Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa
File:                     8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa (raw, json)
Hash identifier:          wkEtBHnjVtSTSoNQkBZnl/KNghUwJn+cNL/bbXS+Qes=
Subject key identifier:   13:FE:B6:97:20:31:CB:89:29:23:F2:22:00:CD:79:3C:1F:D2:C8:93
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584F73E2680DF6606C3A91461300
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa
Signing time:             Sat 10 Oct 2026 05:49:35 +0000
ROA not before:           Sat 10 Oct 2026 05:49:35 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40806
IP address blocks:        2602:f4d9:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:e2:68:0d:f6:60:6c:3a:91:46:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Oct 10 05:49:35 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=30932c62-55ea-4f47-9270-0d48fc4ae4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:14:80:b1:56:25:2d:fe:c7:fa:2e:8c:51:
                    96:a6:d5:b7:22:8f:c4:25:b7:f3:e4:24:ae:04:dc:
                    48:14:91:a4:08:3a:b2:af:9e:d8:4c:da:4a:2e:f5:
                    22:c2:a3:e7:d3:c3:3a:48:a4:12:22:f5:36:0b:da:
                    06:c9:7f:c2:f9:27:55:32:56:eb:4a:a1:53:b3:53:
                    36:e2:62:ac:ec:f0:e5:5b:42:9e:a9:ee:a8:17:6e:
                    2a:80:a4:70:2f:5e:0a:89:6d:fc:18:b9:f1:dd:55:
                    d0:b2:74:e1:04:e0:72:f2:f5:d8:3f:c3:bf:a9:fa:
                    92:d3:fa:5d:6a:2c:e5:2e:5b:58:62:ca:84:b3:72:
                    2a:8c:e6:92:dc:26:be:75:e7:4e:ea:b1:ee:e0:86:
                    b1:33:00:f8:61:27:c7:7e:2d:cf:f9:e4:2e:f4:7a:
                    ec:ab:52:06:54:2d:6b:23:d2:7b:ae:f2:b0:76:17:
                    96:0a:da:cd:81:e3:e2:c0:b8:85:72:c9:70:cf:9f:
                    51:df:44:6a:ef:b5:79:18:7e:35:aa:f3:85:e1:02:
                    20:4e:d8:06:db:94:48:4c:29:12:62:cf:cd:4c:4d:
                    a7:70:1d:33:6b:4e:56:4a:45:56:6c:84:a9:83:99:
                    3a:cc:cd:00:01:7a:17:93:ca:92:37:1b:58:c9:22:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:B6:97:20:31:CB:89:29:23:F2:22:00:CD:79:3C:1F:D2:C8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/8cafd487-4c7e-3023-b2cb-5ffadb4367bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4d9:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:8d:8c:d1:6f:f5:ab:a7:21:29:08:f2:16:9a:bb:eb:9c:
         25:40:34:5e:bf:b3:62:65:92:65:d7:77:83:2d:0f:b1:7a:0c:
         40:d2:e2:02:98:fe:fc:02:6d:e6:54:d6:38:49:01:d1:7d:24:
         72:fc:02:24:27:5b:c1:af:51:4b:26:b0:e3:5c:94:1a:6d:8d:
         8c:fc:8a:2d:62:5f:5f:88:20:77:25:11:30:98:35:16:7b:84:
         8f:97:22:40:6d:32:d7:3b:6d:31:e7:4d:c7:4a:69:0e:2f:46:
         89:c1:12:47:3d:cf:50:fe:75:ea:9a:4d:c2:21:f1:16:6b:94:
         b4:7d:66:9f:65:84:90:46:b9:77:cf:ba:3b:8e:b7:c7:f3:51:
         70:98:3d:3c:8a:14:7d:3a:51:ef:e0:f2:9f:58:8c:7e:c0:49:
         d7:60:94:ad:f0:fc:e9:9f:59:b5:c8:f9:bf:72:41:93:4b:8d:
         d4:46:b5:9b:39:4a:59:75:5f:91:6e:a4:a2:f2:20:8a:08:77:
         e0:5f:f6:4e:5d:31:59:d8:d4:00:18:4a:ab:ac:87:b6:6b:96:
         43:97:f3:b4:56:6e:94:b0:a0:1b:ff:64:39:cc:fa:db:44:f2:
         c8:cc:53:14:9f:95:95:04:05:cb:92:b4:8c:b0:18:da:7b:b4:
         32:37:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:13:31 2026 by rpki-client