Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          SHsYo3zBGbLprtZyyw2eH/XPFNjj40FX7d6zwN6K5JA=
Subject key identifier:   38:D2:E3:CA:A4:76:57:0E:C3:88:86:E7:36:65:8C:07:6F:DC:0A:22
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584F51D2AF77118AA29ED711AD00
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:af:77:11:8a:a2:9e:d7:11:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=8a6191fb-a045-49a9-8c70-50878b285983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:d1:73:51:04:3c:a6:aa:0b:42:31:d9:e8:
                    80:b1:a9:ba:2d:a0:67:78:92:3a:70:cd:e1:2f:34:
                    73:d9:46:50:84:ed:70:12:83:8a:c0:f5:e6:50:af:
                    df:04:3f:00:64:54:8d:08:13:2e:58:1d:af:e8:94:
                    89:fd:e6:bf:ee:56:74:fd:4a:6c:14:4d:be:bb:39:
                    ca:90:cf:f6:a0:21:3a:67:5a:49:41:7b:20:56:1e:
                    7e:e5:0b:53:db:c2:cd:d7:2d:56:84:e4:27:85:ae:
                    b2:c3:cf:8c:07:d9:fc:8c:6b:6a:90:21:df:3a:a5:
                    fe:4a:8e:9a:64:29:07:b8:56:21:ec:43:fb:4e:5a:
                    a2:fd:32:d6:1e:f7:78:dd:74:55:4f:d2:3a:2b:03:
                    ec:0a:f9:53:cc:c5:b4:1b:5e:81:28:cb:df:0f:14:
                    8e:c7:09:35:ee:26:35:25:83:88:29:17:42:19:44:
                    cb:09:e2:ee:1c:90:0b:74:81:ff:80:7f:b0:9a:de:
                    35:40:fe:a8:c4:c3:72:2e:c2:a2:30:30:88:17:a9:
                    08:66:8c:02:e6:cb:68:87:2e:20:ab:79:24:e2:73:
                    0b:47:bf:7d:e7:a8:36:ff:24:2d:3b:bb:84:bb:df:
                    10:1d:10:ea:76:47:f0:ee:5f:17:64:3f:84:66:97:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:E3:CA:A4:76:57:0E:C3:88:86:E7:36:65:8C:07:6F:DC:0A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:67:7b:44:70:fb:b0:1a:e7:a1:ca:7d:c3:41:08:71:26:22:
         a0:c3:df:d6:16:c5:55:4b:50:69:ff:67:18:b6:3a:3b:e0:7c:
         03:9f:fa:ea:74:11:79:f7:a5:c8:f2:92:25:c4:49:e1:bf:36:
         9e:57:a5:1a:97:99:e3:cf:d0:b9:78:99:b5:39:d6:d1:51:83:
         62:fe:66:ac:c0:c5:b3:4f:57:28:af:4e:14:43:fa:80:68:90:
         a7:14:8b:34:6c:98:45:52:f3:ef:f5:8d:bd:8e:e2:39:2b:c9:
         90:40:0d:e4:90:ff:19:22:e0:f3:9b:bb:a9:83:bb:2e:99:cd:
         18:ae:54:93:f1:19:68:6c:91:87:16:ac:35:da:6f:ef:d3:76:
         3b:7e:d6:1a:f6:e5:6c:fd:eb:0d:19:e9:b4:ac:14:5c:28:d8:
         87:0e:af:7e:23:27:af:84:6a:be:94:67:cc:f8:35:17:06:af:
         b0:9d:dd:49:fb:59:58:5b:45:c8:e8:7a:0b:db:23:10:01:b7:
         bb:35:3b:ed:ef:7d:57:c2:b4:15:fa:52:5b:9f:8d:e2:10:ad:
         2d:2c:96:30:08:6a:cb:67:86:4d:23:bb:c1:d1:cf:22:f0:eb:
         79:a8:11:a2:25:c9:8e:fb:d4:09:38:eb:ec:f3:44:98:68:e5:
         cc:0b:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:44:10 2026 by rpki-client