Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/e9c97ec2-94e0-3ed9-83ec-eec7c7e397ce.roa
File:                     e9c97ec2-94e0-3ed9-83ec-eec7c7e397ce.roa (raw, json)
Hash identifier:          DbSNIi6ajz184oaeeq7WZvT0KcwVRTqHsa7hkdYld10=
Subject key identifier:   B0:47:66:14:0B:15:3D:A1:06:F9:48:9A:F0:A3:DD:16:3D:E7:8A:50
Certificate issuer:       /CN=ffb931d1-3206-47c9-b23b-ac8485700ccd
Certificate serial:       010D0C9F4328584F549D4F00B325E2196E7E4F80
Authority key identifier: BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/e9c97ec2-94e0-3ed9-83ec-eec7c7e397ce.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     18781
IP address blocks:        2602:f711::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4f:00:b3:25:e2:19:6e:7e:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb931d1-3206-47c9-b23b-ac8485700ccd
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=b7768d95-701b-4330-969b-9129b96b8162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:b7:40:92:ba:9a:f3:a1:fb:ce:32:e1:3d:
                    48:db:05:7d:3d:cb:3a:57:e6:f2:13:bd:94:8f:5e:
                    4c:7f:64:4a:c2:bc:a3:a7:17:9e:60:87:18:c1:67:
                    47:07:87:d1:9c:77:16:09:df:20:e0:12:2d:5e:3a:
                    66:32:b5:76:cd:63:94:4a:8b:8f:45:21:39:64:01:
                    3b:a2:a9:15:ce:23:f0:1c:b8:87:1b:92:95:11:d7:
                    c9:0d:2a:6c:cd:79:81:1a:7e:8b:df:32:d5:05:5d:
                    ae:26:42:0d:ab:3f:81:8e:af:92:93:cd:4c:df:7f:
                    8b:58:cb:01:55:98:ac:39:12:d8:26:e5:00:1d:bc:
                    63:e3:38:bb:7b:94:8d:c3:3a:99:24:2e:cc:af:2c:
                    23:18:2b:23:cc:4b:cd:a1:32:04:09:25:69:a5:aa:
                    9d:2c:9c:23:91:43:ee:bf:7c:ff:52:b7:bd:76:df:
                    54:29:81:11:e7:6e:ef:59:85:30:26:74:84:90:6c:
                    38:5a:54:9d:dc:bc:7d:d0:46:6a:5e:7a:4d:08:41:
                    bd:6b:84:f2:e0:5c:cb:a1:0d:a7:3a:61:15:84:4d:
                    9f:28:b1:24:50:c4:d1:e8:0a:13:f7:8a:06:af:eb:
                    95:aa:24:88:ea:d9:8f:7d:3d:18:47:87:f1:73:4e:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:47:66:14:0B:15:3D:A1:06:F9:48:9A:F0:A3:DD:16:3D:E7:8A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/e9c97ec2-94e0-3ed9-83ec-eec7c7e397ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl

            X509v3 Authority Key Identifier:
                keyid:BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f711::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:be:ca:0a:68:47:78:97:ea:c3:f2:0e:60:1d:24:fb:a0:
         4f:0d:55:df:5f:ef:76:02:9d:bc:58:56:90:e7:4f:7e:37:99:
         88:e4:eb:5a:82:52:ad:c7:95:42:1a:cc:d6:e3:d1:10:5e:70:
         4a:36:3d:f0:e1:84:a1:5d:03:a1:5b:53:f4:1a:01:d5:0a:de:
         67:cd:10:59:fe:4d:d3:29:6d:78:ba:08:3e:94:5d:90:50:db:
         82:be:71:3b:00:ad:5d:ab:02:b1:a8:ba:7a:fe:38:70:14:c9:
         02:bf:fc:14:26:c7:15:fb:94:d5:50:0f:f7:e4:29:e7:2e:1e:
         a0:9f:28:fb:bc:cb:29:66:f4:aa:f0:8f:9c:03:6d:b6:5e:8b:
         cd:01:36:a9:f0:16:68:59:2c:f1:da:35:4f:f0:e2:dd:b5:94:
         ac:57:28:0b:ec:e8:58:c8:a0:99:17:60:4a:e4:fe:f5:85:ed:
         0f:38:1d:e2:42:e6:7a:b2:a2:58:fd:10:2e:60:c0:7e:ae:1d:
         a4:92:4d:54:af:c3:90:31:f8:38:1d:7b:f2:7c:63:e4:68:89:
         0b:19:7a:be:f0:1d:e2:d7:29:c8:90:2b:0c:e0:76:ef:27:ff:
         0f:82:98:d7:5a:94:2f:95:60:f2:26:0c:5b:31:61:86:09:95:
         2b:f2:2e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:27 2026 by rpki-client