Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/430535d4-9848-38bc-a418-b62ccffe157f.roa
File:                     430535d4-9848-38bc-a418-b62ccffe157f.roa (raw, json)
Hash identifier:          iGBYkwSKo8keSa/nv62Dq8av74hnafnvPs/wWHVFfwI=
Subject key identifier:   A5:6C:7A:A2:6D:D2:08:55:32:A1:83:E2:D2:9D:A1:25:5A:15:11:06
Certificate issuer:       /CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
Certificate serial:       010D0C9F4328584F49752A6EA73C3AFEF1142680
Authority key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/430535d4-9848-38bc-a418-b62ccffe157f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     25737
IP address blocks:        2602:fa1f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:2a:6e:a7:3c:3a:fe:f1:14:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=034d4a80-d637-4d44-adb9-3515ed3ec414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:f5:8c:00:4e:82:fe:d7:97:63:e9:21:69:
                    c2:ef:0a:43:e2:c2:63:47:df:86:7a:a0:98:3d:6a:
                    44:18:5f:65:74:5d:c7:a8:73:56:02:55:0a:a8:cf:
                    fa:af:89:06:58:43:23:f0:ef:30:7f:2b:ff:27:fa:
                    8b:aa:a8:62:d3:58:68:d8:e3:b7:17:45:5d:e0:96:
                    e3:b4:5d:a6:84:ca:f5:f4:8b:e5:a9:37:f4:22:ba:
                    b0:d2:00:dc:a4:84:0c:8e:f3:9e:a0:af:b5:45:de:
                    f1:39:ee:18:3b:b6:f8:b9:e4:ed:60:57:c0:a3:99:
                    5f:b9:7f:20:70:7c:b5:0a:2f:e6:15:fb:87:c5:96:
                    9d:1c:81:da:e0:4d:3e:7d:46:75:2b:bf:5a:bd:34:
                    88:d4:1b:b9:ca:c0:26:9f:6d:3d:18:26:3d:ca:84:
                    66:93:3b:b7:7e:cf:63:b3:67:2e:f4:7f:a6:72:bf:
                    70:df:7f:76:35:0a:92:47:7c:23:bd:f1:83:8c:bb:
                    37:1b:16:e2:a1:15:16:bb:c8:d0:fd:da:4e:12:05:
                    f8:a1:92:a5:bd:52:26:41:72:c4:c1:97:49:a4:93:
                    37:98:6a:b1:c8:0b:09:24:e1:3a:de:20:d5:77:b8:
                    fc:53:57:3e:ae:1c:a5:41:93:de:22:7a:f4:c5:a4:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6C:7A:A2:6D:D2:08:55:32:A1:83:E2:D2:9D:A1:25:5A:15:11:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/430535d4-9848-38bc-a418-b62ccffe157f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:bb:97:be:a9:1e:53:b2:12:ef:6b:66:a2:ce:41:ed:ee:
         56:02:5c:23:2c:94:8d:7d:41:c0:d1:ab:8c:07:39:e7:ea:9e:
         23:5c:1a:3b:b7:f8:4e:ce:0f:c8:d0:50:3b:6b:cb:25:69:c9:
         81:b4:2e:04:b8:22:43:82:29:38:d5:8b:e5:17:21:c1:48:5b:
         7b:8b:40:1a:c1:db:e8:96:fe:ad:e5:a9:f2:32:69:0a:0c:76:
         80:ff:4d:48:9a:a1:85:90:75:f3:9c:92:06:30:e6:e3:b9:7e:
         06:28:32:52:26:1d:4e:c8:7c:8d:19:10:24:4b:ee:27:a7:74:
         40:42:51:32:48:ac:8a:07:7c:ef:63:34:1f:a6:f0:f6:1a:5e:
         32:a4:96:ab:49:bf:93:f1:df:f1:96:ff:75:3d:65:55:43:1d:
         74:6d:be:5d:ae:5d:09:53:71:05:af:5f:b6:6f:2d:34:98:30:
         32:e8:ad:92:b2:b0:23:3d:9f:9c:d5:85:6b:7f:7d:9a:27:bd:
         53:23:eb:b0:9d:5f:34:a7:69:20:f4:b7:e8:ae:df:8c:4e:fc:
         6c:19:b3:7f:bd:55:9d:fb:0a:41:e0:d2:7f:3b:3a:9e:5a:24:
         93:e3:f9:2d:b3:6f:31:82:14:a3:b9:c6:f6:9f:92:11:21:09:
         5d:79:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:15:10 2026 by rpki-client