Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa
File:                     dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa (raw, json)
Hash identifier:          GGzqeGg3RoKXGXrI5MaOSnLd48TKS7hUWKr1vkzfeJE=
Subject key identifier:   D8:D6:DB:8F:0E:A4:20:AB:74:E1:17:EF:1B:29:FE:FF:77:0E:B3:DB
Certificate issuer:       /CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
Certificate serial:       010D0C9F4328584F58CD5A6F078E642FCFEDA780
Authority key identifier: E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     62467
IP address blocks:        2602:f83a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5a:6f:07:8e:64:2f:cf:ed:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=ca1866cd-5de2-42c9-848f-1782cc54202b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:c7:b1:ad:03:4f:20:d0:ed:12:c3:21:76:
                    54:d3:e0:08:21:62:20:c3:11:ce:10:be:46:07:d6:
                    a0:d1:22:40:60:44:bd:97:1c:06:71:83:cb:3c:55:
                    66:3f:a5:c2:ed:3f:8f:b4:01:e0:07:04:d5:d1:c6:
                    aa:a2:cb:4e:05:84:4c:ba:15:37:98:e0:e3:23:4a:
                    e5:3d:7c:eb:9a:b6:99:55:74:bc:01:72:1b:2f:11:
                    f5:c9:90:b1:39:30:e7:84:23:3c:8a:b3:ef:52:7d:
                    1e:b8:15:ba:bc:4d:51:0f:64:e9:15:4e:6f:3b:9b:
                    db:80:1e:22:b7:40:19:d2:53:fa:86:b2:8f:28:bd:
                    51:64:0c:9d:db:37:6c:ac:20:b5:b6:d0:ae:31:54:
                    40:c6:19:15:3e:4c:30:01:1d:0f:de:79:43:f2:57:
                    25:42:74:a9:3e:d5:3a:5e:d2:df:12:97:4d:91:05:
                    7f:7f:81:86:e8:f0:97:d4:0d:30:8c:22:46:4a:7b:
                    53:c4:ad:c7:f8:28:54:87:ab:71:71:c4:a4:13:67:
                    44:8b:6e:8a:45:7b:78:af:fa:d7:08:7a:09:37:c4:
                    a3:1b:0a:61:47:b4:27:fd:51:af:55:cf:cf:fc:16:
                    2d:79:af:51:54:95:b3:8b:49:39:4c:64:db:76:5f:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:DB:8F:0E:A4:20:AB:74:E1:17:EF:1B:29:FE:FF:77:0E:B3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:54:c0:a3:de:fa:74:b4:68:c2:35:3d:3c:b1:e9:33:84:
         66:c2:99:bf:42:10:20:ec:5c:df:ad:a9:2c:90:11:3e:28:4c:
         61:76:60:02:ac:e9:a0:5b:db:62:e5:18:ba:5e:b9:e7:e5:92:
         c5:48:bc:11:85:5c:48:cd:fb:fd:c7:db:c5:5b:4f:76:bb:33:
         eb:e0:ab:5e:56:d8:1b:b9:21:6e:75:c1:c7:4a:c5:bd:64:7d:
         ee:e2:e1:df:01:08:f7:76:4f:1f:57:04:cf:54:cf:d0:b6:37:
         2c:ac:72:e9:51:a7:c3:d4:5a:2b:7d:74:b1:bc:70:30:f6:93:
         bb:1c:db:62:b7:90:79:39:99:5b:27:14:83:c5:b7:61:3c:46:
         ee:c4:69:8d:72:80:6c:0e:a1:2a:cb:2b:fd:39:00:ea:9f:6f:
         3e:5d:2e:92:c2:be:c9:11:e2:c2:cf:d6:af:a0:8f:5a:38:2b:
         db:87:1d:c5:33:18:01:fe:a8:13:bf:a2:f0:5a:56:94:af:de:
         7d:82:0a:3f:ed:2f:a2:c6:8f:bd:46:22:ed:2c:d2:1f:37:ea:
         d1:19:79:5b:67:24:28:38:61:a4:8f:1f:3b:df:a0:96:59:51:
         46:e9:f7:85:e3:f8:ee:cf:0e:f8:35:a3:a1:14:0f:d7:a0:3c:
         0f:b7:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:33 2026 by rpki-client