Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/28515ed5-e416-3c77-a422-5b573555a1e6.roa
File:                     28515ed5-e416-3c77-a422-5b573555a1e6.roa (raw, json)
Hash identifier:          QpI1mekREMAdHjqyjWLwHPDWg/ulY4trmRoG8bHYkjE=
Subject key identifier:   60:35:3D:47:72:C8:4C:FF:40:93:20:13:6B:4C:B1:1B:62:33:D0:49
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F9952675E069B528B6907B7C0
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/28515ed5-e416-3c77-a422-5b573555a1e6.roa
Signing time:             Fri 23 Oct 2026 15:40:10 +0000
ROA not before:           Fri 23 Oct 2026 15:40:10 +0000
ROA not after:            Thu 21 Jan 2027 16:40:10 +0000
asID:                     63129
IP address blocks:        2602:f87f:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:52:67:5e:06:9b:52:8b:69:07:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 23 15:40:10 2026 GMT
            Not After : Jan 21 16:40:10 2027 GMT
        Subject: CN=5a937610-9603-4636-8c2e-679d9eff8914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:48:18:7b:23:2e:cb:d4:df:5a:94:43:74:9b:
                    f3:93:c6:5f:db:67:ab:de:bc:a0:f9:e8:ee:60:4d:
                    73:6b:a1:3e:e3:ce:84:e4:8e:c4:45:86:3a:8a:05:
                    75:75:8d:82:5c:ec:7c:1b:fe:03:01:7c:26:ec:7a:
                    fd:c1:c6:57:8f:da:1e:49:5d:cb:7c:0e:71:c1:4d:
                    35:04:76:83:a2:fc:0f:4e:b6:10:ca:3e:f3:79:b6:
                    b2:d0:2e:fc:db:f8:1e:54:0c:38:8e:97:fc:6d:e9:
                    39:7c:38:70:2a:61:c0:99:8b:e1:de:97:8e:55:56:
                    36:7e:b3:58:90:89:44:7e:73:f5:9c:b2:57:75:a6:
                    76:04:7e:fc:69:f3:6c:cf:c4:ab:06:23:d6:ff:15:
                    f7:ee:8f:99:1b:a2:5b:d7:63:5f:e2:42:8e:56:52:
                    66:ac:5f:39:9e:ab:51:f1:af:91:bf:8c:0d:2e:07:
                    07:2c:fc:ca:14:c9:18:71:c9:07:f6:de:89:fd:b8:
                    d2:e9:00:cb:0f:db:c1:ef:12:92:cb:1c:44:0c:5b:
                    1e:cc:45:7a:f5:be:7e:a2:82:c6:6e:c2:25:0f:25:
                    f5:4f:51:8e:ce:f8:fd:3f:cc:a2:91:6f:14:74:e0:
                    2d:e9:ac:db:68:12:97:d0:dd:ab:8e:49:a9:ee:28:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:3D:47:72:C8:4C:FF:40:93:20:13:6B:4C:B1:1B:62:33:D0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/28515ed5-e416-3c77-a422-5b573555a1e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:98:ee:36:e4:25:66:29:a2:17:b4:96:c1:f1:42:b3:82:cb:
         d4:ac:93:2a:9e:90:b6:8e:aa:04:2d:57:f1:5f:2f:82:65:2d:
         73:07:f3:d7:18:ae:92:12:8b:f5:5e:08:bf:f1:11:0e:ba:5c:
         32:63:f3:e6:ea:46:3a:f1:55:cc:ca:3e:81:10:a2:5f:d0:17:
         d3:5c:55:48:c3:bc:a1:79:d2:68:11:7d:8e:02:6a:02:20:f4:
         9d:f8:e1:d0:95:46:ee:61:8c:7e:98:05:bd:20:94:c7:84:ee:
         85:29:9a:67:8d:69:6d:9c:c3:5e:d2:0d:68:7c:06:92:b9:ac:
         a0:5b:4e:2f:ac:9a:17:97:13:a9:03:97:c5:d9:11:aa:1f:15:
         a1:1b:a2:1b:ca:53:31:5a:57:f6:a3:12:7f:c7:f7:95:1a:2f:
         49:90:f1:4f:6b:34:e8:3e:b7:2c:99:b5:21:47:b5:4b:7f:a1:
         6d:de:5b:47:9a:5e:44:d2:6d:89:18:41:a7:c8:6d:5e:2b:86:
         49:fb:07:8e:2c:23:b5:5d:27:b5:7c:25:7e:f0:98:e0:9d:91:
         87:4f:98:41:80:20:19:3b:76:82:c5:cf:2d:92:da:49:d5:59:
         af:09:9a:9e:5f:3c:b8:71:bc:5b:3f:60:8e:30:83:1b:61:4e:
         75:2c:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:32 2026 by rpki-client