Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/565ca72c-7c7d-30f3-b1c2-4c7f6fdb1f65.roa
File:                     565ca72c-7c7d-30f3-b1c2-4c7f6fdb1f65.roa (raw, json)
Hash identifier:          bhH0YfRQ6wfBXd4H58CiNaFWpaJzmotN8u25bhlexWE=
Subject key identifier:   AB:A1:97:03:1C:35:69:70:87:80:CF:01:97:98:30:66:C3:AA:34:9B
Certificate issuer:       /CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
Certificate serial:       010D0C9F4328584F6F22F830692C932336134820
Authority key identifier: 8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/565ca72c-7c7d-30f3-b1c2-4c7f6fdb1f65.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     402799
IP address blocks:        2602:f32a:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f8:30:69:2c:93:23:36:13:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=690bc7df-207f-403a-b8c7-c3a7deb985ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:8d:82:0c:45:47:bb:ad:1f:b9:4e:b7:47:
                    79:90:b5:75:60:3d:5f:4f:97:ab:ce:44:3f:45:5f:
                    2a:8d:bc:3c:8e:57:99:de:63:2c:bb:20:56:9d:b0:
                    6d:cd:52:6d:47:9e:2d:4c:a4:ca:00:e3:52:91:a1:
                    cc:2e:ef:ef:28:b3:1f:c8:ac:ee:94:3e:77:eb:34:
                    db:2b:f0:6f:19:62:76:25:19:d1:32:53:9a:13:e6:
                    1f:3d:3b:1d:f5:6b:94:37:ae:0c:b7:6f:8f:e2:61:
                    9c:db:6c:93:4e:9d:52:4f:dd:ce:1f:a8:87:9a:e3:
                    9f:52:03:15:49:00:b8:b9:1c:2c:2c:b4:01:e8:3f:
                    47:da:67:c4:df:18:f5:b6:2a:20:a0:a9:0e:8c:48:
                    f6:78:09:9c:7b:00:9b:16:6a:e9:be:a2:4f:27:e0:
                    fe:ee:42:35:f5:8b:56:3f:e6:78:ce:26:59:83:3a:
                    67:a0:58:f2:40:58:d5:88:19:97:fb:d2:82:33:f4:
                    d6:6e:cc:69:3b:c9:ce:ff:16:23:b0:8a:a8:67:6c:
                    cd:a0:9a:33:cb:38:b3:d9:6b:18:fe:ca:98:4a:a4:
                    0d:0b:01:41:da:fe:f0:4d:86:1b:96:68:4d:bf:5a:
                    30:b0:e1:79:72:e6:55:5c:72:8f:95:48:8a:1d:27:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A1:97:03:1C:35:69:70:87:80:CF:01:97:98:30:66:C3:AA:34:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/565ca72c-7c7d-30f3-b1c2-4c7f6fdb1f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f32a:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:aa:1b:f2:7c:5c:9b:4c:98:e0:f4:1d:64:28:66:bf:13:
         7d:fc:16:a9:d1:50:9e:49:85:a9:cc:18:2b:94:dd:ee:29:2a:
         a4:28:26:fe:0b:d1:78:d5:71:cf:b1:2c:ed:50:88:91:c4:6d:
         9e:ff:f1:f9:e3:b1:a3:7e:c2:37:07:80:90:40:3a:7f:97:7f:
         76:87:8d:fe:54:64:c0:0a:f2:f5:b3:76:7d:ee:89:40:09:27:
         3d:39:3a:bc:ed:1e:1b:81:f7:16:74:71:00:7a:f0:8c:52:68:
         01:e9:40:65:b5:3b:4c:c8:23:c6:a8:0b:9e:2b:6d:67:24:fa:
         ac:46:b7:41:ac:79:0a:36:1e:e8:35:75:0b:4f:d7:75:69:ef:
         97:42:8a:5c:a2:c7:07:95:e0:fb:2d:2e:80:ef:7b:d6:b5:54:
         c8:1a:5c:d1:7f:e3:a3:a7:72:a0:c0:97:59:2b:40:09:c0:d2:
         0d:3f:4e:17:69:33:73:02:0d:c0:c1:16:6b:b7:37:d7:67:3b:
         13:7a:3e:e4:c1:df:69:9c:49:8a:1c:69:8f:cf:44:01:2e:ee:
         37:09:65:70:f4:91:df:5f:08:44:7e:e9:2f:4e:bd:58:74:1b:
         18:ef:f6:ab:af:12:23:91:6b:1b:ee:dd:4c:5c:46:e5:fc:e3:
         ad:85:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:27:19 2026 by rpki-client