Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa
File:                     88d218ab-9c22-353d-a21d-a0cf2af8daff.roa (raw, json)
Hash identifier:          yF5GGkAEXvzUmXj3QVDW3GNRS62jY978ujl8zInNbfo=
Subject key identifier:   4D:CD:08:D4:27:97:B8:F3:E0:BF:94:12:8A:0D:1A:37:6F:64:C3:CC
Certificate issuer:       /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
Certificate serial:       010D0C9F4328584F63F820A303D1EE9E90535E80
Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     1030
IP address blocks:        2602:f9cd::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:20:a3:03:d1:ee:9e:90:53:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=b17fe8cd-07ce-4a71-8d91-d90373cc9247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:46:d0:3c:2d:97:35:8b:2b:9c:02:88:21:
                    5d:49:df:31:30:53:97:33:9a:e6:12:09:f1:65:3e:
                    80:fa:ca:8c:81:5e:10:70:86:ed:41:35:01:b2:01:
                    ce:e8:15:fa:69:88:1a:09:18:c6:36:4f:99:90:56:
                    17:8a:1e:44:bf:a7:00:77:80:85:43:6d:8a:74:c5:
                    d6:bb:02:79:dc:77:f0:71:d2:67:1d:13:aa:78:0b:
                    d4:47:c3:1b:c3:1d:04:bb:f0:cc:83:c6:e3:dc:9c:
                    a3:e6:9a:16:21:e4:23:43:78:10:c6:90:7e:62:74:
                    ee:a7:70:3b:f0:a7:cb:58:43:6a:41:2e:c2:fe:fc:
                    e2:1d:87:f4:89:8a:4e:48:bc:2e:df:a7:2b:86:44:
                    aa:1f:46:26:7e:55:03:15:83:24:01:31:14:ea:34:
                    41:55:e9:47:4e:67:69:82:c2:e5:6d:05:e0:f9:8f:
                    fc:0b:d0:fe:02:91:de:19:53:99:ba:37:c6:d4:18:
                    28:86:bf:d9:f7:c5:c4:9c:d7:2c:10:67:83:c7:03:
                    86:80:d9:01:75:8d:fb:8d:1a:61:9a:42:b7:5f:95:
                    7c:60:f9:e8:20:42:5d:ac:16:dc:53:78:86:17:7a:
                    96:7f:40:11:cf:e0:76:a0:1b:e8:4b:20:c4:2d:13:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CD:08:D4:27:97:B8:F3:E0:BF:94:12:8A:0D:1A:37:6F:64:C3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl

            X509v3 Authority Key Identifier:
                keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9cd::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:27:e2:22:c9:6b:3e:3b:fb:c2:59:2d:33:50:14:6a:4e:fc:
         73:3d:19:4e:e2:e5:e4:f0:93:f9:15:54:00:cc:e9:20:64:87:
         88:c5:c3:4a:8b:37:60:88:96:bf:88:0c:e5:48:8a:de:70:8c:
         94:a3:2a:fa:e1:db:d6:8e:45:6a:cb:20:ad:dc:4f:e7:c3:2d:
         66:35:2e:7e:85:23:2e:0a:6a:1c:8e:ca:0c:3b:4e:b0:78:87:
         38:a1:ae:e0:35:54:18:d1:eb:c4:98:bd:fc:df:d6:0d:f2:7a:
         90:ea:7d:da:03:ac:e7:81:2d:a7:cd:a2:80:93:77:01:60:96:
         38:33:f0:1b:75:63:dc:aa:b4:ce:ca:4c:82:7d:c8:1f:78:5f:
         51:c0:f2:13:5b:10:4f:5c:6b:5f:04:81:a7:d1:8c:8b:27:7c:
         0c:d1:d3:ff:65:fc:4a:dc:48:34:0e:af:e4:fc:e7:61:c8:ea:
         1e:54:be:fb:b7:fe:91:57:e0:4b:40:12:b6:24:2f:25:49:38:
         7b:b1:67:eb:57:63:9b:22:d0:b0:4f:d9:bc:b5:17:78:3b:9c:
         ae:da:ef:ec:c4:51:81:38:45:e9:1b:b0:a4:ea:16:0f:58:08:
         29:70:66:35:a6:2d:eb:5f:54:95:ea:fd:6d:84:bf:24:1e:c9:
         b8:17:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:22:10 2026 by rpki-client