Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/c617a5ba-2d1c-3dd5-9118-c6f712ef0572.roa
File:                     c617a5ba-2d1c-3dd5-9118-c6f712ef0572.roa (raw, json)
Hash identifier:          iTEHCoUt7yOW5DIPvSB0rkCI2LvKTvyf+Cq+20ADIuA=
Subject key identifier:   E5:25:06:A6:FC:D0:F7:48:14:67:05:60:4D:D1:51:C2:46:C1:52:74
Certificate issuer:       /CN=398d0b70-b801-4a07-bcdd-88f7f05efa5b
Certificate serial:       010D0C9F4328584F8DD898827B2636801E4E2580
Authority key identifier: DB:B0:36:C6:19:B5:7A:6E:C2:09:BB:F3:23:1A:D9:B9:8A:AC:FE:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/c617a5ba-2d1c-3dd5-9118-c6f712ef0572.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     9304
IP address blocks:        2602:f63b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:98:82:7b:26:36:80:1e:4e:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398d0b70-b801-4a07-bcdd-88f7f05efa5b
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=c81e8a4a-0fc0-4568-983b-b675990ddd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:cd:93:0b:da:bf:6b:76:1f:5f:e1:c9:81:
                    59:e1:7e:b7:2b:46:fe:e5:c8:79:0c:11:67:e3:60:
                    92:2f:b9:11:19:65:2d:14:29:6d:b2:c4:f1:ea:cf:
                    ea:b7:fc:23:71:82:69:c8:e8:f3:6f:8d:8b:00:28:
                    87:7b:44:20:d5:79:22:31:9d:33:7e:02:ef:d5:a4:
                    68:7e:c7:c5:5a:d2:72:cc:c3:5c:6c:a6:0f:ab:5d:
                    f9:67:91:0f:23:1f:4d:6a:db:dc:15:35:37:5c:3a:
                    2d:2c:e8:29:07:27:77:3e:cc:2d:3c:47:7d:ad:d3:
                    88:9f:08:35:40:82:b9:9b:63:3f:13:da:5e:da:26:
                    7c:37:54:92:b2:33:99:5b:6c:2c:a5:92:c4:d9:23:
                    4b:15:ff:ea:18:19:d9:80:14:79:3e:78:8d:22:50:
                    a7:ce:a0:38:e2:1c:13:04:14:e4:6a:54:a9:f0:71:
                    ce:8a:5c:e8:d0:4e:a0:9b:b7:ed:7d:6d:c0:92:67:
                    cf:7c:18:88:18:bf:88:66:a8:89:b2:72:17:8d:b6:
                    56:0d:8d:73:a2:68:57:d4:53:f4:ba:d6:ff:63:c8:
                    69:6b:b3:f9:3f:b1:f1:0c:8f:37:68:2e:f1:6e:86:
                    b3:33:48:8d:6a:ac:14:dc:26:02:9e:68:46:ec:68:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:25:06:A6:FC:D0:F7:48:14:67:05:60:4D:D1:51:C2:46:C1:52:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/c617a5ba-2d1c-3dd5-9118-c6f712ef0572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:B0:36:C6:19:B5:7A:6E:C2:09:BB:F3:23:1A:D9:B9:8A:AC:FE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f63b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:4b:d1:73:74:fc:eb:fc:ab:a8:15:7d:30:84:a6:1e:d7:
         67:df:a7:d7:2d:e5:8f:04:f8:ce:76:13:05:17:9b:84:41:28:
         ac:3d:86:1b:4b:ed:e4:f6:9e:ac:4e:20:54:4d:e4:63:b9:a1:
         09:f4:4e:e4:0b:59:bb:2e:10:03:49:f3:fd:d4:c7:ce:30:06:
         d8:ae:46:7c:94:54:d4:10:e8:dd:33:2b:79:d6:d7:6a:a5:7a:
         f7:2c:1f:6e:85:a1:ee:27:ab:e9:43:d0:b7:f4:bf:49:62:a7:
         c4:7b:b2:e6:07:7b:37:42:59:cd:80:a2:ea:13:2b:c8:2c:28:
         16:52:cf:fb:91:0c:f4:1c:27:37:47:26:16:e7:c6:9f:6b:7d:
         47:93:25:b9:41:6e:18:7f:60:1d:39:62:2a:5a:22:fa:69:a5:
         01:02:0f:2b:32:fa:75:05:be:40:de:3c:d6:ab:b9:6e:9f:77:
         c2:6d:b4:d4:4f:e8:63:bc:c6:b3:69:2b:a7:ef:43:a3:1b:2a:
         df:94:86:a3:11:7b:f8:f4:aa:99:51:cd:a5:a1:ae:54:c1:35:
         66:be:e6:8c:09:e9:c6:2f:cd:dd:78:e2:dc:78:c6:dd:a4:42:
         ee:70:4c:b0:ac:fc:d9:bc:ba:39:a7:2a:cf:55:29:9c:ee:da:
         de:f1:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:08:10 2026 by rpki-client