Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797/95f1bf34-0d68-3ceb-96ac-bbdd9cc77d23.roa
File:                     95f1bf34-0d68-3ceb-96ac-bbdd9cc77d23.roa (raw, json)
Hash identifier:          weUwRFWfbiVdnVj93UsOF+HMrfXvcOKpMjnsqJooJGI=
Subject key identifier:   FF:BC:CD:88:26:8F:CC:BD:50:66:C8:56:D3:D2:A0:53:F1:D7:40:8F
Certificate issuer:       /CN=ab21652a-e30b-4580-b96f-20ed5faea797
Certificate serial:       010D0C9F4328584F78E82E282A79AF73A756FA00
Authority key identifier: 9C:B5:51:96:5B:36:CE:E3:8D:5B:AF:57:BD:8B:71:02:35:35:66:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797/95f1bf34-0d68-3ceb-96ac-bbdd9cc77d23.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     398139
IP address blocks:        2602:f96a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797/ab21652a-e30b-4580-b96f-20ed5faea797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797/ab21652a-e30b-4580-b96f-20ed5faea797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2e:28:2a:79:af:73:a7:56:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab21652a-e30b-4580-b96f-20ed5faea797
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=98dfd417-4f0f-48a1-9063-82078a0e4222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:19:d0:2c:b8:52:c3:fb:b2:1b:0a:f2:5b:
                    3b:8a:ab:13:4e:82:0b:3b:6c:a0:ea:67:81:bf:5e:
                    61:58:97:68:1b:71:ad:96:43:e8:38:01:58:85:27:
                    c5:60:4c:80:ba:28:32:7a:fc:66:2d:05:6c:13:07:
                    58:fa:1b:cd:15:62:98:2e:d0:2e:fe:a1:25:d3:3d:
                    6a:76:b3:23:bb:a5:af:3e:5f:ad:ed:0e:04:35:46:
                    e4:fe:3f:99:3b:4f:14:9c:e6:a8:ed:28:bd:b0:1c:
                    f1:46:ca:73:f9:e2:60:a9:2b:1f:9c:e7:2b:04:c6:
                    17:e9:1c:1d:13:31:b7:4c:01:17:7d:7f:a4:3d:eb:
                    5d:bd:37:6e:38:7d:6f:65:e2:43:59:7a:3f:67:62:
                    5c:8a:17:ec:66:fd:aa:f6:04:f8:0b:d7:dd:b8:47:
                    13:2d:de:c7:3f:bf:3a:aa:d7:77:2e:8e:68:5f:d1:
                    c8:3d:8b:17:60:99:17:31:1c:a9:ef:9a:6f:c7:fa:
                    1f:c2:46:46:50:0d:6b:e3:16:a3:75:a2:08:d3:e5:
                    7d:7d:3a:70:9e:2f:3b:3c:eb:12:6b:4f:7d:f5:0d:
                    b2:6d:f4:b9:56:b0:67:3d:47:74:f9:a9:87:54:41:
                    24:c4:98:27:d8:e7:31:2d:c3:f4:79:30:af:f0:fd:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:CD:88:26:8F:CC:BD:50:66:C8:56:D3:D2:A0:53:F1:D7:40:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797/95f1bf34-0d68-3ceb-96ac-bbdd9cc77d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797/ab21652a-e30b-4580-b96f-20ed5faea797.crl

            X509v3 Authority Key Identifier:
                keyid:9C:B5:51:96:5B:36:CE:E3:8D:5B:AF:57:BD:8B:71:02:35:35:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab21652a-e30b-4580-b96f-20ed5faea797.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:41:92:81:48:25:be:c4:ac:0e:cc:0b:3f:cb:74:61:4c:21:
         d2:bb:e4:fa:76:85:4f:85:53:83:25:29:0f:3c:92:27:3b:70:
         04:f2:00:8d:bd:72:ce:0c:b7:69:b0:8f:69:05:55:38:39:0c:
         b6:ad:b3:3d:29:11:46:78:40:45:7d:c7:7e:1a:e9:fd:e5:8b:
         bf:d6:ab:fd:9f:43:3a:5d:a3:98:54:8e:4c:1d:63:a1:2b:17:
         38:4e:2e:c2:5a:4c:e2:99:ac:fe:38:9e:65:41:83:b4:cc:81:
         15:c9:12:21:26:7e:5e:d7:62:be:9c:8e:ea:70:84:8d:f3:91:
         a2:72:01:ad:27:60:86:f1:48:23:9c:8e:bc:48:16:52:2c:ca:
         9b:f4:1a:21:64:7c:24:fa:6a:da:c4:c7:ed:25:29:df:0e:67:
         54:33:8a:64:da:83:df:75:f2:47:b6:47:87:c1:34:14:a4:d8:
         d1:0d:79:fc:15:f0:45:92:1a:01:f2:68:f4:39:35:eb:da:5c:
         2c:78:70:51:26:5c:55:ac:ce:ee:11:cc:ae:20:34:fd:81:09:
         85:b3:73:1c:44:e5:ab:e0:e2:cc:a4:41:2c:8a:06:60:61:41:
         2f:08:cb:7e:6b:27:e3:b6:ed:17:49:2a:ac:88:2c:21:b8:f0:
         b0:53:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 17:41:03 2026 by rpki-client