Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/d3471925-05be-3c85-ab53-85a480c61d14.roa
File:                     d3471925-05be-3c85-ab53-85a480c61d14.roa (raw, json)
Hash identifier:          K/kvWYyA9/fzPVIVUIT2PgtvJuEh9RWAHOSMhHspaH4=
Subject key identifier:   89:18:37:DF:AA:F9:A9:CE:29:58:23:66:94:AC:DF:E0:63:DF:02:71
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584F4975D28589EA3399F7DAFFC0
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/d3471925-05be-3c85-ab53-85a480c61d14.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396908
IP address blocks:        2602:f956:3a::/48 maxlen: 48
                          2602:f956:3b::/48 maxlen: 48
                          2602:f956:3c::/48 maxlen: 48
                          2602:f956:3d::/48 maxlen: 48
                          2602:f956:3e::/48 maxlen: 48
                          2602:f956:3f::/48 maxlen: 48
                          2602:f956:40::/48 maxlen: 48
                          2602:f956:41::/48 maxlen: 48
                          2602:f956:42::/48 maxlen: 48
                          2602:f956:43::/48 maxlen: 48
                          2602:f956:44::/48 maxlen: 48
                          2602:f956:45::/48 maxlen: 48
                          2602:f956:46::/48 maxlen: 48
                          2602:f956:47::/48 maxlen: 48
                          2602:f956:48::/48 maxlen: 48
                          2602:f956:49::/48 maxlen: 48
                          2602:f956:4a::/48 maxlen: 48
                          2602:f956:4b::/48 maxlen: 48
                          2602:f956:4c::/48 maxlen: 48
                          2602:f956:4d::/48 maxlen: 48
                          2602:f956:4e::/48 maxlen: 48
                          2602:f956:4f::/48 maxlen: 48
                          2602:f956:50::/48 maxlen: 48
                          2602:f956:51::/48 maxlen: 48
                          2602:f956:52::/48 maxlen: 48
                          2602:f956:53::/48 maxlen: 48
                          2602:f956:54::/48 maxlen: 48
                          2602:f956:55::/48 maxlen: 48
                          2602:f956:56::/48 maxlen: 48
                          2602:f956:57::/48 maxlen: 48
                          2602:f956:58::/48 maxlen: 48
                          2602:f956:59::/48 maxlen: 48
                          2602:f956:5a::/48 maxlen: 48
                          2602:f956:5b::/48 maxlen: 48
                          2602:f956:5c::/48 maxlen: 48
                          2602:f956:5d::/48 maxlen: 48
                          2602:f956:5e::/48 maxlen: 48
                          2602:f956:5f::/48 maxlen: 48
                          2602:f956:60::/48 maxlen: 48
                          2602:f956:61::/48 maxlen: 48
                          2602:f956:62::/48 maxlen: 48
                          2602:f956:63::/48 maxlen: 48
                          2602:f956:64::/48 maxlen: 48
                          2602:f956:65::/48 maxlen: 48
                          2602:f956:66::/48 maxlen: 48
                          2602:f956:67::/48 maxlen: 48
                          2602:f956:68::/48 maxlen: 48
                          2602:f956:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:d2:85:89:ea:33:99:f7:da:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=afd29692-fe84-491f-b544-ef29824b8cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:30:07:5a:3c:43:b3:b4:dc:53:59:8d:89:
                    7b:6a:69:34:c9:83:c8:b7:73:0f:79:28:8c:0c:66:
                    8e:69:b3:d7:08:73:57:45:4e:62:6f:46:e6:5d:87:
                    fa:87:26:5c:3b:69:72:bc:0e:a8:9e:45:ef:08:da:
                    16:87:f3:0f:29:47:7f:53:a8:4e:40:33:ca:1e:4d:
                    59:22:d9:1a:f3:e6:6d:a2:c5:c2:8e:f7:75:1a:90:
                    fa:4f:18:55:6e:f5:96:74:4f:e4:41:91:3a:4c:43:
                    f7:9d:97:66:6f:1a:9f:28:87:42:ef:09:0b:cf:e4:
                    ba:97:13:e3:be:bf:aa:60:e5:a5:db:59:f0:0f:01:
                    29:63:f4:fb:0d:3f:5d:92:c8:12:70:1d:6c:6c:e7:
                    40:18:3f:5f:7b:7d:c1:63:7e:7d:3c:21:42:61:86:
                    f3:70:2e:05:f4:e8:47:ea:03:07:4d:59:f0:ad:29:
                    a2:7b:f4:d9:81:89:37:75:20:60:80:7b:5a:97:b7:
                    da:c6:d3:f9:dd:26:f1:e7:e0:37:81:77:aa:77:4a:
                    f5:f5:dd:da:bd:9a:1f:9b:6f:ec:4c:c0:f4:b2:98:
                    92:c0:82:3c:b8:55:23:6b:57:6f:d6:a1:46:23:10:
                    97:fb:03:f4:e0:75:07:52:dc:3c:61:00:72:c1:1e:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:18:37:DF:AA:F9:A9:CE:29:58:23:66:94:AC:DF:E0:63:DF:02:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/d3471925-05be-3c85-ab53-85a480c61d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:3a::-2602:f956:69:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:02:06:24:56:58:0b:8f:67:bd:fe:06:55:cb:a0:53:71:
         31:54:90:2d:f6:82:f5:51:c5:1d:bb:73:17:5f:8a:c7:71:a6:
         53:6f:f4:5d:61:76:7a:be:a5:b9:9a:3b:a1:70:59:48:80:99:
         64:76:a3:28:e7:2d:e2:5c:15:bd:4c:22:6a:0c:0e:d7:72:b3:
         3c:89:ef:a6:95:21:f7:8a:43:7d:98:d6:92:73:6c:67:39:35:
         1d:95:6e:15:7e:fa:51:20:7d:06:ea:2a:e3:50:27:43:a6:bb:
         95:a5:30:2d:b4:fd:0f:e3:20:a2:80:f0:6a:03:86:b5:da:ce:
         3b:32:67:d5:2c:f6:69:f9:a6:0c:ef:b3:58:cf:8c:88:d4:91:
         59:c2:a3:66:21:12:bb:53:a9:3b:ac:88:4d:dc:b5:d3:8e:43:
         06:bc:7f:31:96:8a:8d:c8:a8:bc:3b:28:c1:0c:1c:fc:a8:52:
         94:0f:d4:ce:fe:55:0b:78:27:cd:8f:ef:61:04:c1:ae:f6:1b:
         76:d9:15:37:e6:f7:54:12:3a:3d:3a:34:df:33:30:b5:2a:52:
         d7:15:54:00:9d:a0:18:01:86:fb:62:db:f9:29:e9:a8:fc:a1:
         4d:05:1d:91:01:93:8f:9e:de:04:44:56:d0:3e:91:e9:19:39:
         fb:9c:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:54:43 2026 by rpki-client