Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/e460a3d4-77a9-3703-a570-b84497ae152e.roa
File:                     e460a3d4-77a9-3703-a570-b84497ae152e.roa (raw, json)
Hash identifier:          qvLyINgX4yxzQIirOtcMDeUDZImpxfbTK9fUmA7ajac=
Subject key identifier:   DA:58:90:22:78:5F:21:90:1B:B8:F4:49:24:4A:5B:BD:22:B7:56:70
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584FB0BDF8E4ECD754FAE6D3D080
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/e460a3d4-77a9-3703-a570-b84497ae152e.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     22400
IP address blocks:        2602:ffb7:596::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:f8:e4:ec:d7:54:fa:e6:d3:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=22e7f74f-bf10-4d7b-89b5-78ab32003e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:ac:54:91:a5:4a:c7:76:df:e6:b6:d6:a3:
                    56:e7:24:23:09:ea:33:dd:40:a6:d2:20:7d:80:31:
                    40:56:a6:36:78:66:96:e3:98:81:d1:5b:eb:2d:fd:
                    77:11:91:c8:2e:0e:ef:a7:f1:b6:72:fe:ba:fe:f0:
                    ae:4f:b9:d5:2b:14:32:13:8e:3a:37:b1:1b:ea:de:
                    7b:2a:79:95:e2:5e:09:db:6b:10:42:a2:62:30:77:
                    33:23:5e:88:b8:0c:eb:2b:2f:5a:ca:21:0f:17:f8:
                    b2:44:3a:19:4a:63:8b:05:df:ab:3f:8e:2b:94:fc:
                    74:08:ce:01:5d:d6:53:1d:bc:35:ce:98:18:69:87:
                    d5:c2:26:4f:c8:52:47:3e:5f:f1:3d:6e:37:cd:27:
                    89:97:ef:51:78:ba:a1:fe:2e:2b:cf:2b:a5:25:73:
                    d0:57:ba:3c:ea:e6:1b:f5:b9:78:75:06:e3:00:27:
                    5b:e2:f0:60:15:8d:37:81:da:21:f1:a5:fb:ae:23:
                    6b:25:be:93:60:54:11:2c:a7:63:aa:74:f9:3c:4f:
                    3e:ab:40:61:41:82:1b:22:2d:1e:01:06:da:da:92:
                    54:f1:43:bb:b4:84:64:c1:a6:ab:e4:1e:c0:ab:8f:
                    ca:a8:83:aa:b9:d6:c5:97:1c:ed:ca:79:0b:92:ec:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:58:90:22:78:5F:21:90:1B:B8:F4:49:24:4A:5B:BD:22:B7:56:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/e460a3d4-77a9-3703-a570-b84497ae152e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffb7:596::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:88:fc:59:15:5a:3c:06:1a:6a:fd:81:63:4d:42:ef:fb:
         18:b6:89:80:fb:c1:66:ab:07:d4:91:a0:18:fe:8a:1e:32:e1:
         3f:4e:d7:76:03:ef:ab:a0:b8:a5:ff:1e:ea:76:bf:0e:a2:d7:
         97:b1:57:36:c6:a2:cb:c7:d8:89:16:73:5f:ba:81:f4:b4:a9:
         21:fc:42:fd:a1:19:22:2f:fa:58:fb:ef:5f:1f:43:62:97:89:
         d8:76:f7:85:cc:f5:0f:a3:3c:11:e5:11:48:9b:c8:ba:40:c8:
         17:bf:cd:2f:f3:1b:b4:99:e7:11:32:00:5e:8c:ae:ae:75:88:
         7d:6f:46:71:62:92:ba:21:a2:f2:8a:62:de:09:2f:d7:35:db:
         12:76:b5:c5:a5:83:d8:9e:a8:db:b0:9d:19:ef:15:d7:fc:98:
         5d:c4:d9:df:a0:de:f2:e4:48:48:ff:82:fc:c6:40:8a:b1:83:
         4a:5b:4c:75:28:ba:8e:7b:d1:bc:64:07:99:55:4c:ee:03:ed:
         23:e9:b3:8f:82:ce:e7:4b:e5:73:d0:a0:b5:28:a8:e5:32:0e:
         6a:65:00:48:25:7a:cd:9e:8d:f2:85:eb:0c:6c:11:74:d1:c1:
         78:b0:7d:02:5f:38:16:ed:c0:19:81:3e:74:59:89:20:a3:99:
         b3:70:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:16:26 2026 by rpki-client