Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa
File:                     bda09709-cca1-3c5a-acd1-e46d5667e970.roa (raw, json)
Hash identifier:          KGJ8iSvOhGHqZhNgzUiq2+qnWAFq74cub0K0GX2UbsM=
Subject key identifier:   04:28:F2:CA:56:9C:86:B8:97:72:0F:8B:1F:C0:FF:21:C5:5D:34:D7
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584F9A68BE257470857EE862C040
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     401921
IP address blocks:        2602:fbd0:c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:be:25:74:70:85:7e:e8:62:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=2748747e-6d34-403d-9627-3d15b2392599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:be:39:83:be:3c:c3:14:aa:4d:25:ad:92:
                    57:73:a6:fd:17:90:d3:fe:ae:c9:41:cc:95:1b:ce:
                    ff:4c:c3:95:62:78:03:69:7b:52:5a:c6:27:89:ce:
                    f7:93:7a:77:2c:98:f3:62:82:73:ba:09:93:63:0e:
                    d8:25:6d:30:5f:d1:8e:5b:f1:10:1a:8f:3b:b1:97:
                    71:c0:77:b3:6b:82:8f:a8:2a:7f:00:d6:9c:92:a1:
                    25:25:90:78:d5:f3:34:9c:cd:f4:9f:1f:52:76:a1:
                    12:ae:a5:14:b9:e1:c6:71:70:a5:6c:1b:7e:df:80:
                    36:f3:c0:d4:b2:d1:8d:5d:39:0a:0e:5e:33:25:59:
                    02:65:39:c1:7c:82:b1:d0:19:70:2a:16:6c:f5:eb:
                    ae:b6:9a:c3:1e:9d:ff:dd:91:be:64:08:59:7c:e7:
                    97:55:fa:db:4d:d3:c2:e9:3f:a8:57:98:6b:9a:51:
                    4e:c0:19:b5:04:68:1f:de:cd:4c:8f:6a:1e:bd:ca:
                    1b:0d:f9:9c:2f:d6:17:49:94:2a:cc:a4:c0:b7:c9:
                    30:93:a8:9e:49:2e:60:b5:a2:7b:ea:78:e9:9a:2e:
                    94:4b:b4:45:6e:69:7f:34:d6:b3:43:3a:9c:bb:10:
                    cd:6a:b8:ce:60:5a:11:5b:fb:2c:8c:ba:9a:ca:03:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:F2:CA:56:9C:86:B8:97:72:0F:8B:1F:C0:FF:21:C5:5D:34:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd0:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:b7:df:bf:e2:1b:80:27:aa:9c:73:d4:f5:01:39:06:be:
         e9:95:2f:8e:2d:1d:ff:4e:38:65:dc:29:02:7f:92:cc:66:47:
         d9:7b:dd:51:12:41:17:f0:25:ef:33:01:96:b3:45:ba:8c:0b:
         45:3e:4c:e8:16:a7:8a:61:bb:3c:22:a8:1a:8d:a4:7b:3d:25:
         45:66:f7:ee:60:e9:83:48:45:0a:5d:91:4e:2a:2f:bb:72:8e:
         9d:6e:0e:6e:2f:3b:c9:31:ea:d2:29:00:30:df:81:c8:2a:7d:
         57:e8:f5:69:39:bf:3e:69:59:92:52:41:64:ac:58:0a:cc:8a:
         33:e5:7c:91:7a:04:08:6f:a7:98:b4:e8:64:09:00:4a:1d:48:
         2c:35:d4:4c:6e:2d:ce:db:4c:78:be:96:33:0c:22:b1:61:b8:
         3a:bc:45:c3:3b:08:ef:1a:86:43:5e:e6:ae:a6:8e:15:aa:82:
         1f:1d:43:18:28:68:aa:a0:f4:65:ed:45:c6:27:a3:e9:d5:d6:
         88:2d:12:fb:11:46:d1:9a:84:a8:14:38:57:61:ac:ed:6e:6f:
         a0:3b:45:92:2c:50:6f:f5:9d:c8:2c:76:c3:b5:ea:5c:29:8a:
         39:a7:51:7f:ba:32:8a:70:f5:4c:f6:06:cc:db:ed:e0:5e:7b:
         13:58:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:53 2026 by rpki-client