Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/241218c9-9cd2-35bc-a266-6fdf776abc1e.roa
File:                     241218c9-9cd2-35bc-a266-6fdf776abc1e.roa (raw, json)
Hash identifier:          fCui6TTq1+uP6ELc0nhxawdLIPa+ON6RfhgBwkKksxo=
Subject key identifier:   C3:BA:E1:B6:CA:0F:3B:0D:37:61:8B:CF:78:35:A3:D7:99:72:D5:5F
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F9952678E44CD74488FA4F4C0
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/241218c9-9cd2-35bc-a266-6fdf776abc1e.roa
Signing time:             Fri 23 Oct 2026 15:40:10 +0000
ROA not before:           Fri 23 Oct 2026 15:40:10 +0000
ROA not after:            Thu 21 Jan 2027 16:40:10 +0000
asID:                     63129
IP address blocks:        2602:f87f:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:52:67:8e:44:cd:74:48:8f:a4:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 23 15:40:10 2026 GMT
            Not After : Jan 21 16:40:10 2027 GMT
        Subject: CN=94e724c5-a3af-47e8-b73d-c474376c53de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:8e:00:2d:36:10:39:d2:cd:2b:6c:f1:06:
                    0b:05:41:58:57:b1:8a:9c:a3:ba:e8:3a:fd:71:29:
                    74:a4:83:8a:d8:57:97:f0:9f:e9:32:09:73:bf:f7:
                    99:04:f0:92:2f:3b:ef:40:a1:d2:b4:99:08:6e:9f:
                    8a:95:29:63:04:8b:53:d0:d9:56:05:d0:78:a0:cf:
                    6d:59:fb:a5:f8:de:90:19:83:41:48:f2:2c:ec:ce:
                    ac:a4:8b:56:54:54:1f:d1:ae:ee:6e:44:4e:cc:39:
                    d0:0d:cd:65:94:e1:2a:71:8d:55:28:58:fe:82:e6:
                    99:9a:32:8c:a3:42:a7:11:b4:64:03:95:e0:84:3e:
                    d2:cf:06:26:75:79:75:1f:b5:97:d5:38:03:7a:a1:
                    a8:89:3d:00:18:60:51:73:6c:89:af:de:e9:5a:a7:
                    68:29:69:17:40:af:0f:03:51:ab:6a:be:77:f6:a7:
                    58:6a:2f:8c:fb:da:f0:ee:f9:55:0e:2d:f3:8c:73:
                    60:7a:ec:8c:75:1c:3a:85:02:32:05:01:48:46:91:
                    44:20:8e:69:05:3e:1b:42:47:e6:f4:84:b6:c0:5e:
                    22:3f:b7:4a:a4:be:f0:e5:4b:b8:ce:e1:a9:02:44:
                    b8:2f:b8:b9:6c:37:e6:df:95:63:cf:bc:b8:21:1b:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BA:E1:B6:CA:0F:3B:0D:37:61:8B:CF:78:35:A3:D7:99:72:D5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/241218c9-9cd2-35bc-a266-6fdf776abc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:19:51:87:c9:f7:9a:55:f3:fb:81:0c:47:94:42:8f:7a:
         ae:1b:b1:f0:3e:77:e0:ff:e5:41:5b:ae:96:2d:b3:31:25:f9:
         fe:28:d7:01:9b:e7:e6:bf:5d:bb:23:e8:f7:e7:59:fa:d7:62:
         0c:cc:74:87:48:7b:26:41:53:c5:70:32:1b:a7:5c:af:c1:a4:
         4d:a1:09:fd:66:82:37:81:37:08:bd:cd:e9:dd:52:89:16:08:
         ca:da:ed:89:a7:02:12:88:fb:64:d4:9a:81:ea:55:28:45:d0:
         ec:f1:6c:ae:e3:f7:46:22:3a:ea:e2:5e:8d:f3:c5:a5:c7:f4:
         6d:47:1c:18:51:97:ee:cd:f9:d4:1c:68:0c:91:2d:c5:32:88:
         ac:fa:1d:62:5e:7d:67:e8:9f:1a:20:4b:db:ad:f0:a5:6f:31:
         ba:ed:e7:72:a6:7c:ec:97:80:89:fc:7a:86:c5:c4:9e:41:b2:
         3c:02:dd:0b:a2:db:34:53:44:bf:7f:d5:c5:97:ee:74:57:14:
         41:04:e5:25:a9:08:ec:8f:10:16:5a:2d:1d:52:1e:f9:cb:c1:
         76:e9:3c:db:a5:a7:06:53:4b:33:4e:81:c2:35:69:3a:3f:da:
         91:f2:e0:43:29:57:9e:d6:96:27:37:ca:63:48:55:e4:4f:df:
         8c:22:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:16:16 2026 by rpki-client