Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa
File:                     9b7f43c6-1d60-387e-983f-5d6104c900dc.roa (raw, json)
Hash identifier:          Uvk73WseXPZyL1hV2v7IMDH2rXa79d9EYKJ2jYObqFA=
Subject key identifier:   EC:2E:3E:C8:43:37:69:18:80:7E:51:56:C8:24:16:75:E8:BC:B9:DB
Certificate issuer:       /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial:       010D0C9F4328584F4974227E1465F324BE830080
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30006
IP address blocks:        2602:f7df::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:22:7e:14:65:f3:24:be:83:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=14956186-9623-42b1-a5b7-279e65ca0c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:e0:d2:9a:60:72:11:b7:c7:76:d4:f5:cd:
                    b8:f5:2d:46:ef:04:8f:74:fd:88:ae:6b:2a:1e:a3:
                    7c:c9:ae:64:11:41:29:ff:a2:80:f0:0c:f8:af:56:
                    d6:7a:23:7a:c9:03:b0:73:fc:ea:d4:84:bb:07:70:
                    7d:1e:f6:a3:63:7d:90:bb:a1:c0:ac:cf:da:29:4d:
                    30:f8:e3:56:b8:88:98:66:1c:3c:4a:4d:a4:59:56:
                    68:ac:a3:b6:4b:4c:b6:a6:27:c7:b3:21:68:b8:fe:
                    00:33:f2:3f:c0:0f:a5:b4:7a:97:d3:c6:f3:18:34:
                    b0:37:9d:ed:eb:e3:56:18:02:b9:a8:45:57:11:71:
                    61:dc:12:0c:79:25:43:3c:a0:b3:5f:8d:56:11:ac:
                    b5:89:bf:d7:88:32:58:d1:ce:5d:63:4e:65:ae:e3:
                    92:18:1e:4c:75:73:8b:35:6c:69:4f:79:57:73:3a:
                    93:6e:74:4f:ab:c1:30:b6:47:3b:2a:8a:20:59:a2:
                    4b:6d:fc:39:c9:d9:13:dd:60:25:6f:eb:2f:05:2b:
                    76:3f:77:53:25:be:d2:3b:37:b1:c3:01:97:9d:a8:
                    ea:ac:7a:10:a9:2f:be:0f:14:f0:4a:b4:b1:58:3d:
                    68:d7:48:d3:6a:a6:64:0a:6f:bd:ab:26:8e:5c:19:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2E:3E:C8:43:37:69:18:80:7E:51:56:C8:24:16:75:E8:BC:B9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/9b7f43c6-1d60-387e-983f-5d6104c900dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl

            X509v3 Authority Key Identifier:
                keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7df::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:43:ce:03:d0:ec:18:3f:81:95:2e:54:f2:e0:82:11:35:a9:
         ee:27:77:cc:ca:3c:86:07:0d:46:e2:68:2b:44:ec:a0:03:e1:
         72:de:98:3a:51:b5:5e:d9:aa:b0:32:e7:60:f9:45:29:18:6b:
         86:b4:b3:23:56:a8:2f:31:b7:d2:96:c7:d2:64:d4:9f:54:86:
         0c:83:9b:0b:8f:35:c8:bc:9d:be:aa:08:c9:15:b6:85:34:2a:
         c0:a6:05:56:aa:5a:48:e4:08:43:12:6a:47:66:d0:be:8f:de:
         58:79:3c:b8:7a:6c:05:ba:39:e0:3d:f2:72:5a:eb:3e:d1:fc:
         c2:7f:c6:43:9a:99:d6:1e:30:a2:8b:35:81:a9:40:11:34:7e:
         d4:50:51:5c:32:24:dc:e1:24:12:a5:32:09:8d:da:de:d1:8a:
         15:ef:b0:54:12:24:db:a0:99:87:89:f9:d1:8c:23:f6:ad:d7:
         43:a5:12:66:4d:3f:b7:ac:1d:42:53:6c:01:b3:d2:ea:22:aa:
         86:0d:66:a3:21:2a:52:a4:cd:ca:f4:31:2d:b3:67:57:75:81:
         c4:d8:48:21:4e:2c:44:28:e2:70:46:d0:2c:34:60:5a:14:bf:
         31:cc:a0:7e:29:1d:69:eb:1b:ef:ae:e3:fb:06:e7:d2:d9:d9:
         08:9f:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:33 2026 by rpki-client