Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/8db8d8ef-e715-339b-bbf6-9e3d1b915a28.roa
File:                     8db8d8ef-e715-339b-bbf6-9e3d1b915a28.roa (raw, json)
Hash identifier:          A2ROPRtAQutEZmenQ/nzL5D+qcm81WL9yrpwAGRH2E4=
Subject key identifier:   DB:3F:F8:C3:71:D6:87:AF:AC:FE:85:2C:00:96:BB:FC:CB:8E:40:E5
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584FA6707B9A3713A0DFC50CE420
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/8db8d8ef-e715-339b-bbf6-9e3d1b915a28.roa
Signing time:             Wed 28 Oct 2026 08:26:16 +0000
ROA not before:           Wed 28 Oct 2026 08:26:16 +0000
ROA not after:            Tue 26 Jan 2027 09:26:16 +0000
asID:                     46499
IP address blocks:        2602:f87f:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a6:70:7b:9a:37:13:a0:df:c5:0c:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 28 08:26:16 2026 GMT
            Not After : Jan 26 09:26:16 2027 GMT
        Subject: CN=4ab708d9-a3f3-4fc9-9351-188ccedff00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:35:b6:bb:a2:24:0f:50:5d:1e:76:da:42:
                    a8:56:1e:5f:20:43:18:41:3c:db:0f:7f:61:91:3e:
                    bb:9a:0c:ad:01:45:f6:a3:53:f4:58:6e:2e:04:60:
                    d3:ff:04:01:cf:3d:0a:c0:0e:0a:c7:3c:80:fb:83:
                    a3:75:bd:59:6d:b1:e8:35:52:0e:11:19:2b:9d:30:
                    92:a5:1c:b8:e1:88:d4:8e:18:8e:3b:63:e6:1d:cc:
                    e6:85:87:bc:3f:4c:e1:55:d9:65:a1:33:d2:27:e8:
                    ab:bc:05:15:90:13:cd:09:57:9c:ef:fd:02:06:5a:
                    35:10:06:e3:b3:c8:98:f5:8e:2a:02:a7:39:ee:d1:
                    e5:f5:83:a2:bd:92:ff:51:02:5b:42:e5:90:e6:e1:
                    3b:69:88:17:41:40:f7:60:bc:5e:48:fe:25:35:fb:
                    53:99:9e:14:eb:64:7d:90:67:59:bb:7c:e2:88:ca:
                    97:a3:2d:93:c9:70:70:ff:29:29:19:f9:1f:c2:ef:
                    13:65:e6:fc:83:47:b7:e3:16:ea:06:eb:00:a9:26:
                    ce:70:0f:91:15:66:ba:16:a1:1e:3e:47:40:50:41:
                    88:81:e2:f2:00:1b:3d:2d:c0:71:6d:f7:36:ed:0b:
                    0f:48:6c:cf:26:90:c7:8f:8c:fa:4d:e2:89:22:a1:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3F:F8:C3:71:D6:87:AF:AC:FE:85:2C:00:96:BB:FC:CB:8E:40:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/8db8d8ef-e715-339b-bbf6-9e3d1b915a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:0d:7d:cc:4c:28:28:e2:f2:4e:6d:47:4e:f0:2c:34:9c:f4:
         5d:3d:c3:73:a0:04:03:a4:d9:6c:f4:b0:eb:9e:2a:5f:92:4e:
         7b:45:b8:e2:4c:61:cd:3d:a0:56:a0:55:13:6a:f1:aa:aa:c8:
         37:f7:04:cc:9c:3a:59:b5:ce:dd:db:b7:e2:17:95:c4:01:a9:
         b4:f8:cd:cd:cb:73:07:a8:bc:ed:f0:57:7c:db:66:f5:9c:f6:
         ae:29:ae:e1:8d:22:7a:04:1b:a9:4d:f9:88:c3:de:19:df:b1:
         d5:43:dc:cd:23:51:77:ca:88:50:81:b9:da:7c:c6:79:84:ec:
         5b:d1:c9:05:f0:0b:1b:02:57:50:3c:fa:ff:e5:aa:f5:75:4c:
         f3:01:1f:7e:98:aa:86:60:5d:e2:9c:42:a8:8c:88:8c:a5:bb:
         7a:01:8a:01:63:da:76:51:34:bd:32:e3:6e:3b:22:07:1b:ae:
         ee:01:6e:66:78:85:b8:70:89:c2:e8:e8:82:f4:b0:5b:0e:7b:
         73:df:23:61:45:f2:4f:7c:54:f1:16:e7:a3:66:2d:03:4c:9b:
         6f:a7:57:e0:ce:d1:fd:56:4f:96:6c:01:5f:e3:02:30:96:8f:
         d4:ab:13:08:27:f1:58:2b:c1:4f:d0:81:c4:f8:c2:ad:56:13:
         f6:4e:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:45 2026 by rpki-client