Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
File:                     57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (raw, json)
Hash identifier:          lT31gilgtii9jnkIxOXwfcFxo5yPHUyN41sAXIAni1w=
Subject key identifier:   6E:59:D3:F2:7B:3C:78:F2:91:5E:99:9C:1A:3A:0C:63:18:15:53:B9
Certificate issuer:       /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Certificate serial:       010D0C9F4328584F63F8231A031822453E99BFC0
Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     1030
IP address blocks:        2602:f9d5::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:23:1a:03:18:22:45:3e:99:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=d8445ce6-fd14-4382-9ae2-e56dce12249e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:48:84:37:b5:09:4c:5d:51:40:d7:4b:ce:
                    d8:fe:9a:f5:30:f1:59:51:ea:71:21:f6:7e:a7:6d:
                    db:32:dd:fe:ca:73:ad:74:33:c5:1e:11:7b:19:c2:
                    b8:20:47:26:ef:6e:f8:5e:6d:1c:f0:f6:1c:a1:48:
                    b8:a8:71:2b:0b:83:fe:eb:58:8a:6b:e0:f0:95:31:
                    04:d0:f4:4e:7d:71:62:f4:43:93:61:81:5e:ff:a8:
                    29:07:dd:66:42:48:b9:00:95:63:6a:54:c4:13:41:
                    c6:26:ee:2d:b9:64:17:35:1c:51:12:4b:0a:2e:8d:
                    1a:08:fc:0e:5c:3a:bb:bc:45:02:8d:3d:1a:c2:79:
                    5a:c0:54:63:72:34:9e:70:0a:38:f2:82:c1:dc:b6:
                    86:8a:3d:bc:5e:db:ca:31:1b:44:c6:34:37:9b:64:
                    95:43:b9:2c:e5:b9:a4:e3:46:19:a2:40:cb:a7:5c:
                    66:24:62:e1:42:3f:bd:57:dc:25:1d:35:4b:fe:b8:
                    f0:ab:50:c2:db:d6:16:0e:2c:39:15:d8:40:38:fb:
                    16:89:34:e5:89:5f:ef:85:20:10:8f:12:5a:0a:1c:
                    43:49:7d:d2:b4:76:f7:df:f1:9b:e0:ba:a5:27:e0:
                    b6:61:f4:78:ce:d2:fe:82:8c:4d:bd:26:8a:f3:77:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:D3:F2:7B:3C:78:F2:91:5E:99:9C:1A:3A:0C:63:18:15:53:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:75:66:a1:b7:f1:12:f8:98:21:1b:65:28:0c:73:7e:f3:
         9b:b6:d8:c2:40:37:8c:36:a9:1e:59:20:38:7d:b0:be:71:cc:
         18:60:2f:83:c7:97:df:7a:a8:6c:1b:e1:15:09:36:d1:35:ab:
         18:15:ad:bb:96:16:03:ce:ce:3c:96:06:c0:4f:29:e4:c1:fd:
         aa:ea:39:bb:82:f4:99:18:57:38:8f:25:57:f8:5f:ce:dd:d7:
         a5:39:10:e8:c6:27:db:ca:13:10:1f:c2:1f:88:83:9f:a7:93:
         2d:95:12:9e:4e:39:6a:85:fa:af:98:bd:ef:3e:e8:33:11:db:
         26:90:86:8a:19:ec:a9:15:05:86:5e:9a:8f:bd:c0:84:bb:80:
         d7:8f:22:a7:3e:de:79:ce:77:4d:56:35:90:c8:be:d6:4a:c5:
         18:c0:12:78:3b:f3:aa:7c:fd:18:15:08:04:65:3e:a1:b0:ce:
         f1:b6:74:b7:cc:2b:2d:c3:33:3e:ee:68:c8:6f:c9:c5:30:65:
         1e:ca:d6:45:96:26:e6:b5:66:36:94:e0:1a:4b:d4:cd:8c:f3:
         0e:6d:99:7b:a4:b2:ca:9e:13:a9:e2:c4:2c:4f:38:4c:88:a2:
         9e:6e:59:4d:9c:fc:af:19:01:28:0f:93:60:5c:38:71:b5:1b:
         a1:fa:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:57:03 2026 by rpki-client