Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/d3af590a-5999-3790-aa5b-c0dbaadef1c3.roa
File:                     d3af590a-5999-3790-aa5b-c0dbaadef1c3.roa (raw, json)
Hash identifier:          95U/b3xRMqeDlxng8hmqYnfkGWuF5KOQqGrLLtpIF+Y=
Subject key identifier:   96:67:FC:6E:AD:1D:AB:49:E3:DA:50:85:B5:0F:DA:60:30:65:94:56
Certificate issuer:       /CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
Certificate serial:       010D0C9F4328584F498767E454DE8B774BE34280
Authority key identifier: 88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/d3af590a-5999-3790-aa5b-c0dbaadef1c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27485
IP address blocks:        2602:f8c5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:67:e4:54:de:8b:77:4b:e3:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ff55bc-4da3-4dc8-9a15-35e5786aabf2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cccea0b8-0490-447a-8f3e-857faaea2104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:d4:5f:76:1b:2f:dd:f2:0c:42:69:95:5d:
                    81:a1:cf:2a:15:14:2e:f7:25:ed:b9:4b:1b:c4:ee:
                    01:2b:55:a4:7e:00:a3:71:da:55:09:a8:00:59:b3:
                    21:0f:5d:1e:f2:b3:13:11:20:32:08:d8:f7:6d:72:
                    11:31:1c:e3:aa:e8:c3:c0:ea:f7:55:83:b4:7f:7a:
                    80:91:03:1b:6f:d5:e7:19:ab:42:1e:0d:e9:70:e4:
                    fd:48:ad:14:77:80:0f:4b:98:0c:a1:7e:50:7c:67:
                    84:b0:72:b9:1d:1e:64:e6:6b:5c:28:1d:c4:29:24:
                    85:12:90:a6:8f:33:8c:18:86:2b:37:b2:50:32:e1:
                    b8:ab:55:01:01:32:d0:f6:cd:50:aa:84:21:c9:0e:
                    f3:84:68:d4:ab:bf:4f:88:75:8f:c7:9d:25:b2:9c:
                    91:4a:8f:8a:ed:03:30:05:a6:5f:05:97:8f:78:a3:
                    53:72:2b:a7:60:b6:2e:70:53:ac:aa:dd:8f:88:d4:
                    b9:00:8a:3a:2c:c2:f4:4d:af:05:36:4f:ce:a2:bb:
                    46:b5:a2:03:2d:5a:c5:2a:ca:f5:3a:f9:43:8c:20:
                    22:de:5b:5e:e2:fd:dd:cb:09:35:d4:52:af:b1:ac:
                    dc:27:98:8a:2d:c4:3d:57:46:56:d2:b2:5d:32:03:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:FC:6E:AD:1D:AB:49:E3:DA:50:85:B5:0F:DA:60:30:65:94:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/d3af590a-5999-3790-aa5b-c0dbaadef1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.crl

            X509v3 Authority Key Identifier:
                keyid:88:E0:2E:A8:96:E6:D9:25:9C:05:46:AB:F8:5E:5E:67:69:7C:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ff55bc-4da3-4dc8-9a15-35e5786aabf2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:4d:05:bb:64:a4:68:ea:f9:88:d0:7c:cb:06:e5:24:44:
         5d:95:e5:07:cd:79:b0:d2:e8:f5:53:ba:5e:0f:2a:97:07:04:
         d2:53:7e:68:59:56:79:08:47:0c:a4:62:f5:75:ff:5e:f8:37:
         24:7b:01:0b:d6:e5:2a:39:1a:2c:30:8a:88:7c:00:2b:da:d8:
         c4:64:51:75:97:82:f5:f1:88:d1:1f:48:b4:46:32:4b:86:17:
         5d:6a:fc:7e:a8:58:b4:11:23:e4:02:2b:40:7a:8a:47:d3:a1:
         f4:7f:d1:08:82:78:f2:02:22:53:a1:61:33:28:7c:ec:b2:88:
         63:ee:b6:83:f1:9f:5f:26:ce:8a:7a:bd:cc:3d:ed:2e:72:ed:
         d5:0f:4f:28:8d:08:22:05:dc:43:6e:60:45:86:40:9f:5f:bc:
         be:80:bb:b1:ee:8d:01:bc:f3:77:0b:ad:55:5c:a4:5f:c6:25:
         0b:6b:ad:ab:f3:22:f4:d3:1c:be:03:1c:44:fc:29:d2:61:2c:
         1d:1a:42:67:4d:57:82:fb:ee:71:6c:8d:da:2f:0d:5d:58:0e:
         7c:93:bd:a7:9e:ed:c5:9e:bf:03:7a:82:f7:12:ac:2b:29:77:
         05:28:27:b5:c6:a9:ab:e0:b5:48:56:ef:7a:c6:78:b8:c9:9e:
         c7:c2:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:48:23 2026 by rpki-client