Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/be8b0b0e-9132-3e8f-b04b-900d30704f62.roa
File:                     be8b0b0e-9132-3e8f-b04b-900d30704f62.roa (raw, json)
Hash identifier:          in9MdPsT8A3fhhvE+Rc5MpU7A+OLCiozpmQgWP9+G0Y=
Subject key identifier:   FD:4E:95:A7:21:01:DB:BE:ED:A7:AC:82:4A:7F:0F:BD:6A:17:13:4E
Certificate issuer:       /CN=e0687cea-be52-4639-b2ec-92c799316a27
Certificate serial:       010D0C9F4328584F6D37C3B5ECE44F47A84BB960
Authority key identifier: 3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/be8b0b0e-9132-3e8f-b04b-900d30704f62.roa
Signing time:             Wed 07 Oct 2026 20:30:55 +0000
ROA not before:           Wed 07 Oct 2026 20:30:55 +0000
ROA not after:            Tue 05 Jan 2027 21:30:55 +0000
asID:                     20473
IP address blocks:        2602:f2dc:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:37:c3:b5:ec:e4:4f:47:a8:4b:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0687cea-be52-4639-b2ec-92c799316a27
        Validity
            Not Before: Oct  7 20:30:55 2026 GMT
            Not After : Jan  5 21:30:55 2027 GMT
        Subject: CN=d2b1a4ad-4965-4132-99b4-0a71a082ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:6c:01:83:3f:5d:df:b5:7c:9c:72:a4:09:
                    cf:99:6b:46:8f:08:d6:a4:ae:f3:a2:ed:f6:eb:95:
                    e3:91:6e:de:19:a3:bc:b4:69:2d:e9:75:79:f9:3c:
                    2d:d1:bd:84:7b:3c:53:ea:0e:15:af:de:26:47:ed:
                    ad:2f:1c:7a:0f:cc:09:84:98:ce:90:d5:75:50:a5:
                    fc:0e:b5:fa:47:38:30:84:35:51:ae:bb:c8:38:6f:
                    16:97:26:aa:99:ec:64:3d:72:ec:e6:82:82:80:94:
                    76:bf:af:9f:75:12:e2:da:8a:19:e0:80:a9:1c:f5:
                    f9:3a:3b:a2:1e:49:de:bd:89:ac:39:23:4e:d8:e6:
                    94:28:24:76:2d:74:6b:c8:d1:07:aa:12:fc:a2:bb:
                    9d:09:54:e3:3d:34:2f:1a:b4:0c:4b:e3:6a:d3:03:
                    a4:a4:19:70:d2:bd:9c:2b:f3:5f:d5:62:50:3a:39:
                    93:75:29:49:6f:1f:ec:40:5f:ed:53:cb:8c:ca:12:
                    6e:28:cf:e6:70:3b:95:eb:06:b1:ae:ce:6b:54:b4:
                    be:22:e9:bf:0b:01:ba:40:1f:5f:8a:17:e4:8d:b3:
                    88:c8:fd:1c:45:db:0f:b7:f2:ea:77:ad:86:0e:ed:
                    81:55:28:7a:ca:70:5a:57:2f:e6:19:40:12:df:f7:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4E:95:A7:21:01:DB:BE:ED:A7:AC:82:4A:7F:0F:BD:6A:17:13:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/be8b0b0e-9132-3e8f-b04b-900d30704f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl

            X509v3 Authority Key Identifier:
                keyid:3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2dc:a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:af:64:8d:13:c1:e6:95:42:20:51:af:ec:55:25:90:9a:
         7f:1e:06:e3:04:0d:02:19:e0:01:30:26:05:b5:b2:77:8c:03:
         0f:cb:c6:05:16:11:59:2a:46:c8:c7:68:56:88:ce:40:f9:13:
         79:ac:46:61:b3:40:90:cc:80:c1:dc:a5:03:99:da:b6:b3:54:
         61:d4:d9:61:cf:32:d8:56:2e:e7:43:81:b3:da:98:42:0b:41:
         bd:35:c2:3d:82:86:24:6e:51:c1:b4:2f:0a:14:3f:d3:40:01:
         92:fd:07:ac:17:e9:11:9f:0a:3b:33:a8:79:6d:43:e3:1a:6c:
         8f:5b:f3:8d:da:e1:e5:da:54:a6:6b:aa:a7:1b:86:cd:3b:53:
         35:92:aa:03:7e:6e:52:7b:d3:ce:f4:90:16:9e:30:b2:70:ab:
         e6:30:e5:ba:e3:09:c0:54:65:aa:ce:1d:d6:64:a1:de:6f:8a:
         a8:85:5b:6c:2f:96:ea:56:09:87:15:33:0e:ef:55:0f:0b:be:
         87:34:49:95:a2:a6:9d:33:19:00:35:54:25:46:5e:23:07:c3:
         f5:d5:00:22:8d:60:d5:75:3f:55:22:81:f5:fe:7c:76:58:bf:
         76:a4:a9:0b:c4:ff:9c:2e:ce:f7:89:aa:53:32:df:eb:59:40:
         0e:2b:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:55:38 2026 by rpki-client