Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa
File:                     2bf642a2-d07c-3c1f-84d7-221096477507.roa (raw, json)
Hash identifier:          eCcnbU9ZqxAfY8EpjyGg/fCdUQ/AYiddayQ33bsmdzc=
Subject key identifier:   62:7A:98:F3:E1:03:6B:4C:52:DD:B5:8B:57:AB:96:9B:1A:57:51:31
Certificate issuer:       /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
Certificate serial:       010D0C9F4328584F4973F45F1AE07915FA522A00
Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397122
IP address blocks:        2606:9080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f4:5f:1a:e0:79:15:fa:52:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8164c8a1-77e2-4af4-a9a7-e6f78f3c7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:81:f9:c9:36:16:b9:bf:35:98:d2:cb:c6:
                    ee:3c:58:6f:e3:d3:f7:5d:20:f9:36:81:98:a3:86:
                    7b:95:63:2c:85:56:c4:7e:04:35:ee:83:26:52:98:
                    35:6e:0a:e0:b4:8f:a8:f1:4c:c7:9b:96:2e:b7:3d:
                    18:81:8c:c5:ec:16:7c:62:c9:22:83:41:aa:94:a0:
                    19:fd:c7:06:70:19:cd:f5:e8:de:2c:55:62:d2:f7:
                    e3:49:bc:bf:1c:11:76:f2:b8:3a:e5:93:ee:d1:94:
                    b7:88:d9:cf:9e:7d:cd:ed:e3:c2:9c:27:d4:b3:c2:
                    71:d0:89:9f:a6:11:b2:fa:8f:ec:b1:8c:54:0f:70:
                    b6:3a:bd:ee:3e:26:29:b0:9d:e6:b6:6d:63:e0:15:
                    53:57:b2:cc:20:69:10:6e:93:b9:88:93:33:64:b5:
                    dc:fd:e4:b0:06:f6:cb:ae:b9:25:23:39:63:a8:77:
                    8e:f6:f5:61:8c:91:9b:7a:15:b7:dd:ea:0f:25:ea:
                    26:c0:33:50:78:8f:39:18:d7:2b:41:b6:5b:f3:e6:
                    e0:cd:f5:84:69:68:16:08:f0:77:37:e0:79:b1:69:
                    11:f8:07:f0:ef:5f:6e:84:cd:9d:7f:7a:c0:be:61:
                    74:7a:7e:0a:ad:7e:5b:cd:d8:e0:60:38:67:27:9a:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7A:98:F3:E1:03:6B:4C:52:DD:B5:8B:57:AB:96:9B:1A:57:51:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c5:0b:fc:58:b2:e6:33:76:9e:f5:56:dd:3f:b1:63:2b:59:
         c7:d8:11:e3:64:d3:25:af:79:1d:c7:4e:06:fb:e4:df:a8:65:
         7f:c3:e7:fd:d8:ad:a6:1a:d2:55:ed:e2:d7:9c:60:83:21:36:
         1b:07:6c:b7:f0:97:47:f7:b1:f7:bf:dd:14:aa:4a:ac:24:3e:
         fd:3d:43:0c:aa:20:54:f4:e7:21:28:53:b7:fa:f8:8a:92:8b:
         d4:34:9e:7a:b3:41:b4:e6:42:e0:bb:f1:43:74:ff:f8:28:9f:
         e6:f0:e2:e8:10:a1:62:ed:11:ec:8f:2e:06:52:7a:2d:53:48:
         0a:2a:f2:13:64:2a:0b:b8:3d:46:cf:10:ab:36:1d:3c:d7:1a:
         50:4a:e8:5d:4c:f4:95:98:b4:43:e9:11:84:57:c4:f8:69:1a:
         21:b3:84:56:6c:0b:b6:78:54:45:70:c9:4e:f9:ab:0f:7b:50:
         a8:36:7b:28:03:2c:ec:ef:2c:90:aa:42:01:0e:4c:76:ba:c3:
         e8:d9:74:81:8f:3c:42:9a:9f:06:d5:0d:62:34:60:d3:1d:44:
         fa:19:2b:4c:2f:4a:96:44:a8:fe:5d:1d:b2:41:36:58:e9:ee:
         e5:7b:ca:6f:4f:01:86:2b:83:b5:36:b1:c4:34:7d:f2:59:7c:
         6e:a6:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:39:07 2026 by rpki-client