Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
File:                     bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa (raw, json)
Hash identifier:          dSGHaPxnu/d2J64Jil421W5y9U9K3XIyogHQvjynLwQ=
Subject key identifier:   0B:1C:E4:58:EE:F3:DD:25:23:FE:6C:FD:D0:F6:3D:EF:74:C4:C7:A7
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F4328584F5A3300709A16935B23AB26B0
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     53356
IP address blocks:        2602:f90c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:00:70:9a:16:93:5b:23:ab:26:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=b1abf0b2-462a-4f98-bb1e-76ae6979c96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:fc:95:bd:9c:b9:c5:b7:fd:e5:93:8b:b5:
                    9e:91:68:65:3c:50:99:52:b7:3c:b1:83:77:7d:a1:
                    a0:59:3b:f7:05:f6:9d:5f:f0:44:81:d5:73:db:b6:
                    ea:b5:5d:76:64:a0:3a:03:18:94:78:9a:20:7b:02:
                    97:39:a2:26:85:fd:61:b0:62:fa:c8:3b:d9:6e:35:
                    bc:9f:3c:65:01:f7:ef:a4:37:7d:b0:5c:79:c0:d2:
                    17:a4:8e:69:e4:df:d2:07:bb:45:0a:5e:97:98:d1:
                    5b:65:79:d9:d9:51:aa:39:ef:9c:7a:f8:13:29:6b:
                    9c:54:1f:ac:27:41:34:a4:ee:d1:23:a5:2e:e7:05:
                    8e:e1:8c:0c:03:ac:cd:f7:cf:5d:fe:97:54:ed:bd:
                    35:ca:42:77:27:33:f3:1f:00:09:4d:cc:23:9d:50:
                    fa:c6:67:3d:54:11:dd:6b:f7:b8:59:72:61:cc:d1:
                    e4:da:2c:19:4e:b9:eb:de:3d:e3:8b:8a:8e:18:d6:
                    6f:87:a5:e4:33:a6:46:c0:bd:64:c7:72:ab:0b:47:
                    c2:c6:79:87:d2:15:69:ba:42:da:e8:ff:e8:fb:f4:
                    42:ee:af:26:9a:19:37:09:14:88:05:bc:4d:31:f2:
                    e3:a2:a7:cb:35:75:63:13:14:20:07:47:22:51:97:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:E4:58:EE:F3:DD:25:23:FE:6C:FD:D0:F6:3D:EF:74:C4:C7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:a4:4a:ea:8e:1e:87:aa:93:ab:9c:c2:b0:74:3e:a4:57:
         58:c1:7a:30:c4:88:11:ea:e4:f6:c8:8c:40:73:6e:1d:25:22:
         a2:ca:4a:1d:7a:fb:8d:9a:89:09:e2:0d:17:b7:5b:d8:20:b7:
         89:c7:6c:45:bb:a9:75:e4:34:d6:c2:6b:4a:c7:ff:49:bc:55:
         e0:89:d4:79:a0:dd:32:b4:1c:ea:d7:6a:ea:64:0d:29:37:bc:
         0b:0c:88:9a:43:0a:af:13:5d:4e:cb:09:9a:ab:a6:8c:f4:83:
         b9:17:c5:16:f3:b8:1b:9d:f6:71:2f:5a:e4:ea:33:d9:ae:db:
         c9:d3:e3:85:a1:5c:7d:8d:b1:7a:b2:b8:32:5f:33:a2:04:b5:
         60:f4:fe:e8:8e:7d:d6:82:fe:05:77:f3:95:ee:ed:77:ff:33:
         b2:76:14:81:58:68:83:e7:1b:3e:95:1b:79:39:a4:fa:92:c2:
         fd:e0:33:32:89:a3:84:d5:e0:46:52:8c:67:b7:87:d3:3c:b6:
         6e:06:69:ad:fc:46:cf:19:b8:18:d7:3e:ed:54:36:c9:a9:57:
         56:db:b9:5d:c9:13:7e:26:0c:28:77:61:b7:f2:33:c3:f5:99:
         d8:28:73:5f:37:09:da:9b:72:5d:fa:88:77:81:84:79:9e:2d:
         0b:f7:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:25 2026 by rpki-client