Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/c561197a-e16c-3c6b-a8b7-f57bfe0cb93b.roa
File:                     c561197a-e16c-3c6b-a8b7-f57bfe0cb93b.roa (raw, json)
Hash identifier:          z3MXHQH+To2NAZha7RWdntfMDoqpVXzZlVZl+4r1GHU=
Subject key identifier:   45:A1:B3:FB:5A:72:01:01:8D:F9:2F:CF:6B:8F:AC:27:6D:3A:9E:D4
Certificate issuer:       /CN=ba6485f1-e40b-4764-bddf-7af6c9e42f13
Certificate serial:       010D0C9F4328584F4BBCC1EE946202F89DAE3980
Authority key identifier: DE:E7:E6:AD:A5:37:58:29:4C:C4:80:FB:B7:81:88:1D:CE:4D:6C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/c561197a-e16c-3c6b-a8b7-f57bfe0cb93b.roa
Signing time:             Fri 25 Sep 2026 20:41:24 +0000
ROA not before:           Fri 25 Sep 2026 20:41:24 +0000
ROA not after:            Thu 24 Dec 2026 21:41:24 +0000
asID:                     401144
IP address blocks:        2602:81e:e002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:bc:c1:ee:94:62:02:f8:9d:ae:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6485f1-e40b-4764-bddf-7af6c9e42f13
        Validity
            Not Before: Sep 25 20:41:24 2026 GMT
            Not After : Dec 24 21:41:24 2026 GMT
        Subject: CN=33ff7830-18d5-40ab-9cfd-146e6fddc201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:84:36:5f:59:32:86:b7:1a:08:c2:ac:33:
                    80:c4:fb:5c:e1:4e:d9:67:dd:11:39:b1:ac:35:f5:
                    b8:9d:36:52:de:3b:a9:2f:bd:98:1c:d9:f5:34:5c:
                    06:16:87:5c:d4:73:83:a8:83:8e:be:86:db:c9:0e:
                    91:0b:71:16:20:43:84:a6:3e:3a:4f:b6:10:e4:65:
                    4b:1c:35:19:ad:b5:d4:0e:ff:af:89:83:f3:9b:b0:
                    05:77:81:62:1f:a2:d7:81:a6:3c:43:4a:a8:3d:35:
                    83:c2:3a:09:1e:2a:73:86:fa:dd:69:44:d6:87:be:
                    d6:f5:d9:82:63:fb:58:02:a4:bf:41:ca:07:01:33:
                    e2:2f:11:10:d1:3b:d1:63:6f:ad:6c:51:85:77:9f:
                    e9:32:d3:9b:e5:c5:bc:51:30:3e:c8:4e:18:d7:a9:
                    a1:5c:83:32:18:92:2c:75:ac:b7:a2:5a:38:d7:cb:
                    3a:9f:b1:75:fa:97:f6:d5:a8:87:34:ad:73:32:41:
                    7a:61:85:ce:36:86:04:0d:25:7f:e6:ee:4b:6f:13:
                    73:04:01:01:24:17:0b:1a:87:1b:e4:6a:03:ba:8c:
                    b1:cc:93:b7:80:08:58:75:bf:6b:da:88:78:26:09:
                    1b:cd:e0:cd:ca:e5:76:06:42:e0:43:ca:88:1d:18:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:B3:FB:5A:72:01:01:8D:F9:2F:CF:6B:8F:AC:27:6D:3A:9E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/c561197a-e16c-3c6b-a8b7-f57bfe0cb93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E7:E6:AD:A5:37:58:29:4C:C4:80:FB:B7:81:88:1D:CE:4D:6C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81e:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:30:84:11:22:4c:39:72:e6:82:db:82:d3:f6:99:ef:67:7f:
         fb:91:27:2f:a2:f2:d2:05:9c:db:63:3b:b1:57:e4:af:70:96:
         29:93:51:b0:05:1f:a0:ec:95:f1:b5:ee:f7:36:76:cb:c6:7a:
         f4:a8:a6:f3:c6:47:d9:1d:3a:7d:ae:02:19:33:07:42:9a:40:
         e2:ef:39:c4:13:c5:79:76:f3:92:d7:bf:bf:04:3b:e3:f1:e4:
         59:cc:68:8b:f4:c6:c0:49:da:c4:92:09:5d:a1:cc:bf:c3:b0:
         cc:3b:28:2a:6b:16:e1:8b:65:19:37:82:e0:19:df:44:45:ae:
         7b:de:25:22:d4:63:e3:83:cb:59:83:8c:b7:10:6f:c2:ac:7b:
         6c:c6:b4:67:be:7f:90:d7:59:af:f7:6c:c6:a0:87:85:8c:29:
         4c:fe:33:80:bf:40:45:29:fb:e4:8e:cc:f9:a2:df:95:ce:d1:
         44:70:59:93:72:c6:11:30:c1:22:fe:03:61:96:d8:d5:ed:c9:
         b5:2c:39:7c:14:cd:44:ba:0a:ef:40:96:6a:cf:28:52:b1:6c:
         76:76:cd:0b:90:3a:fb:12:66:0a:5f:3b:7e:fa:5f:0c:bb:35:
         df:08:8c:6a:25:2c:5c:48:33:82:a1:c2:a0:af:7b:32:21:d3:
         26:b3:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:00:04 2026 by rpki-client