f:
         00:10:7f:64:cc:b9:57:5d:5a:3c:60:57:a7:91:8f:e7:b7:30:
         c0:02:05:c4:bd:80:62:d0:75:61:27:cc:28:f4:43:55:b4:2a:
         db:9d:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:58:26 2026 by rpki-client