Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
File:                     c2382f90-9013-3121-a9e6-6335e705e8d0.roa (raw, json)
Hash identifier:          qz9mRv3u1MrGSoMcTtLqkYU6/tz0nwuI33GScrtVIbo=
Subject key identifier:   3F:95:B0:98:B6:B3:FD:6E:73:97:40:A5:98:7A:88:A8:27:00:4B:A9
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584F497406BCC59E548155A9ED80
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18526
IP address blocks:        2602:fd6f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:06:bc:c5:9e:54:81:55:a9:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=156938c0-8d78-4f8d-944b-477ed153f8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:79:a0:d9:cb:1a:48:0b:aa:24:de:aa:60:
                    df:09:62:a0:19:69:35:38:76:72:d2:5d:df:9e:f0:
                    2e:25:32:f5:94:7a:64:f3:11:83:76:69:32:36:49:
                    e3:7e:22:71:5f:e8:47:d1:eb:d6:6c:a7:2b:5d:2e:
                    99:c5:5b:f6:c6:cb:5c:a9:02:0d:7c:36:c3:c0:a8:
                    c4:aa:77:ff:ec:04:66:7e:d4:28:75:f8:c3:fa:e1:
                    e8:34:0f:26:17:e2:b6:ed:ae:29:23:0c:5e:41:67:
                    2f:ea:e6:56:d6:8f:54:f9:05:e8:eb:05:11:6e:23:
                    6c:fe:62:36:7c:bc:ae:36:97:c6:fc:5d:71:5b:67:
                    4c:42:50:16:fc:fe:bc:d3:bd:76:b7:56:6a:b1:bd:
                    22:50:7b:b5:0a:a4:28:2a:45:01:67:82:de:b9:4f:
                    e5:b4:37:c7:32:27:39:17:0b:32:bd:60:1b:b6:af:
                    3c:7f:23:f1:6d:9b:62:85:06:e8:57:fb:d1:e2:11:
                    3c:15:bc:e5:7d:ab:25:24:e1:fa:cc:cc:05:93:e0:
                    44:77:85:2a:15:18:f0:ce:59:bb:c9:54:7c:06:38:
                    60:74:15:42:30:aa:8f:54:2e:2c:35:23:2f:d9:64:
                    98:f8:73:6e:65:8d:67:c8:ca:2b:b8:97:91:e3:5c:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:B0:98:B6:B3:FD:6E:73:97:40:A5:98:7A:88:A8:27:00:4B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:64:7b:3c:d1:56:f3:01:30:78:73:bd:56:78:40:c3:16:
         80:c7:db:73:c3:61:38:0f:3a:29:11:34:1d:ce:b6:11:1d:0b:
         bd:77:39:23:3c:f6:b0:d3:36:b4:d6:84:da:58:ef:24:9e:5c:
         51:8a:9a:ce:f6:01:c5:17:eb:04:94:84:95:7f:d9:a9:bd:4f:
         31:54:24:c4:9c:e7:b0:af:76:06:ff:a3:f4:34:fe:1c:ef:f0:
         8a:55:43:33:4f:99:53:4a:6f:4c:36:ef:9a:4c:04:3f:d0:fb:
         5f:aa:e3:f5:e7:61:fd:8b:7e:98:3e:4b:d9:20:de:6d:fc:a1:
         35:28:bf:63:e0:bc:54:65:a2:9b:7c:cf:a4:28:99:b3:74:09:
         4a:b4:20:44:75:3e:4b:3c:b0:c2:5d:24:e1:6e:e3:c3:a0:d6:
         07:47:83:cc:89:49:40:eb:c5:2d:62:01:fa:12:54:54:3e:f7:
         da:9f:15:05:0b:54:91:00:8d:4a:2e:36:13:49:e0:b2:31:61:
         91:29:25:66:b9:13:3b:4f:dc:0c:b6:d2:95:89:d9:5d:39:8e:
         83:31:87:84:c0:52:60:89:e4:71:7d:e5:3b:04:c6:7b:79:17:
         df:ba:de:1d:bc:3f:a2:80:f5:0c:c2:ff:ec:66:b8:5f:ee:d9:
         ff:58:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:19:05 2026 by rpki-client