Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa
File:                     2d561adb-c9c4-3c99-91d9-d8a426c46475.roa (raw, json)
Hash identifier:          EkD4d0G3xTGmBc86nrfEU9Ss+vjq4Yym57/4NnNJlos=
Subject key identifier:   CA:91:8E:59:13:01:58:FA:96:27:95:13:16:1F:43:84:4E:3C:04:87
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F4328584F497609DC496DC17CF2829D80
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401466
IP address blocks:        2602:f874:be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:09:dc:49:6d:c1:7c:f2:82:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7389ef9a-ba27-43bd-8b29-fb43b1746ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:0c:e0:80:9c:67:42:1a:2d:c9:58:18:7a:
                    e3:7a:29:2b:44:d2:70:59:b9:74:95:27:9c:c7:37:
                    b4:45:78:45:ba:c0:92:7a:69:8f:97:9d:9b:3d:97:
                    30:9b:24:41:c2:69:15:bd:af:87:17:a7:90:1e:6d:
                    3a:c5:f8:a4:55:fb:f3:de:91:20:4c:c6:2b:69:1f:
                    c6:5d:de:17:dc:a4:b0:99:cc:ed:97:84:91:6c:10:
                    c0:34:c5:46:ec:bd:49:b2:09:89:d5:94:f5:9e:88:
                    a4:d7:a1:aa:07:56:8d:9e:86:1f:08:17:81:11:61:
                    86:09:84:13:12:18:11:0e:90:01:e3:55:5b:13:93:
                    e7:ea:14:c3:d0:97:7a:92:55:0b:9d:22:37:7a:3d:
                    2a:b6:01:0c:10:3d:9c:5a:98:1d:63:27:b0:eb:d1:
                    a8:fd:33:6e:7c:ca:2d:c5:c6:64:5c:e3:af:75:57:
                    6f:9d:84:ad:d7:90:50:cb:00:2a:7b:71:08:0f:ca:
                    aa:ae:1c:8b:75:e3:d4:cf:f0:fd:36:a6:35:37:7d:
                    0b:fd:0f:e9:9a:cd:79:7f:9d:f1:79:18:0b:b3:0d:
                    7a:e9:39:0d:5a:13:16:ee:94:07:45:b7:5c:a2:12:
                    3c:a5:2d:0e:ad:1d:6d:e2:75:71:25:e0:34:c0:78:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:8E:59:13:01:58:FA:96:27:95:13:16:1F:43:84:4E:3C:04:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f874:be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:8b:10:88:ab:27:07:82:03:2a:df:33:7c:b9:d9:3b:f7:
         f5:7b:4d:13:9d:6a:c5:f6:f9:6f:14:3e:71:d6:6f:3d:f9:47:
         9e:0d:bc:df:b1:46:97:1c:c1:45:92:1a:17:ec:fa:98:e4:19:
         6a:e6:e7:ca:1f:2d:f4:76:93:f6:72:fc:4c:2e:b3:f4:c3:7a:
         20:6d:29:01:66:7b:71:68:bb:75:13:5d:a4:a3:f1:1c:b6:5b:
         b5:33:c5:f5:27:53:80:d4:ee:38:1c:04:7f:f2:f0:1c:fa:5a:
         34:a9:a8:bb:91:77:bb:12:ae:d1:16:c0:76:62:bf:d4:61:92:
         41:90:08:0b:eb:92:0b:b3:f1:f8:6e:23:7f:56:74:fa:19:66:
         38:34:b7:f5:c0:12:3f:98:33:3d:cc:e9:03:53:3d:27:34:05:
         3b:5c:65:ab:92:0b:7e:9e:52:38:a2:6c:40:01:25:78:99:fe:
         f9:5c:6f:c7:1c:d5:a4:95:aa:61:3f:d4:56:f3:7f:38:7f:a3:
         5e:11:34:d8:1f:c2:1f:32:d3:4b:7a:6f:03:ac:d1:ee:90:b0:
         45:42:0f:3d:77:c8:a8:4a:c9:6b:b1:cc:8a:42:0d:55:38:9d:
         5a:92:eb:94:cc:41:77:11:f2:bb:4c:2c:df:26:13:cf:f6:f9:
         3e:6a:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:16 2026 by rpki-client