Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/65978d6d-6c80-37c8-9a7a-00ce727407c7.roa
File:                     65978d6d-6c80-37c8-9a7a-00ce727407c7.roa (raw, json)
Hash identifier:          SPMl00Wmub2MpeHR2naxdjTsf4KzNeWDb4bc9Sm05Ws=
Subject key identifier:   16:3E:80:65:ED:28:EE:12:EA:C0:01:CD:78:7F:19:1C:3B:56:84:12
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584F4974EB18F6ACA8D6E58CF880
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/65978d6d-6c80-37c8-9a7a-00ce727407c7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     61112
IP address blocks:        2602:fa4f::/41 maxlen: 41
                          2602:fa4f:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:eb:18:f6:ac:a8:d6:e5:8c:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=42ecc794-2084-4525-828a-f991952676f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:ab:18:53:dd:0f:73:0f:74:4a:c6:51:4d:
                    ec:82:e5:28:ad:4a:11:3e:b5:53:13:9d:3d:dd:55:
                    c1:57:ff:d3:b1:08:18:73:9f:cb:f1:76:ce:94:dd:
                    82:9d:92:09:fc:48:a5:22:f3:dc:ee:cb:da:67:6f:
                    59:7c:3e:6d:2a:d8:de:42:6b:9b:60:d9:04:4f:5c:
                    b3:e8:5d:ab:c8:5f:d6:32:27:92:6a:60:81:5a:b0:
                    87:5b:19:ee:28:b6:13:e5:78:77:24:34:95:78:d8:
                    46:99:b7:a4:84:e6:0b:87:10:53:2a:17:fa:db:29:
                    83:f4:4d:d6:fa:46:36:ae:7c:89:04:eb:5b:51:17:
                    e4:ab:b2:ff:dd:9a:a2:bd:22:d7:ea:80:a8:48:c6:
                    97:3e:82:69:76:1c:51:2c:94:6b:40:6d:40:c4:ae:
                    78:4c:52:cf:08:af:20:ba:f8:54:ab:a9:8c:61:f1:
                    1d:a9:99:e3:0a:d9:7f:a7:64:34:0b:2b:85:73:71:
                    65:8a:a9:95:93:70:77:a4:45:ab:23:91:86:25:03:
                    ee:90:3d:e0:b4:db:cd:24:00:9d:9e:97:62:2f:1d:
                    e4:34:3b:1e:25:58:9d:bf:92:f5:91:b1:62:7c:82:
                    30:e5:c0:b3:84:53:c0:d3:13:bf:48:d3:bd:22:c8:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3E:80:65:ED:28:EE:12:EA:C0:01:CD:78:7F:19:1C:3B:56:84:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/65978d6d-6c80-37c8-9a7a-00ce727407c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0b:3e:27:a5:1d:69:69:f6:fe:89:31:a7:73:7d:35:37:f3:
         e6:60:bc:71:7d:dc:e2:b8:58:1c:07:2f:2e:35:c7:c6:8c:ad:
         93:c3:b9:e4:5f:b3:db:e1:ee:6e:22:d4:ed:78:aa:52:42:3f:
         b2:f3:73:5a:fc:79:2d:25:7b:e9:27:79:95:4c:74:c0:84:71:
         dc:63:d1:c6:d3:86:2f:d0:e9:90:6a:79:58:92:30:92:f1:63:
         1e:08:4c:fe:9d:05:eb:60:80:ce:00:38:5c:69:b7:a3:c9:8b:
         16:a3:df:d1:4b:91:bf:bf:62:ce:6f:c8:6b:45:34:a3:ea:9f:
         b8:a5:60:17:51:cf:00:8e:d6:c4:f4:fb:a5:64:69:91:b4:74:
         ca:f8:80:a7:ae:80:17:63:8f:8e:e6:53:26:06:1a:f9:c9:53:
         4a:0e:94:13:c9:5f:77:50:63:27:d0:eb:19:8a:ed:3b:24:7e:
         0a:62:dc:0c:2d:96:1d:d1:e9:f4:d1:b0:7f:55:5d:a8:80:db:
         eb:57:14:c3:d5:34:0c:be:c3:94:22:f6:28:68:03:bc:b6:9e:
         ef:44:5e:49:70:2d:56:65:88:44:6f:b6:59:e6:a3:fd:79:c3:
         ab:d9:a2:a6:2e:75:ed:2c:ca:99:db:2f:5c:e3:19:01:63:87:
         f2:00:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:53:18 2026 by rpki-client