Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/9a0515b3-83f6-3cb4-a951-e4ae24c03eb5.roa
File:                     9a0515b3-83f6-3cb4-a951-e4ae24c03eb5.roa (raw, json)
Hash identifier:          vSy8xan733yjqikOYcxqrgFFAmTRYyJtD+9QQZQrkQ4=
Subject key identifier:   76:C3:83:A1:19:7E:CF:4B:4A:46:D6:CD:C0:C8:8F:DD:ED:A9:EB:AD
Certificate issuer:       /CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d
Certificate serial:       010D0C9F4328584F4987E21988ED4AE9AD65DF00
Authority key identifier: DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/9a0515b3-83f6-3cb4-a951-e4ae24c03eb5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402019
IP address blocks:        2602:f547::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:e2:19:88:ed:4a:e9:ad:65:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e9879b28-b686-42af-af46-5b9847151e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:54:3c:84:a3:fb:52:dd:8c:22:df:7e:f9:
                    3b:a3:0b:3f:0f:66:cc:88:20:b3:e1:69:94:13:c4:
                    06:88:c3:2e:d9:5f:b3:0b:60:1e:99:e9:e2:43:67:
                    24:05:af:58:44:38:4f:78:72:d8:92:31:00:1b:32:
                    ea:b2:b9:85:05:ea:71:02:0e:90:98:21:8f:e5:23:
                    3c:de:8d:4b:6b:a2:f7:44:87:9f:d7:80:c8:50:74:
                    3f:64:50:03:e1:1a:f6:f6:a6:62:53:18:b1:fe:06:
                    b8:88:d6:da:38:88:9a:fa:34:0c:21:19:0d:0d:59:
                    30:38:2c:76:aa:86:7a:cd:f5:0c:aa:ec:13:53:07:
                    b0:b3:28:53:fc:aa:ee:5d:42:0f:23:7a:b0:c0:0b:
                    88:42:d7:f3:64:e9:00:1e:8c:9e:b1:b5:bb:dc:03:
                    75:15:dc:8c:f6:da:8c:94:e5:47:63:3f:16:e8:ae:
                    1c:87:7f:db:e8:56:23:c0:ce:db:b1:73:4b:14:ea:
                    0c:1c:c7:14:fd:fd:54:25:87:8a:a8:7a:52:cc:2e:
                    c4:44:f4:19:97:5d:72:fb:35:b9:29:13:4f:39:22:
                    7f:c5:9e:14:06:37:d0:bf:25:76:ac:d7:c1:e3:58:
                    00:bb:a5:da:05:41:b9:a1:2a:92:08:e2:4e:9f:0e:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C3:83:A1:19:7E:CF:4B:4A:46:D6:CD:C0:C8:8F:DD:ED:A9:EB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/9a0515b3-83f6-3cb4-a951-e4ae24c03eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f547::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b7:99:2a:11:19:30:32:50:02:e0:b3:fa:b6:fd:4c:94:47:
         47:11:3d:b3:02:2a:ba:6b:06:ab:53:86:6f:3e:83:89:97:6e:
         ce:2b:f3:b2:0d:08:93:f5:aa:d3:9a:50:b7:bd:be:31:9c:48:
         4e:8f:7c:b8:76:84:30:ed:69:e7:44:4d:b0:09:74:91:5f:04:
         5b:4c:9f:f7:5d:57:b2:7b:58:6d:45:44:f8:4f:c4:b1:4c:24:
         9c:08:3f:72:ef:1f:c1:29:33:0e:71:6e:30:a4:6e:60:3e:e8:
         b0:4a:0f:00:d1:34:66:b9:2a:b1:0b:f7:40:ff:e0:55:a9:4a:
         14:3c:e2:f2:c4:08:70:97:37:06:7d:d3:eb:c5:92:27:b5:31:
         02:63:e1:33:ab:4e:84:54:00:0f:84:d4:62:94:f4:cb:16:cf:
         1a:c4:af:2d:9a:b0:25:1a:fc:2a:84:62:b6:f9:c1:c3:54:35:
         d1:89:de:6f:2e:0f:a0:45:1d:02:b1:e7:bf:66:f0:89:10:52:
         16:06:87:da:9b:27:42:7f:96:b0:34:52:71:1e:e4:f5:42:bc:
         13:d8:d8:49:ae:94:86:b1:8d:aa:a7:a7:de:89:c0:1b:f8:b7:
         99:bc:37:27:7b:b3:fd:6f:8f:d1:26:11:0b:d6:5f:42:43:56:
         38:fd:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:30:44 2026 by rpki-client