Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/f269b0be-c205-35ec-9ad7-834adf4f2459.roa
File:                     f269b0be-c205-35ec-9ad7-834adf4f2459.roa (raw, json)
Hash identifier:          4WyzTNs8W+a+N5FFCGPPSLtGJFbStpM42jafLY/fvkA=
Subject key identifier:   C6:75:62:2E:F7:79:8D:E9:A7:FA:92:91:84:D4:0E:6E:57:70:CB:F4
Certificate issuer:       /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial:       010D0C9F4328584F498744AB884A316145FFB4FE
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/f269b0be-c205-35ec-9ad7-834adf4f2459.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398076
IP address blocks:        2602:f4a8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:44:ab:88:4a:31:61:45:ff:b4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aa8ae4b8-a463-44c2-a634-5f6830718fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:60:df:4d:57:89:77:8c:84:8c:f3:15:02:
                    6e:d7:68:49:ed:77:28:06:e5:3b:ff:67:ab:e6:14:
                    6c:14:20:00:94:1a:ba:e4:0f:4b:1f:b9:42:7f:24:
                    96:61:b8:0a:ae:7a:6f:05:bd:21:6b:45:eb:ce:20:
                    8b:dc:69:dd:37:59:30:3a:46:cd:9f:1d:9e:c1:9b:
                    21:11:f1:bd:d5:d0:05:ee:5d:b4:96:0d:ab:41:a8:
                    cd:3b:67:97:58:0a:ed:d3:48:29:6e:e7:dc:66:25:
                    49:60:d7:9a:a0:7b:63:ca:de:0c:29:ec:10:a5:86:
                    07:d6:0c:9c:fd:13:84:05:dc:ee:7d:01:22:51:9a:
                    91:8f:db:57:1a:87:84:d6:f8:db:1b:bf:7d:c7:c3:
                    00:6a:44:4d:0b:c4:d1:49:1d:fa:48:89:9d:77:b2:
                    a0:c5:35:c5:ff:57:cf:c2:5b:6c:9a:1b:64:b8:94:
                    ec:c1:d5:17:89:6b:cc:c3:63:10:c3:96:92:68:e5:
                    1e:35:44:6a:e4:ed:31:27:9d:3c:d7:41:3b:92:b0:
                    07:50:c8:3d:69:78:44:7c:54:e5:26:de:00:38:b7:
                    bc:c9:8d:cf:3a:91:6f:d1:28:97:76:9b:ba:84:84:
                    a8:10:a7:61:e4:3b:1a:18:9e:7b:30:5d:fd:f5:f9:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:62:2E:F7:79:8D:E9:A7:FA:92:91:84:D4:0E:6E:57:70:CB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/f269b0be-c205-35ec-9ad7-834adf4f2459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl

            X509v3 Authority Key Identifier:
                keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:56:be:89:18:20:b0:9c:2b:46:cf:af:cf:83:de:0d:39:35:
         d9:ed:27:09:45:2f:df:51:b4:a2:ef:47:73:ef:1b:a3:c4:6b:
         fc:3a:eb:a2:5a:ba:ab:fd:ad:68:b9:92:3a:04:dc:7f:aa:ae:
         a4:0e:86:07:67:10:c0:6a:84:1d:eb:f7:cb:59:a5:c2:ee:ca:
         4d:c4:7c:03:a1:5a:85:5d:2d:37:d2:d5:7c:15:d2:7b:05:06:
         9d:09:31:7f:6e:b9:e8:23:6c:b7:5c:d6:6c:ba:69:3a:ca:1c:
         59:ae:cb:ab:df:d4:9e:e3:43:94:78:c2:ca:4b:d6:6c:a2:22:
         b6:4d:f4:86:1d:56:28:32:e6:9f:98:6a:75:8d:3d:ad:44:82:
         83:a9:43:ed:16:aa:d4:0f:cc:76:84:d3:3f:35:3c:15:9d:42:
         72:aa:4a:15:e5:8c:fb:98:3f:7b:b2:9b:b5:64:01:be:41:7c:
         5c:9e:82:83:9c:23:55:ff:6e:66:5e:b7:1f:26:81:f7:da:e1:
         c7:f2:bc:1d:56:eb:05:1e:e6:c2:1f:e8:b0:f3:cf:e8:3a:a2:
         6e:49:28:28:2c:f8:ad:3b:a3:00:84:e3:5e:63:26:dd:a0:fa:
         14:7f:2e:02:80:03:ad:7b:56:95:ff:2d:cf:85:25:0a:2a:49:
         33:c9:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:36:55 2026 by rpki-client