Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/cc6e230f-707b-3042-92f0-34649b2e0649.roa
File:                     cc6e230f-707b-3042-92f0-34649b2e0649.roa (raw, json)
Hash identifier:          MragFTXg/Whzlwn+CQrYhLjzR5rCeGmyGJth5S0vl6w=
Subject key identifier:   0E:26:AF:A5:DB:ED:9E:0A:61:6D:FF:3D:45:4C:66:C9:AB:A1:65:F0
Certificate issuer:       /CN=bcb3b598-8d83-4864-818b-f5833b7583e7
Certificate serial:       010D0C9F4328584F497489A4E47A0290FED91AC0
Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/cc6e230f-707b-3042-92f0-34649b2e0649.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17176
IP address blocks:        2602:f6e4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:89:a4:e4:7a:02:90:fe:d9:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ffd7a31d-f267-4ecf-8ddf-21049fa8b74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:e6:bf:60:d4:cd:1d:ab:dc:29:0c:9f:30:
                    35:ce:99:56:87:0f:e7:7c:83:06:49:a4:ac:f1:1e:
                    2e:d6:7a:6f:56:63:b8:2b:db:3e:dd:0c:ba:92:45:
                    92:e3:6a:3b:d5:52:9a:12:ed:60:8e:c5:ff:d1:7f:
                    11:47:8a:68:cd:08:ac:08:f5:bf:47:dd:34:c3:70:
                    24:7e:25:9c:b4:7e:f3:e9:b7:80:7d:35:de:8a:77:
                    3b:7b:9a:6b:08:e0:55:52:f8:1e:60:5f:2b:a6:5e:
                    5b:5d:a7:d8:1b:f8:86:a5:81:a2:a7:aa:d6:e5:ac:
                    fa:08:d9:5a:2c:f5:fe:ba:f9:cb:b3:75:5b:7c:eb:
                    44:11:1b:dd:eb:73:ee:0a:28:5a:4b:27:c1:30:bb:
                    7f:f0:2f:36:ca:22:a1:96:84:89:cc:d7:97:25:0f:
                    1a:15:1f:48:de:97:e1:f8:c2:f2:f6:4e:6e:da:d1:
                    13:a2:78:35:82:cf:da:b9:68:cb:2c:0b:94:24:c2:
                    d5:1a:0f:82:fa:5c:26:59:50:f3:56:b2:20:e1:c8:
                    25:29:2e:50:3e:8e:b1:93:ce:31:9c:74:e6:b0:c3:
                    ee:b6:4f:e9:cc:86:87:4b:c2:1c:9c:d0:54:66:01:
                    dd:e8:d3:3f:07:6e:6f:72:4c:9f:1e:b4:44:2f:3a:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:26:AF:A5:DB:ED:9E:0A:61:6D:FF:3D:45:4C:66:C9:AB:A1:65:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/cc6e230f-707b-3042-92f0-34649b2e0649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5c:d0:1f:e0:cf:0e:6c:a3:8c:a1:bc:ff:e9:65:c6:e6:b9:
         b7:f4:b5:02:73:1d:49:fe:b9:79:cc:99:eb:22:04:f9:0d:8c:
         b3:c5:f7:42:c6:a7:40:7d:66:ac:9b:c1:26:60:83:e8:76:cc:
         94:5b:f9:0a:42:b4:b3:cb:f3:c6:1f:67:4b:38:83:67:6c:30:
         30:ba:10:f7:4a:85:f9:8a:5f:28:0d:75:8b:cb:66:a1:44:04:
         e8:29:0a:2a:60:55:b8:d7:c4:11:10:c3:6b:77:cf:c5:61:ce:
         7a:86:9c:aa:1b:0a:14:4b:b6:18:f1:b8:79:bf:b5:85:dc:4b:
         b6:e0:ee:44:9b:b2:2f:42:8f:29:2b:d3:14:1f:d6:47:fd:12:
         68:ec:69:42:f6:4a:a8:d6:df:81:a7:c1:f1:da:bf:ae:53:ba:
         49:8d:bf:5d:e4:6d:87:91:27:19:f7:10:c5:96:97:28:8a:fd:
         80:6b:34:5b:1d:fd:7f:1b:8b:fb:db:3c:f9:49:f1:e2:2e:d0:
         d8:42:aa:de:f5:fd:02:c5:cd:75:e0:97:6b:48:29:23:54:e4:
         a2:ff:ac:55:76:3a:4c:b3:90:df:c3:d0:0f:66:b5:48:e0:42:
         00:10:95:c0:23:5b:96:73:62:6e:25:c5:18:a6:22:60:ac:d8:
         29:a9:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:03:59 2026 by rpki-client