Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/ffc766e5-acc0-3a8e-8a1b-229db7905984.roa
File:                     ffc766e5-acc0-3a8e-8a1b-229db7905984.roa (raw, json)
Hash identifier:          iYAzzy2PNBYhM7lXRtTYuvqK1WY9k3DhTgzP8EQIXAQ=
Subject key identifier:   C0:79:5E:F1:A7:45:56:0E:B3:CE:8C:D9:C7:F9:F6:8F:D5:A8:B7:89
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F995267B3AADF50E414A5F4E0
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/ffc766e5-acc0-3a8e-8a1b-229db7905984.roa
Signing time:             Fri 23 Oct 2026 15:40:10 +0000
ROA not before:           Fri 23 Oct 2026 15:40:10 +0000
ROA not after:            Thu 21 Jan 2027 16:40:10 +0000
asID:                     63129
IP address blocks:        2602:f87f:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:52:67:b3:aa:df:50:e4:14:a5:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 23 15:40:10 2026 GMT
            Not After : Jan 21 16:40:10 2027 GMT
        Subject: CN=48ed678c-a487-48c9-83ad-c5a41fc8370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:06:88:70:7d:56:6d:f4:d5:4a:94:de:d9:
                    a6:a2:f1:33:74:2f:11:23:05:02:9d:9c:66:ae:52:
                    56:d6:8c:22:dc:72:81:cc:09:ca:a7:5e:ca:d2:a2:
                    19:cb:fa:45:1a:b1:82:cf:b2:7c:3d:62:24:ac:24:
                    41:7c:a3:a7:1f:e8:a0:c2:31:bb:60:93:f4:03:4f:
                    81:f4:45:42:02:ab:d1:e6:40:db:7f:20:69:8e:2e:
                    1c:35:0e:9f:f7:a9:8a:02:93:86:a7:bc:b0:1c:2e:
                    fe:8a:a9:92:02:dc:b3:fc:05:a0:ce:5c:df:77:6d:
                    10:c1:6d:3a:db:bb:77:d3:ea:85:03:a8:1f:b5:4f:
                    e3:4a:7a:61:6b:dc:9f:13:c4:db:81:64:f2:f2:7a:
                    9a:47:af:b0:b4:0d:d6:df:2f:34:30:fb:d7:15:af:
                    13:ee:16:93:34:0c:50:a2:b4:40:90:02:41:85:aa:
                    1a:09:a5:6c:e9:71:c7:62:05:2e:db:2b:67:7c:08:
                    46:4a:08:bf:55:57:b4:77:57:20:2f:48:1e:e9:4e:
                    f1:7d:46:1c:53:84:bf:cb:a6:64:2a:b3:13:1b:7e:
                    4b:90:4f:ef:06:83:12:d8:9d:22:36:b8:70:97:c2:
                    d0:30:55:0f:8e:7e:7b:b3:a4:70:d1:58:3d:59:d8:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:5E:F1:A7:45:56:0E:B3:CE:8C:D9:C7:F9:F6:8F:D5:A8:B7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/ffc766e5-acc0-3a8e-8a1b-229db7905984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9f:1d:f4:51:6f:e7:29:ff:cb:94:29:d3:7b:04:e4:8e:e8:
         14:98:35:6b:db:97:79:50:05:cd:08:8d:7d:b6:0f:72:34:55:
         26:7f:19:c2:fa:4d:54:93:de:73:14:2f:b7:12:77:93:51:ea:
         14:48:4f:6d:f9:9d:8b:44:48:09:87:ba:e0:38:f5:87:4a:2d:
         27:fa:d5:b7:ad:4d:a7:85:bb:7a:66:23:83:0e:4c:ff:4f:c2:
         ff:f1:10:4e:54:9b:ac:c6:64:07:11:6c:b7:40:a3:83:51:42:
         e5:df:1c:64:e2:49:26:36:b4:30:a6:39:b8:95:d9:5d:1d:96:
         38:7a:cb:12:cd:24:a8:c0:cf:7a:f5:fc:a7:b0:fd:7c:e6:e0:
         b7:36:85:36:eb:6e:16:c1:ce:a9:4e:d0:c7:95:f4:26:4e:60:
         10:99:43:8c:6c:92:1b:18:d2:70:18:20:29:a8:d5:1e:b1:1a:
         d2:bc:2f:6d:d0:c7:52:91:a8:9b:72:bf:f9:fd:98:63:d6:9d:
         4e:ac:59:dd:3f:99:de:c4:ea:75:84:af:87:ba:70:c8:e6:e2:
         cd:53:11:7e:30:9c:f9:fc:0b:e9:7f:21:1a:22:3e:cc:cf:e6:
         00:d0:5d:c8:2d:0b:44:01:b9:23:1f:7a:b0:c3:ec:61:7a:4d:
         8f:cd:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 09:25:37 2026 by rpki-client