Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa
File:                     f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa (raw, json)
Hash identifier:          4g2YupY7FmO0s8ojNmNKnRTDwgg/HWLUjyiZFV0BVZs=
Subject key identifier:   83:1F:91:DF:A6:41:C3:F3:48:FE:49:B9:58:3F:15:3D:52:C7:F5:C6
Certificate issuer:       /CN=e0222b33-d953-40bd-9e16-838d515a3e80
Certificate serial:       010D0C9F4328584F698D7CE9D3A62453C201F980
Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     30708
IP address blocks:        2607:f618::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7c:e9:d3:a6:24:53:c2:01:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=313ef156-e9f1-4775-8cbb-f6c7a6f19a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:3b:67:ca:34:77:be:7d:1c:e7:9e:b1:0f:
                    e4:a6:3d:cf:3e:94:8f:d1:1f:08:01:4b:19:d2:df:
                    25:d7:e3:73:61:d2:fa:e6:a4:00:f0:41:07:d5:30:
                    b4:87:29:6a:e6:e9:0e:5b:14:e7:02:f3:9d:ae:d1:
                    29:d0:5d:ef:a5:36:f8:d5:46:40:79:69:33:49:64:
                    26:8c:3d:46:9e:fa:a3:db:36:74:51:d9:81:11:3d:
                    20:49:87:48:5a:84:00:94:ac:f1:30:99:a7:ea:12:
                    37:ce:f8:38:b1:fa:72:5a:8a:c0:c8:a2:9a:06:5e:
                    5f:d4:7c:4c:0b:94:dc:b3:37:f2:cb:e8:50:02:bb:
                    0c:75:c4:56:7e:51:8f:c7:c2:23:13:00:dd:49:78:
                    3c:54:d9:93:0c:7c:fe:9c:6c:b6:81:83:13:90:0f:
                    37:8c:09:33:af:a7:52:d2:26:68:f4:08:76:35:8c:
                    1b:6b:10:c4:25:6b:23:4f:37:0f:1b:c9:3f:63:29:
                    a7:c2:4a:48:22:45:9b:07:7c:a6:d2:64:98:c2:f7:
                    55:81:c5:bc:ee:38:8e:bf:fb:3a:24:ae:14:c7:0b:
                    d5:cf:63:6e:83:05:77:73:8b:ce:6d:42:49:9a:b2:
                    dd:38:33:0d:8c:0a:09:f4:cb:0e:d4:6e:45:f4:5f:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:91:DF:A6:41:C3:F3:48:FE:49:B9:58:3F:15:3D:52:C7:F5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/f502b39b-14a9-3672-9d2a-c8aa86dfb565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl

            X509v3 Authority Key Identifier:
                keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f618::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:a1:27:78:9e:7e:20:ef:c1:c3:91:5c:b9:dd:4a:6f:9a:
         40:90:5a:db:94:14:80:a4:e3:ce:3f:53:46:e7:09:74:06:47:
         60:84:00:2f:32:d2:70:92:73:b4:1c:48:97:b4:a0:a6:19:3d:
         89:74:88:67:c0:cc:1f:45:20:30:6f:e7:0b:59:3a:8c:44:b5:
         9f:1e:ce:06:bf:cf:7d:2d:3b:be:ac:1e:b5:61:b0:54:89:e2:
         d1:4e:ba:d3:83:04:5a:50:83:5e:0e:53:75:7d:77:8b:d1:5b:
         dd:a1:c1:9b:48:94:88:96:8d:c4:1b:42:c7:68:27:f9:3b:a9:
         63:c5:63:6d:40:b8:a2:da:2b:5b:7a:92:2e:ee:35:99:cc:45:
         15:bf:ed:73:8d:56:7f:1e:2f:bf:8b:82:10:60:72:a7:8b:f0:
         ba:8e:be:1a:44:10:e1:24:bd:04:dc:93:32:cc:bb:cc:d0:07:
         86:dd:bf:27:3f:a0:a6:ba:80:7c:c2:de:42:e6:43:ed:f8:25:
         78:60:96:60:f9:b1:a9:3a:e9:02:60:64:ad:1e:31:fb:eb:ed:
         f5:7e:ae:1f:d8:ad:b0:e8:80:87:9f:3f:45:c8:ce:1f:89:5b:
         77:af:41:47:b0:a1:c0:ad:56:52:66:af:54:12:01:bd:c9:6d:
         37:92:29:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:11:07 2026 by rpki-client