Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa
File:                     97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa (raw, json)
Hash identifier:          OQB4OJyk0QBETjmD0YeAnKJD6rz18Dj5HrBa96wUoos=
Subject key identifier:   DD:82:CD:01:E5:E7:7F:EC:9E:E1:80:9F:B5:6E:59:C0:A4:7C:61:28
Certificate issuer:       /CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
Certificate serial:       010D0C9F4328584F63F80E38E0EA0B1BB6BD1C20
Authority key identifier: D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     400799
IP address blocks:        2602:fb07::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0e:38:e0:ea:0b:1b:b6:bd:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=a3aa4d79-7a1c-4338-94db-9a7136e9fc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:93:23:aa:e3:9e:d9:0f:29:f3:0f:8c:52:
                    79:e6:3a:b5:1d:a8:63:61:da:0e:d4:97:58:6f:4b:
                    2e:dd:e1:01:d3:ef:da:ee:25:89:32:c4:d5:be:ee:
                    33:96:6f:33:3a:6c:fa:39:d0:b5:5d:f9:24:84:f2:
                    7f:20:6e:b7:cf:20:11:ac:bf:53:34:9d:fe:bd:2e:
                    be:ff:c9:0f:b7:bb:44:6a:de:f5:39:02:f4:67:b2:
                    e1:f2:52:cd:bf:17:24:d6:67:16:52:0b:ba:69:94:
                    d2:bb:1c:6b:59:3e:19:da:f6:2d:af:89:ce:75:db:
                    eb:75:6e:af:38:df:e5:9b:65:97:10:20:e6:a0:ff:
                    8b:36:6f:0c:c4:69:12:9e:c7:50:6f:ae:60:fc:17:
                    d9:2a:21:82:1c:22:b7:af:25:e3:e9:60:92:37:2f:
                    5f:35:39:36:b3:82:f6:99:50:02:de:58:3e:ad:48:
                    f4:47:6f:1e:67:87:42:90:23:96:d3:e8:f7:ab:92:
                    d7:2b:e8:26:3c:b2:0b:8d:7f:69:82:38:91:bb:70:
                    e9:6f:42:a6:62:7b:99:59:a4:c6:c1:fa:f4:fb:4e:
                    68:28:23:1f:33:43:33:ed:1d:4d:bd:2f:a0:10:ab:
                    7f:bc:79:d2:06:ec:3c:d5:d8:e9:b7:68:40:e2:7d:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:82:CD:01:E5:E7:7F:EC:9E:E1:80:9F:B5:6E:59:C0:A4:7C:61:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl

            X509v3 Authority Key Identifier:
                keyid:D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb07::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:1f:2f:6e:58:87:6e:2a:19:b8:06:be:18:06:93:1c:63:
         15:c0:ba:e2:49:cf:1e:3b:9c:f3:0b:27:1d:f5:23:ea:6f:ad:
         17:47:47:5d:5e:b7:f7:29:f0:29:cf:5e:91:a6:c8:a3:21:0c:
         48:8e:6d:3f:1f:74:c5:ad:13:5e:b6:e0:dc:72:fc:01:5b:47:
         2e:6a:dd:5a:4c:e2:df:10:7a:05:3e:3b:82:e5:cf:55:6c:a0:
         16:70:e0:74:52:24:ae:b7:84:ed:d4:00:12:d1:ef:42:68:cd:
         74:af:4f:f3:33:5f:ce:98:0a:5b:98:16:f5:db:14:55:b9:20:
         51:fe:57:fc:39:e8:25:1f:6c:62:01:a5:c2:bd:c9:71:81:c5:
         fd:32:b9:3b:08:23:6f:f7:87:5b:86:b1:f6:23:35:7b:ce:b1:
         09:68:c7:54:8b:dc:1e:3b:be:22:d7:d7:6c:21:50:2d:d5:47:
         ea:e1:e6:8e:9d:e2:b5:b5:d5:4b:d0:a1:19:01:1e:66:5f:6a:
         93:7d:c0:16:97:ba:64:f0:6d:d4:86:67:24:2d:08:0f:8c:7d:
         c3:b3:0b:ea:36:80:8a:d3:eb:35:f5:52:e8:8d:f1:19:d3:49:
         2b:b7:b2:b9:08:6d:c6:9b:77:ae:47:e9:06:f9:50:40:88:62:
         16:cc:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:45:59 2026 by rpki-client