Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa
File:                     1948be53-e17c-3047-b5fd-ce7874d44769.roa (raw, json)
Hash identifier:          YJw2qLjc8uvCZXxsejsWuSkcOEbxO8VOB0/9poK7XWc=
Subject key identifier:   7B:30:97:FD:92:C4:0B:61:34:95:00:CF:5B:77:51:AD:98:DF:10:E8
Certificate issuer:       /CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Certificate serial:       010D0C9F4328584F63F823A3BA8596E8ED5E3480
Authority key identifier: 5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     401147
IP address blocks:        2602:f8ae::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:23:a3:ba:85:96:e8:ed:5e:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=e081223b-2fdc-4802-baaf-a6cecb5635ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:f8:c5:e4:ea:50:8c:1b:cf:cc:93:42:c9:
                    7a:65:2d:f5:56:4e:ec:b5:53:f1:f2:fc:18:8f:28:
                    b6:9f:dd:6d:e6:16:aa:7d:3b:d0:d5:b1:4f:6e:4c:
                    98:17:9c:e2:70:0e:17:dd:84:03:b0:09:bc:d4:b1:
                    c2:36:b6:20:15:14:16:3f:af:b4:17:5b:c1:0e:a4:
                    5b:92:24:8e:e3:0c:85:cd:47:6b:a8:46:fd:69:37:
                    89:de:fb:2d:1f:76:41:53:e1:e2:7b:9b:7e:c7:a6:
                    4b:12:36:d2:39:9e:25:9b:5f:00:2a:6d:46:79:c8:
                    3b:0a:1d:96:57:d6:99:e4:da:f3:76:db:49:f6:e6:
                    18:b4:48:a2:ff:07:ae:4e:b7:7f:fa:29:7d:2b:57:
                    50:c5:39:73:2d:b6:60:2b:5c:c2:ee:5d:62:27:32:
                    22:e1:4d:43:d0:34:55:e3:40:7c:45:14:47:6a:29:
                    eb:54:3f:ec:12:3c:8a:fc:2f:94:d6:1e:c4:07:da:
                    f6:0e:29:95:4e:ce:26:4f:91:e7:48:98:d9:03:d4:
                    16:56:42:8e:c0:db:5f:a8:bb:bc:bf:22:0f:b8:f8:
                    2e:c0:98:14:0e:62:5f:e6:f4:89:c5:20:05:36:74:
                    c5:92:7c:4f:3c:73:07:18:ff:4f:8b:2f:6a:03:dd:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:97:FD:92:C4:0B:61:34:95:00:CF:5B:77:51:AD:98:DF:10:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/1948be53-e17c-3047-b5fd-ce7874d44769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:c6:dc:37:54:2a:e2:e9:d6:27:36:83:d5:c2:d6:d9:53:
         e8:a0:ce:91:54:92:3d:95:43:59:b7:fc:ec:27:36:7b:b6:63:
         20:3f:9a:f4:89:e6:8a:92:78:ec:26:fd:f6:6a:ad:33:c2:57:
         84:e8:1c:d6:35:14:71:ed:79:85:ae:29:b2:2a:ef:70:b0:48:
         aa:f5:5b:3b:42:f2:03:f2:f5:c9:58:f6:a9:e3:98:bf:e2:5d:
         65:d9:b5:00:da:75:bc:7d:f5:06:0e:f1:3d:e9:24:f1:f9:4a:
         d3:c6:db:2d:ff:9b:92:de:4c:db:38:de:23:58:70:35:0b:02:
         33:9d:81:d4:74:01:43:e9:70:bf:47:80:a8:e9:8c:70:af:5a:
         ca:33:e4:48:4f:bb:d5:5c:e7:bc:ec:0a:c7:90:4c:72:46:06:
         af:ed:b4:67:8e:38:d7:42:a3:c6:a4:51:28:2a:26:51:f2:9a:
         ef:b7:a7:3f:c3:0c:89:0b:8f:97:ee:2d:57:09:65:92:70:f3:
         dd:a1:b2:b3:f8:80:97:aa:64:67:b0:62:8a:a4:25:b9:fc:ac:
         64:2a:7f:8d:68:ba:90:7f:85:c6:07:92:f2:ad:37:d5:69:be:
         e4:56:e5:0a:b9:19:9a:ec:c2:50:bc:e5:d1:25:fe:4f:5d:32:
         21:2e:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:42:44 2026 by rpki-client