Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa
File:                     8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa (raw, json)
Hash identifier:          sSLGPTiDIJWfXkTsP/1y85GlDEnsk2glR00xFlOvUBs=
Subject key identifier:   6E:E2:6C:87:28:9F:D0:D4:75:3A:0C:24:CB:B1:33:A5:7D:FB:4D:46
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F49763D4C6E5ED9CCA5A3B580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        2602:fefa::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:3d:4c:6e:5e:d9:cc:a5:a3:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e48ff0a8-e295-4337-9549-584e956df3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:e4:7b:28:35:a9:9c:be:2b:cf:71:80:4d:
                    8c:ed:82:f1:1c:24:be:f3:d1:ec:d4:d1:98:7e:cd:
                    70:ad:b4:a9:a4:73:ec:6e:9d:6b:04:74:4d:18:a1:
                    43:aa:ba:98:e5:c3:0f:b8:0f:89:fb:00:48:29:48:
                    b3:2a:4d:11:fb:c0:24:f7:f5:9f:e6:00:29:af:5e:
                    a5:e0:ff:e5:9f:f0:58:f7:cf:28:c3:02:00:e2:3e:
                    dd:cb:d6:f8:12:b3:65:0c:b0:2d:58:db:92:c6:31:
                    23:d8:54:5c:e7:e5:46:97:98:06:95:12:7d:7f:ad:
                    9d:82:79:f5:19:6e:cd:17:59:74:d2:1c:03:46:bd:
                    e6:d3:fd:a4:06:bd:2a:25:a2:ef:3a:68:f8:b8:54:
                    d6:85:da:9c:dc:28:41:9b:e9:18:9e:4b:de:32:3c:
                    aa:a5:f4:a6:c2:ba:13:34:4a:0f:2f:bb:84:88:f9:
                    9c:49:8b:b0:d5:9c:56:8f:6f:b6:b8:6a:24:0a:7a:
                    33:0f:86:3d:04:1b:4e:85:f3:5e:ae:2d:0b:57:61:
                    1c:f8:51:f7:3d:1f:ee:59:b9:48:7f:dd:f9:2a:ad:
                    81:2e:4c:12:5c:01:32:e4:db:4b:09:a5:00:ed:be:
                    af:fa:ed:d9:d2:f7:51:da:d1:a8:fb:10:41:7b:73:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:6C:87:28:9F:D0:D4:75:3A:0C:24:CB:B1:33:A5:7D:FB:4D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fefa::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:44:b1:3f:cb:9a:a4:42:e9:7e:f8:ca:99:82:94:26:72:0a:
         59:a4:86:64:59:1e:47:6f:8c:28:1e:8e:f2:93:89:95:06:9d:
         97:e9:0f:a3:c9:5d:49:ba:d8:b8:db:c7:10:ea:26:ab:e4:29:
         ae:8a:e3:3e:82:5c:12:f7:7e:7c:4c:ca:8a:85:8d:c6:d7:e3:
         b3:e3:06:b9:68:a4:5c:38:fa:ae:f4:e8:57:fb:f8:bd:76:56:
         fc:cb:2c:55:81:9f:41:78:16:0b:98:3b:36:72:92:8c:4f:b2:
         38:95:1b:fe:e8:02:45:be:32:28:4b:ac:48:d5:85:ca:d2:d7:
         e8:07:46:fd:00:6e:1c:01:80:b2:2e:6d:4e:d0:3c:74:d0:2d:
         df:a6:95:d5:e6:85:d0:79:f0:6b:2f:56:b8:28:89:ff:9a:8d:
         b7:79:91:66:a3:e4:6a:d7:aa:cd:af:ac:d0:49:8f:75:76:11:
         c3:24:d9:6b:4c:18:db:7c:7e:f3:aa:bd:5b:ee:5b:98:47:65:
         9e:9a:1b:fc:3e:47:ee:e9:14:6c:c7:c1:5b:2e:c0:06:d1:66:
         b2:f7:16:03:3c:30:65:ca:3a:95:71:20:50:71:90:bb:be:03:
         8a:80:f2:d1:8c:d7:33:0c:7a:d3:6a:21:07:d7:64:08:f9:a0:
         41:a1:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:04:52 2026 by rpki-client