Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa
File:                     7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa (raw, json)
Hash identifier:          WLRWi14hphEFQum9Eg7GVJh28KR0EFXTFWaY3gPry84=
Subject key identifier:   54:F3:EE:59:C8:F7:1E:0D:D0:CE:B8:8D:32:11:8E:50:00:D2:BF:A3
Certificate issuer:       /CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
Certificate serial:       010D0C9F4328584F9A68BFF94AE359EA0B134580
Authority key identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     401734
IP address blocks:        2602:f640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:bf:f9:4a:e3:59:ea:0b:13:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=f88557ac-036d-404d-9673-70a213d251de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:6b:79:84:42:a7:da:66:6c:11:82:e3:a7:
                    6d:0e:00:be:2e:83:e8:42:e2:08:a3:71:fe:01:56:
                    96:4f:63:ab:28:c9:87:fd:62:86:39:cf:fc:d1:a8:
                    3b:c5:b5:42:2d:e0:43:5c:08:55:f2:8b:eb:00:f7:
                    af:65:44:a8:8e:0f:48:91:6f:5d:f2:6f:2e:3f:66:
                    69:32:a1:fd:d5:0c:30:d0:b2:bb:8e:3f:e3:2d:b7:
                    06:29:ce:b5:76:d9:08:f3:0b:27:5f:ef:de:f6:ed:
                    3c:94:dc:0c:02:c4:63:9f:15:09:bc:96:25:77:f8:
                    ec:c4:6a:09:f6:f5:32:72:90:df:0d:a8:39:af:6c:
                    7f:51:76:7f:5e:9e:99:3f:10:2b:1b:a2:c5:fc:e6:
                    fd:7b:a1:06:7a:4f:eb:6a:35:ec:18:1d:3e:92:e1:
                    26:59:fb:70:8b:db:1a:5d:97:7a:bc:bd:e2:6d:7f:
                    62:d5:61:7a:64:4c:42:09:e8:65:a4:41:e6:20:c0:
                    7c:48:73:a3:8c:24:59:44:23:f3:54:60:f0:98:76:
                    f6:2e:f7:c2:75:cd:2a:46:5f:aa:2c:50:b6:5c:6b:
                    1d:db:70:23:1e:60:04:bd:de:f4:1e:09:54:b0:51:
                    54:01:c6:1c:a0:18:e6:84:54:7d:b9:7c:31:cd:a5:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F3:EE:59:C8:F7:1E:0D:D0:CE:B8:8D:32:11:8E:50:00:D2:BF:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl

            X509v3 Authority Key Identifier:
                keyid:E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:c4:91:ae:93:07:e7:23:0e:5f:6e:79:3e:1f:cc:3b:aa:
         e5:ba:6e:a5:46:89:06:54:6c:b4:96:e9:c0:46:26:b0:78:05:
         2d:7f:57:b7:66:97:3f:53:29:47:43:f5:28:c7:da:51:6b:0e:
         5e:07:46:e4:48:80:4b:e0:da:33:9e:8e:66:33:33:a4:36:34:
         9e:24:6d:39:8d:73:79:b6:f6:c4:dc:7c:ac:12:11:41:cd:5f:
         79:cc:aa:09:ac:9a:65:5c:5f:7c:73:e6:aa:7c:e8:81:4a:be:
         3d:91:27:58:31:23:ea:6b:eb:9b:11:7e:f1:a9:d5:06:ef:1d:
         5c:07:e0:ed:2e:1f:90:2f:6a:3e:6b:6b:2c:a6:79:33:01:2d:
         71:28:48:83:58:f8:d2:8f:89:76:f5:f2:76:2a:f7:c2:47:c7:
         5f:0a:97:15:ba:8b:bb:a7:95:72:92:85:bc:49:dd:24:9b:85:
         7a:98:f8:ad:d7:ec:a1:61:29:c5:29:01:b5:2a:7c:4b:a2:22:
         ca:0d:25:4e:ae:74:f3:39:d7:7f:d2:6b:ac:cf:82:b4:80:5c:
         9e:91:77:29:b5:4c:1d:aa:1e:f1:06:5a:c0:0d:3a:4f:98:91:
         d2:94:23:25:66:b3:9d:3b:d0:00:71:a7:91:95:f1:26:b3:78:
         bb:f5:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:25:33 2026 by rpki-client