Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
File:                     68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa (raw, json)
Hash identifier:          w3Nks/l7XDYREEzMyMucNtuLMyqdbvs0bLKGX23zswE=
Subject key identifier:   75:B5:7B:F1:DD:5B:E7:BE:91:49:F3:98:19:DA:64:39:20:09:74:3C
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584F49773B22A726C7EC1C53AE00
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399870
IP address blocks:        2602:f7a5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3b:22:a7:26:c7:ec:1c:53:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cabf898b-cc58-42d8-b9cc-55659af7b26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:4e:31:e4:52:fc:de:5c:ae:64:fc:cc:1b:
                    23:89:68:0a:2e:95:13:9e:db:94:7a:d0:17:6a:de:
                    fb:ec:b9:fe:8d:08:8a:1d:e2:89:38:f5:c6:9c:8f:
                    a0:c6:ea:87:eb:7b:1a:e9:9b:ab:8d:7f:34:a4:a8:
                    fa:03:92:c6:dd:21:86:d2:94:10:9c:9e:5a:83:e0:
                    eb:fc:80:ab:a8:09:e0:a6:98:51:3a:ff:df:63:2f:
                    56:c1:7b:ac:f8:03:c4:ee:c6:d5:ac:65:fc:fe:ba:
                    15:d1:90:2d:8b:7d:33:04:ff:bd:6f:45:df:c5:30:
                    f0:bf:d4:e8:c7:11:b9:3b:56:d9:64:9c:a1:c0:af:
                    60:a4:08:9e:80:dd:6a:95:1b:7d:77:e4:48:3f:44:
                    a4:66:c5:15:c3:9d:f5:35:cb:0f:30:fe:bd:74:a5:
                    d3:f5:a7:69:75:c5:f1:bb:e7:7d:3f:10:25:8d:72:
                    e4:84:fb:ec:9f:0c:48:b1:be:07:10:08:37:78:c7:
                    a9:2d:4a:8d:28:36:49:d7:a6:27:73:90:2d:74:04:
                    4b:64:d4:38:66:36:f8:30:3a:03:d9:c4:0d:b8:33:
                    80:ab:0b:1d:71:d5:e0:ae:96:0c:b5:b8:73:e9:53:
                    89:a7:ee:a1:54:70:5a:98:31:2b:5f:b6:34:e4:62:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:7B:F1:DD:5B:E7:BE:91:49:F3:98:19:DA:64:39:20:09:74:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:6a:7e:ec:ce:b6:75:90:e5:2c:4c:0f:07:67:4a:98:bb:
         70:ca:33:3c:9c:e1:96:b3:59:4f:45:cf:d8:78:59:5f:15:9e:
         09:f5:03:a4:fc:a6:af:5f:ff:48:19:17:b9:36:06:5a:a6:be:
         6a:e1:1c:92:7e:62:29:98:d6:7e:d4:52:2b:32:86:15:f6:49:
         78:51:87:5d:20:b0:e6:3b:50:5f:45:e6:88:44:3c:89:ea:03:
         89:20:c5:3d:19:c3:cd:ce:b6:19:b8:4c:2d:cc:20:26:a9:ee:
         58:be:bb:be:93:ac:ce:78:26:d7:e0:77:69:20:e4:9e:dc:29:
         19:2e:01:81:ad:8c:da:7d:2c:83:4c:b6:88:c4:8f:ff:4f:9e:
         b7:15:06:cc:b3:1d:25:9f:84:c0:14:e1:ab:90:85:b3:a2:e9:
         64:51:e2:91:c2:d7:d2:1d:71:4a:cc:26:cf:2d:93:6a:3d:11:
         5e:c6:20:f5:c9:4b:a9:a6:03:e0:1e:fc:a4:4d:4e:75:2a:16:
         9d:d2:68:fb:4f:a0:32:38:90:b7:4f:dd:06:a9:bf:9e:e5:a2:
         b1:c4:12:7e:ff:42:a3:71:d0:40:3b:9d:82:6d:23:16:31:10:
         6b:f5:2f:7d:eb:7d:7a:b5:29:97:60:e0:91:8c:bd:09:65:7f:
         b6:ed:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:43:29 2026 by rpki-client