Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/039dc1a8-c529-3974-acba-95b02cdfd42d.roa
File:                     039dc1a8-c529-3974-acba-95b02cdfd42d.roa (raw, json)
Hash identifier:          9vCkldQYneh2JCBY7DYQBPvJUQ0v/exwLeLcHK88C84=
Subject key identifier:   4D:57:C6:38:2A:E1:15:E7:C1:26:13:DB:8C:14:60:A9:AF:20:9F:5F
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584F4977400F97C52C8AC39B1280
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/039dc1a8-c529-3974-acba-95b02cdfd42d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399870
IP address blocks:        2602:f7a5:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:40:0f:97:c5:2c:8a:c3:9b:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f48b8720-4d6d-4016-9aee-7a45d106433e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:d6:39:20:ff:f2:3c:28:0b:6d:fb:5e:fc:
                    5d:52:4c:55:d5:ba:64:6b:83:38:33:0f:98:f6:52:
                    25:6e:8f:fd:b0:da:56:77:61:ae:24:60:db:53:34:
                    c1:19:3e:c9:a4:5a:39:42:10:3a:40:54:53:98:5e:
                    3a:bf:c7:a5:36:e5:b6:35:c0:97:b3:85:6c:7b:7d:
                    36:e6:bf:a4:52:ac:ed:10:27:cb:53:36:e5:fb:c0:
                    7e:5d:3f:35:bc:ac:fc:84:1b:4f:a3:54:6d:1c:62:
                    88:e7:10:fd:ad:fc:e3:1a:65:a5:36:a6:b4:ed:3f:
                    06:55:28:9c:0f:2e:1e:b1:51:9a:fe:bc:92:7a:83:
                    5b:a4:bd:f0:9c:a4:e9:27:18:85:85:5a:90:38:ce:
                    dd:70:bc:e9:96:a5:7b:e5:38:86:2d:c7:1b:96:62:
                    29:f1:9e:1f:50:ac:60:8a:a8:02:9e:3d:a6:62:8a:
                    02:4d:45:29:12:47:93:4d:10:c7:bf:d6:6f:ee:04:
                    19:03:bb:c6:77:89:2b:92:fe:07:25:48:c1:d1:f1:
                    8d:00:b0:11:ee:d1:c8:2d:7d:a2:93:26:ca:c9:93:
                    8d:32:f6:65:e9:0e:87:dc:55:55:10:1d:e9:f2:30:
                    d6:3f:1c:f4:22:43:a1:2f:c0:ed:e9:71:f3:96:fd:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:C6:38:2A:E1:15:E7:C1:26:13:DB:8C:14:60:A9:AF:20:9F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/039dc1a8-c529-3974-acba-95b02cdfd42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9e:62:53:f4:10:bd:1a:a1:b7:d6:b6:55:2a:d5:c8:93:f5:
         e2:ff:89:c9:78:5c:7c:a6:f4:75:1f:fc:db:01:88:62:36:f3:
         12:06:5e:38:dc:6f:76:e8:bd:a9:49:43:e1:3d:d1:09:5d:e7:
         44:79:f9:1e:1e:26:11:ce:b0:7b:96:b0:50:86:4f:df:52:f7:
         a7:2d:86:2c:3f:b8:76:f1:ee:b8:dd:54:bf:af:4c:e7:fd:64:
         35:8a:e4:3c:a8:e9:a0:8e:10:a7:86:23:de:63:89:6c:cc:4a:
         48:79:56:2c:41:53:78:cd:b1:04:eb:7f:77:97:49:38:25:0c:
         aa:8c:05:72:9a:c1:cc:08:8e:42:e6:38:71:94:52:8d:cc:7a:
         d7:50:80:56:8b:fe:5a:26:ab:8a:6f:75:9b:e5:ae:cb:3b:26:
         99:2b:71:22:62:52:4d:32:5d:36:64:e0:e1:e3:d7:5e:88:df:
         53:e0:76:fa:c0:3b:0d:b2:fb:49:4b:ad:2c:bf:80:08:5a:75:
         00:3e:b2:1b:36:84:68:bd:17:12:0e:14:7f:0f:38:91:d8:4c:
         7d:1f:00:61:f3:70:ca:09:57:71:22:b1:cf:a4:02:76:c8:a5:
         8c:64:0a:e0:13:23:93:2d:d8:a6:37:07:c7:ea:41:37:34:92:
         a8:6d:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:09 2026 by rpki-client