Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/ca80e9b1-2cd8-3811-ba8d-ad85a82f8901.roa
File:                     ca80e9b1-2cd8-3811-ba8d-ad85a82f8901.roa (raw, json)
Hash identifier:          yhxcm+cFRx2lvw4LM96a8KOnl51iX3LXNtDElrPyDow=
Subject key identifier:   73:99:6E:74:CD:9D:5C:CB:5E:40:55:10:5E:28:1C:24:7F:1C:A0:EA
Certificate issuer:       /CN=c286a634-9315-4f0e-a434-cf4e2a0d1236
Certificate serial:       010D0C9F4328584F5E62CEFA4FDBF9715C244200
Authority key identifier: 36:88:07:03:6C:FE:C0:8D:8F:03:DF:73:35:D4:E3:65:60:5A:1C:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/ca80e9b1-2cd8-3811-ba8d-ad85a82f8901.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     401130
IP address blocks:        2602:f762::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/c286a634-9315-4f0e-a434-cf4e2a0d1236.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/c286a634-9315-4f0e-a434-cf4e2a0d1236.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:ce:fa:4f:db:f9:71:5c:24:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c286a634-9315-4f0e-a434-cf4e2a0d1236
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=90f9b2fd-28ea-4fe7-9956-367e94ede802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:a3:e7:b8:2a:b7:9c:82:0f:55:7f:da:ae:
                    26:25:e2:c8:e0:60:86:f8:a0:a8:fa:ca:74:0d:95:
                    5e:e5:0f:b4:91:de:f9:a1:b0:67:95:c9:46:41:e2:
                    15:8a:68:61:7c:ec:18:5b:f4:9c:73:82:03:6c:bd:
                    2c:6a:d2:5b:97:33:c6:fd:28:73:a4:01:39:07:86:
                    e9:12:42:90:79:cd:1e:fb:0d:d8:81:1f:d4:7e:f3:
                    7f:00:10:24:c1:06:c7:1b:73:26:22:93:bf:62:9a:
                    a1:6d:b4:bf:40:4a:55:32:ae:ee:89:7a:c8:33:7b:
                    6e:f0:b5:7a:ff:7d:aa:33:1f:ac:f2:4e:90:09:22:
                    74:1d:c7:14:9b:07:cb:a0:cf:4e:f3:50:16:0a:7f:
                    50:58:8d:7e:e5:19:4d:4a:1e:52:1b:f9:73:d7:29:
                    96:c7:5f:50:91:fc:2c:05:2c:82:04:ec:ee:a3:24:
                    76:fd:a3:4f:5a:82:28:0d:10:cf:bb:36:e3:31:a4:
                    70:10:69:84:53:76:54:32:e6:18:30:39:5c:35:63:
                    b8:f2:3e:af:61:32:bc:40:88:e9:3e:de:ba:36:6e:
                    e8:f8:d4:49:5c:19:d1:a6:7f:f1:5a:02:78:2e:a9:
                    d1:d4:28:19:17:5f:81:6f:2d:66:13:06:73:c2:24:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:99:6E:74:CD:9D:5C:CB:5E:40:55:10:5E:28:1C:24:7F:1C:A0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/ca80e9b1-2cd8-3811-ba8d-ad85a82f8901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236/c286a634-9315-4f0e-a434-cf4e2a0d1236.crl

            X509v3 Authority Key Identifier:
                keyid:36:88:07:03:6C:FE:C0:8D:8F:03:DF:73:35:D4:E3:65:60:5A:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c286a634-9315-4f0e-a434-cf4e2a0d1236.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f762::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1c:de:a2:29:a1:68:a1:6b:3b:41:d5:1c:70:69:e0:aa:24:
         c0:da:e1:c4:ba:c6:32:86:c2:67:22:af:58:5e:69:61:31:41:
         6e:3f:a9:9d:81:dd:3d:d3:62:4e:f8:89:e7:e6:78:f1:07:35:
         58:8a:5e:00:57:08:83:62:2d:8d:aa:88:8a:88:2e:c9:91:86:
         f8:0e:6c:98:a1:09:e2:6e:41:64:2a:3a:a2:25:97:41:4c:7c:
         c1:a6:ae:5f:d5:73:6c:6a:a1:de:77:06:5c:38:9a:1b:66:f6:
         7c:c5:cc:b9:f5:6f:ae:2d:21:28:eb:f7:34:4b:36:5e:cc:7d:
         84:fb:89:28:7f:6a:48:2f:92:d5:82:be:25:12:91:7a:c1:c2:
         7b:66:00:2d:3d:81:79:ad:fd:47:e4:a3:05:8f:f7:de:24:48:
         b8:c7:c5:a6:a3:e1:e9:54:01:bd:75:a4:f8:54:e7:fc:3a:27:
         71:e0:88:13:47:c0:76:25:98:a6:51:14:77:86:e9:eb:3a:e0:
         e9:3c:80:fd:be:0b:26:d6:b5:b3:7b:25:5c:a8:2d:e3:e0:52:
         26:73:e2:b7:73:62:4a:0e:eb:88:46:7a:34:36:50:5a:90:d9:
         49:61:5a:65:72:17:b9:40:c9:1b:50:f8:d5:c1:e2:2f:a0:df:
         6a:fc:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:23:45 2026 by rpki-client