Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/9f289181-1138-39a6-8204-f0a39770e87d.roa
File:                     9f289181-1138-39a6-8204-f0a39770e87d.roa (raw, json)
Hash identifier:          7+Zy2tQqD+HHBMwB19h7Gk7vOazPAobZE5FyFUkFZAI=
Subject key identifier:   D2:69:1B:B1:A5:C4:93:D4:3C:ED:8B:E3:4A:43:E5:DE:0E:C1:EA:5A
Certificate issuer:       /CN=7659d706-fdf7-4c2e-8e41-352e9090b48c
Certificate serial:       010D0C9F4328584ED9C7691A4CDC31C8BAD54580
Authority key identifier: 5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/9f289181-1138-39a6-8204-f0a39770e87d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     402070
IP address blocks:        2602:f523::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:69:1a:4c:dc:31:c8:ba:d5:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7659d706-fdf7-4c2e-8e41-352e9090b48c
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=42974612-f5fd-44af-a131-419636fad29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:2a:b8:20:ed:9f:20:48:f1:be:89:83:e0:
                    a4:bf:64:fd:09:6d:00:19:33:68:d7:c1:11:61:30:
                    1d:c4:76:31:36:7f:25:f9:ff:c1:4c:01:f5:49:8f:
                    32:e4:19:14:30:f2:ad:f2:ba:f7:c6:32:83:48:a4:
                    12:97:ea:0a:73:d4:0a:98:0e:15:9a:1a:50:01:83:
                    f1:4b:22:9b:03:1e:e7:c6:f0:14:51:8c:cc:d1:53:
                    a0:60:ac:d1:ed:be:3f:d0:57:c3:6e:0a:c4:11:75:
                    ac:ac:96:35:07:57:9e:d8:78:6a:07:32:d1:0c:17:
                    c5:c1:79:06:de:37:e9:60:3c:c6:9f:6e:a3:4c:2a:
                    c4:32:ba:d9:16:7c:4b:d3:cc:4f:ba:ea:62:b1:54:
                    97:44:1c:8b:b7:9c:6c:af:d4:bc:05:58:65:45:8c:
                    73:36:a6:b6:22:94:56:a5:1f:9f:8b:72:06:57:d9:
                    cf:a7:f6:97:9d:af:21:3e:2c:de:8e:95:ca:29:37:
                    33:98:e1:bc:d8:06:6c:d5:65:18:e9:99:57:44:41:
                    f7:46:b1:32:c4:ff:cd:15:58:ba:7f:75:01:7d:c0:
                    c6:96:1d:72:89:3e:03:24:b1:ca:3b:d4:85:f9:eb:
                    59:6a:fc:33:f2:df:e5:6b:66:62:f7:15:80:74:c9:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:1B:B1:A5:C4:93:D4:3C:ED:8B:E3:4A:43:E5:DE:0E:C1:EA:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/9f289181-1138-39a6-8204-f0a39770e87d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c/7659d706-fdf7-4c2e-8e41-352e9090b48c.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F0:62:7C:2E:6A:62:62:F9:52:DA:74:21:48:68:A7:FF:7B:01:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7659d706-fdf7-4c2e-8e41-352e9090b48c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f523::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:44:78:a7:82:ba:bf:16:1a:d4:ca:d7:ae:9e:4d:cb:61:0d:
         a4:89:10:90:ec:46:73:21:78:ab:66:c6:ee:6c:6b:fd:c6:38:
         1d:b4:02:48:dc:c1:12:f0:ed:17:e6:43:d0:a6:d3:f3:2f:c2:
         93:0e:8b:62:3b:ff:04:50:c8:3f:45:40:03:a0:8a:b4:93:ec:
         85:37:10:28:9d:0f:25:78:a4:02:04:34:4e:c2:90:54:d2:f8:
         04:d4:7b:47:f3:7d:18:58:11:b7:46:c4:85:a0:ca:8b:23:b6:
         1d:34:46:41:79:15:d1:a2:5d:7a:ce:24:5d:74:db:b2:48:b0:
         2f:66:b8:74:f5:0b:2e:b3:63:9f:45:a5:e7:4d:d1:55:ed:c4:
         f0:67:e4:32:db:ea:48:ba:5b:cb:a4:56:de:2e:df:1c:89:42:
         20:73:f1:0a:85:2b:2a:ae:38:02:15:74:a7:c4:01:5a:f3:b4:
         30:1b:7d:66:9e:54:77:c5:0b:da:95:6a:d8:8c:16:7a:bb:02:
         da:36:66:a1:ad:4d:c5:da:24:38:a4:d5:b7:87:01:f6:3c:05:
         7c:38:4d:88:0e:ef:67:45:af:fe:58:59:da:99:a9:ed:05:ff:
         d8:2e:e1:a7:76:c2:3f:20:72:9d:75:15:dc:41:c9:de:f4:ed:
         f2:31:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:32:45 2026 by rpki-client