Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa
File:                     d61f4303-b118-3610-b7c0-315c48fdeeb9.roa (raw, json)
Hash identifier:          RTEZ9MwOUJPVhfMXFvuninw662TLCXghdCWHpuBPPzI=
Subject key identifier:   57:BF:AA:63:7C:75:21:08:55:5D:71:FC:D9:DE:0F:EB:64:CF:30:31
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F4328584F497638D52CD4F09251A7D300
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399899
IP address blocks:        2602:fbb7:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:38:d5:2c:d4:f0:92:51:a7:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b5b7d652-40e4-4c7d-9045-feda93f609fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:19:a6:83:ba:07:cc:53:0c:9f:fe:81:f2:
                    17:f7:e6:89:49:e0:eb:e6:6e:10:d5:a7:bb:d6:b9:
                    0f:51:8f:cb:23:f0:cd:c4:0d:b4:c1:42:91:14:6c:
                    2b:e3:07:f7:b5:d1:1a:3b:74:39:e8:d9:5d:9e:05:
                    43:56:84:d5:46:cf:ca:07:6f:9d:4e:a5:52:e8:ff:
                    5c:92:e2:d5:e5:c3:8f:ac:ba:b1:d9:b6:61:d6:7a:
                    3e:79:ed:69:de:88:52:56:c6:fe:d4:57:71:c0:60:
                    5f:e8:84:a3:be:06:06:c2:5c:6d:68:84:14:f7:28:
                    67:85:52:43:45:46:cc:fe:66:cd:d2:e7:0f:56:75:
                    8f:f9:68:96:06:50:4c:16:9e:4e:da:e1:6e:a0:2f:
                    23:3a:0b:70:d4:af:94:7b:3b:3d:bc:87:f6:a7:eb:
                    af:80:92:1f:ae:22:0f:dc:e2:73:15:fd:4c:16:fb:
                    a3:b3:af:85:ef:4a:2c:81:b1:7a:d2:07:fb:1f:04:
                    98:3a:9b:43:ff:87:72:a6:8c:71:b1:5d:df:86:c3:
                    c3:19:44:49:b1:0f:72:37:9c:47:58:52:c4:07:e7:
                    76:e0:b7:e3:7a:4f:68:48:56:fb:83:f2:eb:dd:fb:
                    9d:27:58:09:7b:67:3c:a9:16:c4:5b:38:b7:33:d4:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:AA:63:7C:75:21:08:55:5D:71:FC:D9:DE:0F:EB:64:CF:30:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/d61f4303-b118-3610-b7c0-315c48fdeeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb7:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c1:e2:07:36:04:2e:39:d1:8f:39:e5:a0:1e:66:33:4a:4e:
         c4:d0:e2:8a:65:6c:d4:69:ca:75:16:87:4f:89:8a:45:f3:15:
         5d:db:6f:9a:9c:30:24:e2:ac:3b:65:3a:1d:b7:50:55:7d:bb:
         ae:10:dd:71:85:9f:d0:aa:3e:23:71:83:b4:7a:37:53:1a:14:
         5c:d1:74:8c:cf:63:cf:ce:69:a0:d0:e5:93:fe:24:7e:65:48:
         78:c7:6a:75:cf:98:2b:68:4a:9d:9f:7e:7e:a7:ad:c1:6e:29:
         ab:ab:89:32:95:27:21:f1:e4:9b:39:c9:61:96:83:61:eb:d5:
         6b:94:60:c8:5c:c6:2e:31:00:ba:29:0d:6b:8e:e6:79:f5:83:
         54:e6:72:0c:5a:68:18:15:36:aa:b7:b4:02:f9:95:54:ee:0f:
         9c:ff:a5:f5:4b:b4:96:f9:e2:17:f7:88:8b:66:a7:88:e9:4d:
         5e:79:ba:36:79:c0:b3:04:96:6e:8d:cc:cf:a7:7f:46:07:13:
         a3:76:35:21:ec:6b:9c:07:81:38:11:44:35:11:c1:09:e5:a8:
         86:34:0e:40:3b:70:22:0b:c8:16:d0:9f:63:b6:e2:1f:59:cc:
         a0:e5:9d:00:77:7f:df:ac:ce:3c:c6:27:8a:6b:78:de:eb:89:
         3b:29:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:28:51 2026 by rpki-client