Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
File:                     56ef51ad-5c96-3514-901e-7d87c5eec06b.roa (raw, json)
Hash identifier:          Lg2RxiFFuJPesR/HIKNsS0yqE8416ntd8eBbsJQanfY=
Subject key identifier:   9E:70:17:E2:C2:97:A3:59:D3:9F:FF:7F:0C:88:AF:86:35:55:E9:39
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584F6292DA7EDFD9E4288906DD80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     62517
IP address blocks:        2602:f83b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:da:7e:df:d9:e4:28:89:06:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=9cafcb81-18ba-4ab4-8d93-a9eb5bd573f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:51:b9:a3:4a:0f:f8:76:25:0c:5e:06:6a:
                    b4:ae:91:f1:17:9c:ee:75:2c:5e:25:bf:5e:91:40:
                    71:5b:22:65:1c:af:42:56:58:fd:ad:01:16:a0:0b:
                    ab:16:09:d5:24:6c:df:a0:e3:1e:8e:9b:91:06:ee:
                    7d:e1:3a:8e:5e:42:b2:9e:5f:ac:65:f8:61:83:3f:
                    a4:4d:14:fa:3b:ab:e1:6d:ae:bd:b5:77:41:b1:ea:
                    7d:20:2c:74:97:5c:49:9c:6b:68:75:62:20:44:77:
                    99:82:c4:17:df:c1:68:74:75:ba:84:58:85:10:44:
                    ad:29:76:ad:f7:cc:f3:5b:9f:1d:0a:09:98:43:6e:
                    4d:7d:46:b4:5a:05:46:c8:19:e6:31:83:db:76:17:
                    39:67:4a:c7:0c:3e:ba:1d:d7:56:49:0c:48:78:3f:
                    77:14:23:b7:be:25:bd:67:2b:14:b9:ad:72:e1:51:
                    3d:54:fd:9d:be:a1:ec:55:63:cc:b5:b7:32:5d:6c:
                    8b:8b:e0:15:48:89:28:4b:24:09:a3:e0:4a:07:36:
                    d6:5c:c0:10:1a:ee:29:87:fc:7b:7f:41:1d:7a:30:
                    6a:f6:cd:f7:2e:37:8f:f9:b4:0f:70:7c:d9:63:c8:
                    2c:05:d7:31:73:f7:cc:22:68:58:8d:77:2c:1c:b5:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:17:E2:C2:97:A3:59:D3:9F:FF:7F:0C:88:AF:86:35:55:E9:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:5e:9f:d4:6b:9b:2a:7c:41:f5:82:c5:75:9b:2f:8e:84:
         99:86:90:c8:dc:3d:8f:c8:c5:a4:7d:19:58:81:60:ae:18:22:
         f1:8f:b8:7a:26:1a:2c:40:c3:f9:95:9a:eb:d0:09:0a:cb:ea:
         1d:b1:b8:14:67:91:4e:77:7e:4c:e4:9b:c4:ca:83:d2:58:93:
         60:59:24:d8:fc:bd:b0:f3:58:bb:09:b2:76:2f:57:4f:91:8f:
         59:25:7e:ff:d6:1d:73:95:f2:d5:dd:ad:ef:11:12:e1:c3:e1:
         18:fc:ba:c0:d8:c1:52:0c:6e:3d:6f:a2:55:38:0f:f4:e8:8e:
         53:17:1c:df:77:f3:33:8f:e1:36:07:c5:29:f5:e0:52:bc:fd:
         ca:56:ed:14:64:9a:b2:17:8c:97:65:87:3e:fb:93:d0:4e:45:
         af:61:8b:c6:f0:09:bf:23:97:14:87:db:af:2a:c1:2d:82:78:
         5e:0b:92:22:60:fa:6e:13:fb:9c:7c:87:25:e1:b3:c2:1c:e8:
         83:94:a3:50:55:34:14:9f:0b:02:ab:1e:9c:5e:4b:28:17:10:
         51:60:c1:41:f6:0a:d8:d9:bf:31:01:5f:6f:52:b9:eb:20:c2:
         11:54:e6:2e:b8:7f:a9:17:7c:0f:25:e6:f0:a5:4c:38:e2:75:
         b0:0e:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:03:52 2026 by rpki-client