Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
File:                     123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa (raw, json)
Hash identifier:          eoihHXOJOMoYVvPAYqPQdvLz+GarTTo4H1aiy9XFZrk=
Subject key identifier:   02:A1:90:9A:40:FA:5B:E9:CE:C4:36:81:24:18:58:69:AB:78:5D:4B
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584F8578743C193F08A816D23C9A
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     13737
IP address blocks:        2602:f895:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:74:3c:19:3f:08:a8:16:d2:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=cbb04fcb-5f19-4a62-84f9-b39d5f94711c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:7b:e0:8c:f7:c3:be:09:15:d4:2e:1f:d0:
                    9a:6d:3d:88:cb:65:d4:e4:42:83:02:9c:dd:83:af:
                    82:2f:88:49:4e:79:53:b6:c9:9e:91:a2:76:98:6c:
                    10:95:75:1b:70:b5:6c:c3:1a:35:f9:e3:38:e8:80:
                    2d:b0:64:3a:36:57:57:0f:c0:b0:aa:c5:08:ea:b0:
                    8e:81:23:96:16:83:94:52:78:95:8f:6e:7c:7a:8c:
                    2c:fe:32:ca:51:b9:28:83:88:54:8b:23:a4:7f:51:
                    c4:05:7c:1d:b7:d5:f4:83:ac:1c:b4:90:21:ce:a9:
                    17:03:19:da:f8:b9:4e:bc:e0:1f:7d:91:d9:0b:93:
                    96:06:62:1e:3b:be:42:8c:dd:70:8b:56:b5:3f:c5:
                    bd:0a:73:29:22:9c:19:cd:e3:43:ea:68:ff:ee:c7:
                    e8:22:31:2d:0c:f2:fe:04:13:9d:b3:ec:0d:eb:51:
                    0f:17:05:a7:b1:ec:80:bf:d3:9b:5e:0e:94:e8:0f:
                    41:65:56:bd:94:56:e3:85:ed:95:77:b4:d6:2c:d4:
                    ab:5b:0a:82:f2:04:15:96:b0:f5:e3:e5:ed:27:1e:
                    8a:0b:c1:8f:dd:9b:11:09:f3:bc:eb:b2:e9:a5:a8:
                    c5:57:f2:a9:4a:1f:67:75:f8:cc:ff:e1:f1:6d:22:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A1:90:9A:40:FA:5B:E9:CE:C4:36:81:24:18:58:69:AB:78:5D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/123fcc03-d289-32d3-ac39-3a5fae6d85bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:94:52:7a:a6:9a:e4:c6:e2:50:74:6c:80:3a:a0:9e:c7:c2:
         65:3f:54:0a:33:9b:d5:3e:52:a9:14:08:a7:2f:f0:6d:ba:1f:
         cc:ed:01:c4:3c:13:c4:03:af:76:d2:f1:2e:42:cd:f3:56:6d:
         f1:d0:46:1a:49:55:df:52:27:a1:44:60:fb:be:f5:d4:3d:15:
         4c:99:c6:c8:2c:c9:b5:14:fc:c5:11:9e:b5:b4:18:1f:53:7c:
         f3:e1:24:c7:37:19:9a:f7:68:19:54:29:25:77:5f:e1:27:58:
         be:5c:07:7c:94:97:38:be:85:7e:1b:39:69:34:22:66:b4:46:
         06:ef:e3:16:db:f3:a1:ca:aa:d4:4f:28:86:1e:cd:e7:5d:a0:
         b9:7a:2f:7d:a4:1b:75:e2:3b:24:94:aa:ad:02:e6:22:a5:74:
         4f:a1:b9:ab:9b:e9:3b:6b:6f:ac:48:29:3c:a2:63:51:07:bc:
         b5:89:9a:da:95:d8:35:42:05:11:19:f6:90:f5:10:23:f1:f8:
         b6:20:85:74:e1:49:98:f7:91:aa:92:01:a4:8f:da:81:a3:37:
         1d:80:3b:14:87:8f:22:93:dd:b1:45:0b:de:f1:4d:7a:e7:a4:
         dd:61:b7:f7:be:81:e6:b1:1d:93:4a:78:61:9e:68:11:6d:d0:
         88:0f:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:19 2026 by rpki-client