Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
File:                     e88df447-48d4-3683-8210-be5c56e4acde.roa (raw, json)
Hash identifier:          qaCS8CxiWQJSEc0xHmuYpRCyPD54V9ca3nKcApnq/Mo=
Subject key identifier:   48:92:8C:0D:1F:A6:A9:29:8B:B2:C8:BD:F8:4F:9C:4F:A7:58:6D:11
Certificate issuer:       /CN=856d400d-4340-4d39-9ec7-38c840be48be
Certificate serial:       010D0C9F4328584F1467A6103838648FD2329A20
Authority key identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     213339
IP address blocks:        2602:f8d1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a6:10:38:38:64:8f:d2:32:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856d400d-4340-4d39-9ec7-38c840be48be
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=91eb873b-ef91-4074-a7d7-4098a09fd6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:f5:d2:f4:86:39:3f:9a:1b:06:71:f3:50:
                    01:c7:31:61:5d:0c:b0:fd:46:21:eb:3e:a9:f9:66:
                    35:f3:bb:ea:d0:ee:44:6a:88:2b:4c:8d:62:54:64:
                    0d:73:27:d9:6d:5e:16:d8:bf:c2:72:ef:33:6b:cd:
                    1c:10:73:5b:41:ba:b9:3f:ca:e8:58:2f:b9:31:f9:
                    7e:03:68:86:2d:67:24:ca:f6:60:1d:7e:e0:28:b2:
                    43:a7:09:25:e8:d3:7a:a0:72:01:d2:0c:09:84:15:
                    d2:81:a4:ce:02:93:88:18:59:47:16:69:87:1a:81:
                    fe:b1:52:9c:ed:8d:22:3d:70:90:f7:3e:58:45:dd:
                    ec:5f:86:67:7d:62:07:83:76:83:30:47:9d:54:1a:
                    9b:5f:da:de:a3:13:8b:64:a7:53:8a:58:ed:fb:26:
                    cc:87:80:a3:b7:55:65:f1:2d:aa:9c:b7:c1:22:62:
                    ac:20:c0:80:21:9f:bc:38:08:8b:05:ea:7a:ab:67:
                    fe:fc:df:5d:3c:7f:b6:6a:65:d9:1d:36:7f:a2:6c:
                    57:b6:18:02:e4:15:cc:1f:c3:af:7d:84:64:a9:af:
                    f3:99:17:ff:5f:f2:36:34:2a:33:6e:76:93:c3:9d:
                    ab:d5:ec:1e:ce:9a:aa:45:ca:d8:e5:26:e0:e3:6a:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:92:8C:0D:1F:A6:A9:29:8B:B2:C8:BD:F8:4F:9C:4F:A7:58:6D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl

            X509v3 Authority Key Identifier:
                keyid:A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:da:58:c0:55:4c:ea:db:3b:7b:4e:a5:96:72:5b:c2:a9:72:
         76:4b:1a:70:d2:91:df:97:88:05:28:2c:c0:49:fc:94:1e:98:
         9e:da:97:3f:30:50:0a:85:71:c7:4f:4f:62:17:61:a2:de:ea:
         f0:bb:1b:84:3d:61:69:4c:15:a5:e8:f5:49:8b:86:49:fa:3f:
         50:d8:fb:cd:2e:d3:6b:0a:8f:16:1e:66:8f:ef:62:f3:f8:1a:
         5d:86:42:19:7f:62:cc:6f:ee:24:6f:c2:2b:e6:1f:11:60:89:
         77:c2:8c:f6:76:5b:bd:88:00:eb:d9:71:b0:47:95:77:91:35:
         76:13:3b:5a:79:3a:25:71:de:3a:fc:ba:14:04:c6:41:0e:61:
         40:f6:b3:4d:06:bf:53:01:13:52:0f:b8:86:29:16:74:b6:d7:
         82:6d:58:a4:c6:f1:72:e7:23:6a:55:06:57:0a:12:a6:71:b2:
         05:d8:14:c2:5e:b7:78:60:02:b0:a6:ab:95:02:57:31:25:73:
         61:50:86:24:0b:3d:a1:f1:a6:c3:e7:48:9d:f0:ba:fc:bc:3a:
         e9:3b:50:4d:2e:49:8b:34:bb:6f:6b:73:59:83:0c:a6:36:35:
         3d:b3:2e:56:cd:0d:7f:e8:cd:f7:ec:8b:28:2e:41:b0:00:de:
         f4:18:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:30:44 2026 by rpki-client