Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/40a81461-494d-3d60-a6fd-01875d95a7a2.roa
File:                     40a81461-494d-3d60-a6fd-01875d95a7a2.roa (raw, json)
Hash identifier:          vh5CN5JVksrDpcj08tiIJVw3TBH+v5aGy7OAlqaDAbQ=
Subject key identifier:   11:7C:20:91:E0:58:78:4D:1D:6E:51:D0:8A:68:61:F1:09:CE:2F:61
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584F89A862A244154D92D577E600
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/40a81461-494d-3d60-a6fd-01875d95a7a2.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     39618
IP address blocks:        2602:fd92:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:62:a2:44:15:4d:92:d5:77:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=ecee860e-0794-4a1e-acbd-bc3f2f04d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:d1:e6:cd:0f:6f:18:d9:51:2e:fd:00:64:
                    8f:ac:fe:e7:9a:dd:ba:0e:86:87:73:7f:34:3e:d8:
                    c0:54:f1:12:52:57:c8:43:07:87:a7:d5:d4:f5:50:
                    81:94:12:c4:b4:58:3e:d7:70:ff:73:03:2a:f7:e3:
                    12:ba:21:47:8e:fe:9c:0e:15:59:d9:9e:68:73:a0:
                    a5:bd:8b:cd:87:d0:8d:e8:ea:b8:db:5f:58:75:c0:
                    21:56:ce:08:a1:5a:00:48:77:19:63:11:5c:80:14:
                    c6:c8:27:5f:b3:85:ae:c9:3a:8f:99:a1:85:e8:69:
                    de:64:2b:ae:e6:bd:ec:4d:8e:f4:b1:cb:11:27:5d:
                    4c:fa:1f:4f:a7:0c:8d:ef:5c:7e:62:b1:89:3b:04:
                    4e:3c:bd:8d:2b:f0:84:d9:56:42:6a:ba:63:a6:a3:
                    f3:3b:7a:b1:e7:0d:2a:56:36:42:43:82:95:6f:46:
                    3d:6d:82:03:37:fe:0c:4a:60:cb:99:9a:a9:70:fc:
                    96:d1:e8:ef:00:89:08:bd:15:88:e9:fa:5b:cd:d0:
                    9c:e8:21:97:49:41:46:29:9a:81:cb:38:16:fa:fa:
                    e2:ba:f3:c2:d9:9c:a5:ee:4b:67:6a:e7:59:0a:c8:
                    51:83:0f:07:6b:2f:26:07:68:e7:ce:f8:21:99:72:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7C:20:91:E0:58:78:4D:1D:6E:51:D0:8A:68:61:F1:09:CE:2F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/40a81461-494d-3d60-a6fd-01875d95a7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:92:2b:1a:2b:12:74:2a:8c:b6:5d:f3:c2:6d:aa:34:61:
         45:c9:2a:bc:07:2b:ff:6c:dd:eb:f6:31:10:23:b7:e5:5e:27:
         fa:c8:9b:c9:ca:e7:ca:c7:6b:2f:32:4e:17:c8:09:e6:bd:ed:
         f7:23:c9:7b:df:10:be:ec:26:9d:36:4a:7e:e7:51:34:34:63:
         a5:ca:95:8a:c0:f4:04:57:5a:19:de:00:c2:cf:ce:e2:10:d1:
         b6:44:38:f8:78:ec:55:bb:ca:a9:ab:c5:d7:14:47:38:5c:2f:
         bb:f8:3b:d7:eb:1d:37:28:7a:23:22:32:14:15:33:28:83:10:
         82:84:f8:c4:3f:3b:31:43:1b:7c:d2:5b:d8:35:45:76:88:a3:
         b3:52:99:af:b2:07:d8:c0:60:7a:50:24:0b:47:80:e2:5b:74:
         c5:16:3f:02:f4:e1:e2:e4:a7:bb:6c:56:fc:ad:9b:c8:ba:5f:
         98:05:d3:9f:34:97:d8:91:b5:91:a8:d3:7f:02:98:9b:f0:38:
         64:ce:97:e4:01:5b:24:dc:fa:eb:16:fa:b8:4f:4f:49:e8:38:
         aa:20:8b:a5:78:e0:93:f0:70:d3:8d:db:32:5c:90:fb:93:3b:
         28:71:31:e9:cb:5c:7c:64:0b:53:e7:73:ac:16:ff:b2:16:2a:
         b9:b0:b8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:11:44 2026 by rpki-client