Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa
File:                     bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa (raw, json)
Hash identifier:          /Q54HAr3F9NniRCzUN5Ip2Uuk92hC28uAOHdCzr/BYg=
Subject key identifier:   E1:93:B8:21:2E:5A:AD:28:41:0D:BF:9E:EB:1B:A2:96:D0:5A:5B:27
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F4328584F9D331795E735EA6411FB0800
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa
Signing time:             Sun 25 Oct 2026 01:00:13 +0000
ROA not before:           Sun 25 Oct 2026 01:00:13 +0000
ROA not after:            Sat 23 Jan 2027 02:00:13 +0000
asID:                     213734
IP address blocks:        2606:58c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9d:33:17:95:e7:35:ea:64:11:fb:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Oct 25 01:00:13 2026 GMT
            Not After : Jan 23 02:00:13 2027 GMT
        Subject: CN=cde6198b-cdb1-4994-99dc-c05e8be61d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:23:46:13:f6:80:b9:ee:b4:f6:93:12:9c:
                    9c:22:7a:c1:5d:a8:bd:e9:02:b5:bc:f0:e8:19:d7:
                    ca:e7:05:b0:bb:37:98:89:29:e6:1f:e3:15:fa:48:
                    b7:31:3c:79:5f:00:81:38:77:fb:3e:00:b2:1f:f6:
                    54:31:cb:29:d2:02:8f:14:05:4b:29:c8:0d:4f:be:
                    69:8b:6f:aa:c9:c9:da:4d:df:12:2c:41:56:be:db:
                    6e:5b:10:87:2f:26:ba:f1:b9:15:98:03:11:8c:5e:
                    13:c1:c9:82:c3:d6:eb:7e:4d:02:5d:f8:a3:3f:9e:
                    a9:99:ee:c2:ec:25:ec:04:81:00:3d:c1:17:09:88:
                    97:e8:b2:a2:41:57:3b:46:56:4b:11:b0:1f:45:77:
                    9a:30:cc:40:df:ca:7a:eb:fd:fc:d5:86:18:4c:df:
                    68:14:5c:66:a3:13:1f:db:11:6f:bf:4f:11:0f:de:
                    5c:0d:44:df:c9:90:91:97:61:2e:f6:de:f0:cd:8e:
                    0b:00:c6:55:db:20:24:64:f8:f6:54:ad:d4:04:56:
                    d0:5c:9c:e5:b9:c5:a5:34:48:38:d8:22:7b:6a:c7:
                    c2:4b:bc:c1:97:14:0e:83:d4:48:4c:5d:04:4f:5b:
                    b5:67:99:0e:a0:0f:75:43:10:67:9b:25:e8:ed:59:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:93:B8:21:2E:5A:AD:28:41:0D:BF:9E:EB:1B:A2:96:D0:5A:5B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:58c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:59:ae:e3:4c:d6:01:63:a5:7a:1c:81:a9:4c:11:a0:94:
         4d:02:80:ba:e5:59:89:39:7c:9d:e6:9c:47:06:c4:87:c0:5f:
         44:d5:76:a4:9a:2f:35:58:10:bf:36:0c:09:a5:93:13:15:8b:
         57:82:10:f6:09:56:8f:86:92:6e:76:6f:5c:24:f5:64:20:97:
         56:30:6d:17:9d:ea:d3:31:71:74:dc:e4:b4:d0:00:3f:52:b2:
         9e:24:86:4f:aa:1e:b2:03:16:7a:04:3a:58:41:52:66:78:08:
         a7:89:0a:c6:eb:c2:42:55:e1:b1:f9:3c:70:e8:59:a7:0b:dc:
         1e:8c:d8:22:bf:c6:56:5d:ce:58:ef:0a:53:f3:3a:ae:77:54:
         a8:ac:39:bf:59:41:c2:5a:d9:0e:a3:42:91:67:1d:5f:4e:fa:
         35:0b:9f:0a:6b:7c:db:15:19:ce:16:b3:20:78:72:b2:b7:61:
         df:2c:23:fe:43:31:34:bd:05:8c:5f:c4:7a:91:1e:d6:9c:35:
         e8:eb:e9:4b:0a:52:21:91:a9:09:a2:5e:ec:07:ee:3b:93:06:
         93:5e:42:bf:6b:99:a7:ad:22:61:89:b5:c3:af:fa:9e:9e:67:
         5c:c6:bb:13:4f:1c:d9:e4:ae:d3:40:82:98:a0:86:bd:70:09:
         b7:cb:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:05 2026 by rpki-client