Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/7546c2cf-27b0-39f9-8545-90287647c03f.roa
File:                     7546c2cf-27b0-39f9-8545-90287647c03f.roa (raw, json)
Hash identifier:          uJ74hyaGlk2UcIuijiUKRhEjgRDIH4rCNSx1OMK/uYo=
Subject key identifier:   9A:C2:94:50:76:3C:8F:65:82:1D:81:2D:4B:8A:8F:58:65:F2:75:D4
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584F612D6B7D3CD37BE49DD339E0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/7546c2cf-27b0-39f9-8545-90287647c03f.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     38047
IP address blocks:        2602:f83b:355::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6b:7d:3c:d3:7b:e4:9d:d3:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=6ff3aa10-c275-447c-a6a4-f7d17289e8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:eb:7f:25:4f:b2:5c:1d:8b:d9:0a:91:83:09:
                    ab:de:1a:1c:b0:56:47:3e:a6:83:c4:41:75:6c:f8:
                    83:98:f0:b2:bb:fa:5e:33:4f:86:eb:85:40:58:51:
                    b0:eb:c2:4c:fc:3b:c6:1c:7d:ed:4e:96:de:13:c4:
                    06:57:79:59:f3:4e:b2:92:e0:24:6b:eb:84:c1:74:
                    47:2c:58:cb:dd:d0:0c:8d:4d:99:b2:88:a5:6c:c4:
                    88:f2:53:ef:e4:7b:a2:9e:fb:b4:50:a6:46:a3:9f:
                    c7:48:63:36:26:f3:f5:c3:c0:9e:03:34:79:80:93:
                    a8:04:90:c4:58:a2:40:9a:99:2a:fd:5a:32:1b:3b:
                    7f:df:2a:ee:36:3c:e0:74:da:bc:ad:76:c0:f1:ef:
                    ce:79:b6:e7:53:56:f5:15:11:e6:84:d6:3c:7a:4e:
                    78:ca:88:d8:16:ec:f4:74:78:5c:dc:7e:4f:9e:81:
                    7e:63:2b:b6:b3:c1:be:d5:e1:a6:60:93:e3:52:6c:
                    1e:9e:f8:b8:36:2f:56:f9:94:cb:3a:83:8a:2b:6b:
                    f9:64:85:05:39:71:96:5d:87:d8:b7:6c:bd:7e:ac:
                    73:ee:ed:04:cd:d6:a0:1c:bf:d8:c4:a5:02:55:36:
                    30:b6:8c:0f:b3:c1:e3:3b:63:91:de:fd:b0:df:6b:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:94:50:76:3C:8F:65:82:1D:81:2D:4B:8A:8F:58:65:F2:75:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/7546c2cf-27b0-39f9-8545-90287647c03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:355::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:58:82:69:18:ec:71:be:f1:4a:71:16:c9:bb:fc:39:af:5b:
         75:9b:6e:f1:4c:0d:20:5c:3d:a5:2c:8f:d0:ea:eb:25:37:95:
         b8:ed:b5:49:81:f9:fc:82:e0:5e:ae:de:95:9c:5d:3a:7a:ab:
         c5:61:e7:6e:2c:0f:2a:3e:48:4c:fb:da:ec:73:23:e2:52:0b:
         fb:89:fb:2a:87:62:7f:88:1d:6b:cf:27:d8:da:b8:e6:0f:90:
         b0:30:d6:c0:11:ee:4f:4e:7a:cf:b9:4f:97:ea:7b:18:07:66:
         10:b7:85:0d:52:2b:2d:be:29:2b:7e:0c:5a:c4:5d:59:39:0f:
         ce:bf:94:83:07:ab:cf:7e:69:84:ca:1e:27:88:6e:ec:46:da:
         b2:f6:14:b1:27:b8:bc:d5:45:b1:1c:12:79:98:96:90:16:65:
         81:3d:1f:77:95:aa:2f:4c:a0:4e:00:a1:cb:04:8f:2f:e1:33:
         4e:55:d5:6a:69:d5:15:5d:69:87:0c:c4:20:60:0e:48:e5:8f:
         9d:e7:18:c4:54:fd:0a:66:65:3c:5f:40:5b:2d:b5:48:bc:20:
         b3:7d:58:cd:63:0b:e8:6e:09:22:08:2c:54:6e:9b:0f:6a:b1:
         5d:12:80:98:ec:ac:cb:57:98:a8:7e:65:50:d7:fb:0e:ae:42:
         88:59:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:05:30 2026 by rpki-client