Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/cc2d45e0-9dfb-38b8-b3e0-2368e172209f.roa
File:                     cc2d45e0-9dfb-38b8-b3e0-2368e172209f.roa (raw, json)
Hash identifier:          Unb4jW3Sc/hK+kUgWVOc/08P6zsnMZpxRU251nbuOpw=
Subject key identifier:   67:E9:21:EE:ED:8D:D8:86:2B:AC:70:B1:87:48:19:47:F1:E1:76:86
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584F49873588134771156CB84140
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/cc2d45e0-9dfb-38b8-b3e0-2368e172209f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     215467
IP address blocks:        2602:fa02:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:35:88:13:47:71:15:6c:b8:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a39daecc-e630-4282-b790-0880e380df5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:f5:e5:7c:97:6b:9b:91:b9:60:7d:a3:6e:
                    b4:e8:c0:f3:fb:2c:23:63:dc:3d:71:1c:ac:b8:96:
                    7e:d5:0d:3b:a8:f6:61:97:ab:91:04:7e:0b:34:3a:
                    13:a7:60:25:52:96:aa:ed:33:95:84:43:57:76:24:
                    10:aa:6b:81:81:da:d9:d3:22:91:44:dd:57:99:97:
                    bd:22:26:89:e1:26:e2:24:17:36:98:4c:5a:20:8e:
                    97:f7:e8:94:61:68:93:70:4c:18:c4:b4:56:b8:e7:
                    51:24:48:50:17:0a:ef:73:9c:40:ba:12:e7:fd:7b:
                    25:e2:c9:9a:0d:f6:15:df:50:27:14:3e:c7:ac:78:
                    0c:48:9e:2b:d0:d8:6f:7b:3f:44:9c:b9:01:c3:35:
                    c7:39:13:fc:a4:66:d6:43:40:0f:0d:3e:55:b1:b4:
                    cb:b7:0e:99:32:46:63:37:8d:5f:54:8e:5e:ea:0a:
                    1f:9d:95:ca:40:2f:31:5d:db:0e:a3:5e:c1:98:79:
                    80:3d:bc:ef:59:15:e2:3a:63:f5:8f:51:f6:56:25:
                    34:f6:8e:c6:04:07:39:5d:b9:02:a4:f4:e0:20:24:
                    fc:eb:b9:12:d0:27:53:96:85:d4:69:f6:11:54:81:
                    7d:68:3f:71:2d:bb:30:89:47:33:51:30:3d:d2:59:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E9:21:EE:ED:8D:D8:86:2B:AC:70:B1:87:48:19:47:F1:E1:76:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/cc2d45e0-9dfb-38b8-b3e0-2368e172209f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa02:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:04:8a:cc:f6:a8:f0:d4:8a:6e:7d:8c:0f:53:fe:c3:44:dc:
         0d:b0:f7:d6:33:50:c4:a8:f3:44:78:71:61:9c:c9:b8:e3:e7:
         ff:6e:6c:2d:81:9b:73:97:20:35:af:10:36:9f:7e:58:94:85:
         6d:0e:77:9b:d6:ed:85:f8:1f:70:a9:d3:e2:df:00:50:e8:ef:
         44:5d:81:b5:3d:90:5b:45:d5:db:b6:96:e5:84:92:2c:77:8d:
         b0:e3:67:39:22:45:55:09:38:a9:15:17:f3:11:95:41:0c:a2:
         4e:4d:65:41:59:2d:9f:ae:a1:ca:3b:37:2c:ce:c7:5c:34:be:
         33:0d:32:28:ec:b2:1a:77:14:64:48:fd:e3:c1:f9:b2:e5:ec:
         ca:c0:70:fe:38:f2:e0:33:38:9c:39:3a:1c:e4:89:b6:ed:df:
         25:79:5f:9e:0e:c0:0c:00:45:ae:c8:e3:43:10:a6:e9:95:d5:
         26:23:76:7a:68:20:04:f5:15:5b:76:2e:fe:c6:35:10:62:9b:
         5c:0f:4b:e9:22:5e:d6:73:67:5f:d3:c0:3c:ed:ba:25:10:35:
         f7:e5:a3:92:50:72:02:4b:59:46:0f:69:05:7b:3b:4c:7d:0c:
         90:3a:a4:3a:f9:eb:76:9b:b3:d1:93:86:06:42:91:bd:66:3a:
         ae:9c:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:10:22 2026 by rpki-client