Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/aedb9b56-9def-3067-905e-0decec5cf92b.roa
File:                     aedb9b56-9def-3067-905e-0decec5cf92b.roa (raw, json)
Hash identifier:          AFoQItqLYPZjG9r0pHccFuYD4NZRdv5AoqAbP+nNg/s=
Subject key identifier:   62:0F:BC:7E:B4:F0:B9:95:38:B4:67:AD:14:29:72:99:14:3A:D0:BD
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584F4987FED77643A01920AD9CC0
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/aedb9b56-9def-3067-905e-0decec5cf92b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     149513
IP address blocks:        2602:fa33:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:fe:d7:76:43:a0:19:20:ad:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b67ac448-d887-47bb-8918-faeec3fbb10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:4a:d3:d0:c8:d2:9a:3c:f0:1c:61:3c:15:
                    57:46:a6:23:50:34:87:3e:35:03:b8:fc:7b:08:b9:
                    e8:cd:f4:d1:d3:00:e7:3a:b2:3e:6e:75:fb:fc:5f:
                    d5:78:7e:38:8e:a7:80:9b:f3:69:45:1d:9a:7d:f3:
                    68:52:89:07:c8:98:da:26:9c:59:d9:6c:24:f3:39:
                    9e:2c:5e:15:92:5a:4f:70:eb:9e:11:5b:17:28:6d:
                    4e:08:af:39:50:33:4b:3f:91:57:86:f7:f4:1b:5b:
                    62:c9:cd:0c:00:fe:24:fb:48:3c:84:c0:5a:a4:d1:
                    09:16:f0:f3:e8:0a:02:cd:ae:b5:de:6f:f9:3b:fe:
                    a8:b9:5a:bf:9c:ed:8e:2b:5a:3d:5b:93:4e:41:87:
                    53:7c:68:1b:7c:a6:cc:3d:f8:c2:39:0f:ce:ff:ae:
                    61:a0:4d:13:6e:cb:51:12:3b:65:54:8a:15:74:dc:
                    a6:44:79:7f:35:0d:5e:90:df:1b:31:07:17:00:28:
                    e7:bb:d1:51:62:64:ab:6f:d8:b4:90:6f:5e:b0:54:
                    d3:00:d6:05:f9:07:1b:b8:94:c1:b5:00:03:14:59:
                    84:2d:3e:a7:6c:aa:af:f8:0e:fc:d9:b4:e7:06:ed:
                    5a:85:9d:dd:0d:61:e2:d3:4f:fe:68:ed:c7:d9:1f:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:BC:7E:B4:F0:B9:95:38:B4:67:AD:14:29:72:99:14:3A:D0:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/aedb9b56-9def-3067-905e-0decec5cf92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa33:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:d9:ff:8f:fa:ae:cf:29:37:67:ac:fb:3f:8c:5e:ce:bc:
         8e:a4:40:c8:90:06:66:b7:d2:ee:57:17:93:85:f1:6d:fc:19:
         10:a6:1f:11:81:a7:b1:03:5b:b1:77:99:4c:7b:a3:65:94:83:
         b6:23:4d:5d:0e:4f:fb:e6:63:e0:d3:80:d6:f9:e7:2e:fb:b6:
         dc:bc:77:f3:f0:28:41:10:8b:96:32:4c:03:83:cb:ff:de:b6:
         0a:44:87:d1:49:dc:5e:5c:75:e0:b7:ed:bf:30:d5:f5:a3:35:
         37:03:81:74:bb:5b:26:d6:d0:46:21:1f:da:b7:08:9e:d9:2e:
         9a:76:62:0c:f5:e6:49:38:a3:3d:a7:f7:82:0f:39:d8:06:98:
         44:a8:7c:3d:95:3e:e4:89:11:64:a1:48:19:61:67:f5:4d:74:
         e5:c7:c3:5b:13:91:23:c7:e2:48:ab:2e:08:7e:1d:b5:ea:f1:
         df:7f:6e:e0:d1:80:bb:ac:33:65:97:01:97:15:d7:e5:31:ae:
         37:dd:50:d2:e7:f1:e2:cf:f0:92:0f:a3:8e:e0:61:80:bc:93:
         3f:90:0a:49:99:9e:be:22:e8:e8:c8:21:5c:43:6e:66:ae:b1:
         ac:c9:2a:81:bb:84:4a:3a:6c:e2:a0:17:35:2e:3a:c5:67:be:
         4a:f1:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:35:36 2026 by rpki-client