Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa
File:                     9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa (raw, json)
Hash identifier:          iu3J4ono+06UtDBLV8ySkif2OagglF7tpntPhiengQA=
Subject key identifier:   68:9D:11:43:C3:DA:B3:39:84:57:B0:41:A9:DB:FE:EE:0E:B8:0F:35
Certificate issuer:       /CN=fdd9493c-4150-4957-92ed-ba65ee3083d6
Certificate serial:       010D0C9F4328584F02423FBB51E6D17CC9C5A700
Authority key identifier: C9:56:85:07:37:1E:A9:D2:B8:2A:31:A7:7A:A7:11:29:A7:AF:3E:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     401816
IP address blocks:        2602:f5ee::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:3f:bb:51:e6:d1:7c:c9:c5:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9493c-4150-4957-92ed-ba65ee3083d6
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=5dddc511-e29b-42ee-8195-8c8d02c1eb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:ea:ff:eb:78:34:51:e1:3b:5d:bd:c0:b5:
                    d5:a7:ce:ed:d8:0c:71:24:ca:99:6e:df:c6:22:a4:
                    93:df:7b:d3:54:00:c2:13:bf:12:80:71:df:8d:e6:
                    6c:81:51:7e:7a:31:4a:a6:cf:90:46:3a:d6:8d:c6:
                    10:c8:cd:35:f4:3c:fb:3a:5d:e5:01:8d:b5:da:15:
                    56:fd:cd:b9:db:ae:fc:e3:5c:3b:8e:d3:40:9b:e6:
                    87:b1:bb:fe:6a:84:c1:25:89:35:05:58:d9:8e:c9:
                    26:e8:51:e7:49:5c:20:15:c6:98:38:d4:52:ca:4f:
                    ea:04:7e:6c:f3:b0:12:db:03:61:8b:12:e6:df:66:
                    c8:74:1f:ef:5a:2d:70:4b:ac:00:8d:83:0a:6d:18:
                    42:f1:d1:15:7f:95:c9:22:11:ab:d3:19:9c:c7:4c:
                    92:02:72:48:90:98:17:39:0c:a6:83:a1:33:02:6d:
                    26:ae:e0:dc:c0:90:23:5d:85:38:e1:bc:63:c5:22:
                    75:8b:2b:4e:e0:b7:96:2c:00:31:97:c1:a1:45:5c:
                    72:42:ac:7d:72:f4:cc:6c:11:3c:eb:cb:d4:5e:e0:
                    26:5c:a1:0b:c2:a1:12:31:de:bd:19:31:eb:2a:eb:
                    1c:0a:59:02:14:c3:fe:ca:e6:17:c4:89:20:cb:13:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:11:43:C3:DA:B3:39:84:57:B0:41:A9:DB:FE:EE:0E:B8:0F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.crl

            X509v3 Authority Key Identifier:
                keyid:C9:56:85:07:37:1E:A9:D2:B8:2A:31:A7:7A:A7:11:29:A7:AF:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:40:6f:2b:0c:ff:80:b3:60:1a:e5:74:50:f4:a2:43:c1:a7:
         0d:9f:73:71:ff:31:c2:9e:a5:0c:da:fb:c6:7c:0d:96:2b:bf:
         e6:ca:ee:80:72:73:e7:c0:77:c5:29:a7:cb:48:12:dc:5c:2d:
         3b:b2:61:88:52:11:6b:ac:93:7d:32:e6:5d:c9:ef:cb:dd:4b:
         8b:0b:ff:a7:e6:52:62:71:da:57:a8:cb:0f:ee:70:22:fb:e4:
         29:cf:35:be:8b:07:33:50:3a:d1:42:b5:48:d6:89:4e:f1:56:
         5e:ef:68:57:7d:e5:80:93:4b:04:2a:85:6f:b5:50:90:2d:35:
         33:8d:a4:46:d8:88:c5:27:67:bd:40:30:af:07:59:ba:8a:5e:
         c2:66:80:a4:2f:cd:7b:2b:f5:8f:e0:3d:fa:1e:e7:c5:6d:8d:
         ea:b2:10:bc:6a:4a:32:71:f6:89:55:58:95:7a:45:e6:2c:10:
         d5:a0:58:52:6d:97:6a:58:19:55:b1:78:66:b8:7e:9d:ae:03:
         1b:c7:7d:f6:72:d5:39:ed:ba:00:af:52:88:b0:ef:e6:ad:e3:
         5d:d2:d8:b0:f8:95:17:be:ac:14:93:6f:1e:c3:e5:09:cc:18:
         ed:ef:61:a5:da:e6:a0:18:7d:67:11:0e:9b:4a:c7:a0:6d:a3:
         c7:16:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:31:46 2026 by rpki-client