Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa
File:                     09db9a4d-0e69-304d-b5da-1b70837caac5.roa (raw, json)
Hash identifier:          Ou6HDzRFJpG9mfT7q5cq2wiqOoaEUPZ/aSOQ1VvH5Mg=
Subject key identifier:   E5:F6:86:DE:EF:DA:61:7F:A3:1C:5A:8F:2C:15:0C:EF:BB:AD:70:16
Certificate issuer:       /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e
Certificate serial:       010D0C9F4328584F5FDED9F95F14014D656F9880
Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa
Signing time:             Sat 03 Oct 2026 01:46:16 +0000
ROA not before:           Sat 03 Oct 2026 01:46:16 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397700
IP address blocks:        2602:f826::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:de:d9:f9:5f:14:01:4d:65:6f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e
        Validity
            Not Before: Oct  3 01:46:16 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c94f8165-1a87-4154-b8bd-c855edd6e539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:98:dc:14:09:41:b4:d7:36:75:73:7f:00:
                    ce:99:a1:f8:a5:32:f8:79:98:c0:02:a7:0a:1b:2b:
                    69:90:3c:65:d3:0e:fa:0e:1d:f5:aa:f4:7a:81:10:
                    4b:b8:8a:cc:1a:a1:f1:c8:61:e7:29:70:c1:93:53:
                    f4:2b:b9:31:3b:a0:66:ed:61:3d:76:0c:0c:ee:5b:
                    0e:d4:9d:23:41:44:34:84:0a:85:44:2d:61:c2:44:
                    c3:73:65:a3:34:bc:09:98:ed:6b:4a:75:d3:bc:8f:
                    d8:09:b9:1c:35:25:d1:c0:5e:b7:13:c7:23:9d:ed:
                    ae:7a:29:7c:f7:6d:14:51:10:52:54:fb:ea:7d:34:
                    49:a0:ea:d3:0c:1e:d2:33:a7:58:c7:2f:ea:b8:4d:
                    e4:3d:1a:4b:b3:98:47:65:ed:48:b7:c3:30:32:ae:
                    6f:3e:c5:32:c6:0c:62:32:58:b5:4f:2b:d2:53:ed:
                    a6:83:a8:b3:1d:12:ad:0c:80:bc:6e:9b:45:0d:35:
                    6e:b3:91:b1:51:80:9e:60:a4:7c:f8:1e:90:8c:60:
                    f1:84:41:cd:f7:55:83:e9:0c:f4:ac:23:b1:74:07:
                    31:71:bf:6b:d8:89:08:a6:49:88:fa:2d:15:ce:9d:
                    ed:38:7c:6b:a8:6b:98:3c:aa:dd:27:eb:7a:71:5e:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F6:86:DE:EF:DA:61:7F:A3:1C:5A:8F:2C:15:0C:EF:BB:AD:70:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl

            X509v3 Authority Key Identifier:
                keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f826::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:6e:bc:37:12:40:fb:12:25:8b:a3:ab:45:dc:db:ea:94:
         99:7d:97:8a:4b:e3:20:b3:dc:7b:0f:43:e2:18:be:38:e4:4f:
         19:c1:c6:61:76:bc:e0:45:1f:5e:57:08:c1:6b:8b:94:64:ef:
         8a:6c:25:3c:32:41:2a:23:ac:b2:b5:21:0e:e0:12:2c:7f:f4:
         01:86:0e:84:75:57:3f:40:9c:d5:40:91:79:e8:4a:18:6f:17:
         7f:8d:dc:2e:8c:0d:45:87:f6:c7:00:18:42:24:c4:e6:c3:8b:
         a3:02:ae:aa:c4:39:a9:ce:e7:45:85:fb:9a:e3:1e:1a:a3:d3:
         69:95:8c:1f:d5:57:97:04:cd:39:ba:1a:01:8d:9f:78:88:0c:
         2f:66:aa:a5:eb:5c:d7:d6:1b:70:c1:f4:81:db:65:6c:71:24:
         c7:81:68:98:2d:45:5f:0a:08:0f:e8:71:1a:9f:b7:77:d1:ac:
         95:37:2e:40:90:43:e5:37:62:7a:22:38:e2:a9:dd:37:40:e0:
         a3:0a:87:a2:98:c4:87:ea:44:53:2e:1d:43:63:7b:f0:3c:28:
         c4:9e:6e:5c:a3:96:eb:95:17:8f:49:75:6a:57:9d:b4:69:01:
         50:42:bf:ca:2c:c2:71:f6:3e:ee:f2:3e:71:57:bf:6d:6a:5d:
         8d:fc:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:12:01 2026 by rpki-client