Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/c55d7974-6ba5-3613-b747-dc8ea65928c2.roa
File:                     c55d7974-6ba5-3613-b747-dc8ea65928c2.roa (raw, json)
Hash identifier:          JKOqchjbhpr0PXprmn4+/9BKUFlDlYr4aCSIYMYa2zc=
Subject key identifier:   7D:1D:5C:64:28:97:E3:AC:29:E8:8D:C7:B8:5A:27:95:53:B5:D6:D8
Certificate issuer:       /CN=5ad6fa24-7c60-4275-b208-9a73092370c7
Certificate serial:       010D0C9F4328584F49744AC3C6721C3C3C59B980
Authority key identifier: 4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/c55d7974-6ba5-3613-b747-dc8ea65928c2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401962
IP address blocks:        2602:f56c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:4a:c3:c6:72:1c:3c:3c:59:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6fa24-7c60-4275-b208-9a73092370c7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=858302bf-7f43-403a-ad2a-819fee3d4e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:92:95:b5:27:30:c0:f5:97:04:0e:5c:56:
                    33:bf:c0:bf:f0:f8:ed:79:44:ef:58:39:69:1c:1d:
                    b0:eb:e7:61:ca:d7:5a:c0:fd:8e:62:49:d9:c9:87:
                    90:1c:57:d7:fe:b3:6b:eb:94:bb:eb:54:3c:2a:ba:
                    59:bb:dd:43:86:50:72:24:b3:d7:60:2b:e1:d4:cb:
                    f1:47:8f:38:7c:3f:54:99:04:2b:5d:32:c1:72:8b:
                    1c:b8:ee:5c:bc:e4:d5:63:04:11:62:90:4b:0f:bb:
                    13:44:ae:d1:94:75:6d:a9:14:fe:0b:6a:91:dc:52:
                    fc:3b:6d:90:f7:6b:54:55:2c:91:da:c6:72:44:1c:
                    3c:4e:6e:12:a1:19:c2:72:86:54:9d:ef:1a:64:27:
                    d4:1f:28:14:a7:fe:5f:f6:fd:2d:d1:df:9e:be:06:
                    37:33:79:ad:05:03:4f:32:d3:dd:83:ab:a9:80:f6:
                    e7:aa:93:e3:e0:ad:ab:d4:a6:26:10:b0:15:16:fb:
                    08:d2:bd:96:52:85:12:da:ca:34:f6:14:5c:81:ac:
                    b1:96:ae:17:93:0d:8d:0f:7d:8f:cc:20:f9:b2:1e:
                    17:c9:fd:0d:4f:4e:ce:ea:3c:0a:97:af:7e:18:35:
                    93:04:fb:bd:fd:1c:08:e1:fe:f4:0b:cc:8d:4c:df:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:5C:64:28:97:E3:AC:29:E8:8D:C7:B8:5A:27:95:53:B5:D6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/c55d7974-6ba5-3613-b747-dc8ea65928c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f56c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:65:1f:20:37:7f:9e:89:ff:83:e1:64:0b:13:e7:11:c2:01:
         50:59:c4:f0:35:94:99:8d:95:6b:0f:90:b9:fc:68:2f:b1:5c:
         11:a8:3f:6a:a7:50:80:a3:4c:c1:45:49:d9:33:37:a6:87:26:
         d5:eb:85:e9:78:91:db:56:87:7a:49:e1:b7:c3:87:c4:d2:b5:
         23:1b:35:b7:e9:7b:39:69:0e:23:6f:60:5b:5d:d2:c1:f2:5e:
         75:ca:51:6d:03:22:c0:2b:56:3f:67:ac:a5:fc:a4:32:7f:c9:
         f7:5b:a3:68:3a:2c:51:1b:6b:0e:e0:ec:3b:20:e1:79:c4:4b:
         78:48:46:c6:2d:da:e1:f2:5c:70:b3:3c:f1:9d:5f:53:c3:0b:
         be:20:5e:12:d9:b3:c3:4c:43:09:7a:35:84:a2:b4:40:b8:82:
         e9:74:03:d6:c1:ea:6e:02:58:de:d0:60:c8:13:fc:0c:4c:39:
         6d:4d:f8:80:1c:a8:4c:94:78:71:9c:dc:9c:c8:d3:ca:92:85:
         72:02:ea:6b:e8:d8:ca:8d:6c:41:7d:f2:62:e8:52:e5:08:70:
         70:7c:e6:ee:63:34:ba:d5:33:98:72:fe:6e:9e:8f:c8:20:9a:
         a0:75:90:1b:4b:88:ed:b7:82:ae:2e:d4:e7:aa:f9:86:a9:94:
         05:6a:53:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:48:07 2026 by rpki-client