Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa
File:                     60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa (raw, json)
Hash identifier:          NrjKQUG8ZaRxq0/LwXwdwDhPmjZCJRVRfU1eCKaKok8=
Subject key identifier:   C3:C2:25:B5:54:8B:F0:6F:C2:D0:29:92:76:84:28:0B:09:0D:F0:F5
Certificate issuer:       /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Certificate serial:       010D0C9F4328584F549D51FA5258B44FCA6A8F60
Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7837
IP address blocks:        2602:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:51:fa:52:58:b4:4f:ca:6a:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=e8cd9db9-39e0-45f7-a3cd-a38cf269eb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:3c:80:0f:a6:5a:5e:73:e3:bb:48:6c:cb:
                    86:f4:db:19:46:1c:e2:c9:5b:15:ef:54:ee:bf:47:
                    11:2e:2c:23:61:05:38:49:35:15:ac:6c:78:ad:a1:
                    45:b6:5d:bf:22:ab:78:86:67:cd:bf:9c:02:2f:be:
                    bf:ea:59:8a:cf:ec:2c:b6:e2:ff:1f:8b:b1:89:1c:
                    fc:1a:80:41:49:13:e3:f4:b7:ef:0c:0b:38:1a:7b:
                    ef:05:7c:42:48:48:36:09:ff:5e:4c:a4:12:f3:84:
                    f1:ec:31:c3:61:8d:10:64:2f:46:0a:b4:b6:d8:32:
                    87:8b:2f:8d:3a:79:db:59:20:de:88:6b:cd:77:04:
                    31:db:0d:79:7e:3f:66:b4:b9:bd:73:e1:bd:f9:2c:
                    38:24:cb:cd:d5:e4:0b:a0:4c:27:bc:85:70:18:46:
                    fb:8d:bf:e0:c4:de:2d:47:c5:dd:d8:a5:a1:44:c0:
                    c0:73:a3:7e:68:09:21:d4:97:83:ac:b4:87:ba:5f:
                    75:ee:ef:0d:c0:52:43:48:0a:5e:8b:2a:15:15:37:
                    84:bf:c8:dc:a2:99:b9:ee:82:f7:8a:b1:de:07:a2:
                    94:2d:2c:f8:ff:97:e1:9b:07:b1:25:8a:e5:54:6c:
                    0b:c2:24:23:7e:86:9f:0d:8f:f2:0d:aa:ed:e2:74:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C2:25:B5:54:8B:F0:6F:C2:D0:29:92:76:84:28:0B:09:0D:F0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl

            X509v3 Authority Key Identifier:
                keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:96:36:6a:6b:b2:a4:bc:23:6d:fb:76:d1:81:a9:16:76:
         02:97:79:6c:13:01:4f:07:50:ad:2e:b5:d9:40:71:b4:cc:9d:
         f0:58:a7:e8:91:31:07:71:7e:3d:7e:31:4d:81:68:6d:79:42:
         62:02:86:cd:49:14:62:01:43:6d:94:b4:5a:8e:07:6f:56:f2:
         16:db:84:ed:c7:45:76:bd:3e:d4:bc:29:8f:ae:1d:84:f2:5e:
         83:8c:3a:e2:72:be:d7:f8:b5:c2:e4:b3:d2:66:e3:c0:16:62:
         54:69:d3:83:b7:20:57:9f:76:b5:4e:71:f8:31:74:f2:d4:b9:
         3d:6f:af:ad:1f:bb:11:ac:86:25:ad:f1:c2:49:b6:fc:c9:12:
         9a:11:78:38:2f:74:69:d3:21:b0:ce:45:08:54:3b:6b:0b:57:
         0e:40:33:12:2a:9e:b9:26:ad:1e:e0:15:da:08:ad:eb:11:e4:
         f2:58:2b:20:a0:52:2d:57:0d:4d:b7:5f:3e:cb:37:10:26:7b:
         b3:d3:de:90:b6:eb:e1:21:85:d4:91:87:c5:3c:6e:8b:39:ce:
         bf:e9:70:10:e5:b8:f3:98:69:77:17:df:2a:c0:73:a6:80:2e:
         17:ee:cc:43:8a:ee:0f:37:6b:8f:12:25:9a:22:04:46:bf:7a:
         63:da:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:18:59 2026 by rpki-client