Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
File:                     66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa (raw, json)
Hash identifier:          hX63hY+jeyWiYUW1o24aI2BfMAUpthSGPUB/PUGgdgY=
Subject key identifier:   5F:E2:4C:69:C8:8E:66:23:90:CB:51:75:57:23:1B:93:EF:39:B6:BE
Certificate issuer:       /CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
Certificate serial:       010D0C9F4328584F4F0802EF1D8D89907A0DA400
Authority key identifier: C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     402411
IP address blocks:        2602:f3a9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:02:ef:1d:8d:89:90:7a:0d:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfa0893-69f8-4451-9526-12cfa4bebd97
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=c4623354-5ccc-4e43-9319-6ff842b5c4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:21:d6:56:37:d9:ac:b2:29:87:5c:21:9c:
                    35:0d:ad:6e:20:d6:42:e0:97:c5:2a:4a:65:ac:eb:
                    6a:f9:09:f0:c8:ed:73:2d:e9:52:58:fe:2b:80:44:
                    86:52:2b:5f:ab:26:26:e4:db:e1:cc:74:db:ba:e1:
                    a0:52:45:c8:00:3f:51:fe:1a:4b:bc:42:c3:75:b6:
                    2c:29:1b:cd:2b:0e:5d:77:f2:61:84:12:05:78:61:
                    ec:2c:23:5c:92:1e:57:68:33:c6:7f:a2:82:6f:c2:
                    32:68:f4:39:37:48:93:c7:e8:40:1a:4b:34:ac:b4:
                    a1:67:24:92:f5:21:3b:11:45:50:0e:96:a9:75:42:
                    01:87:90:6e:5e:42:64:80:67:cd:17:f3:26:0e:43:
                    6d:d7:d2:99:64:c4:44:0f:4b:9e:25:8c:aa:59:52:
                    8f:ae:16:93:de:7d:49:c3:44:10:e9:70:4a:a7:71:
                    e4:77:45:48:2e:bc:87:1e:ae:9f:f4:dc:79:8a:09:
                    8b:2f:17:e6:24:4c:5e:47:1b:b0:57:ef:37:47:29:
                    ad:c8:b4:6b:ef:04:7a:4e:98:f0:09:db:75:cb:1b:
                    09:7c:a6:cf:15:1c:01:82:1b:35:53:2c:01:68:54:
                    b2:a9:dc:af:af:c0:ce:54:03:97:39:ab:b1:01:54:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E2:4C:69:C8:8E:66:23:90:CB:51:75:57:23:1B:93:EF:39:B6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/66a26530-0cf1-3c75-a638-d3d03bdf1a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97/bbfa0893-69f8-4451-9526-12cfa4bebd97.crl

            X509v3 Authority Key Identifier:
                keyid:C5:2D:1A:47:91:DD:25:A5:33:FB:E5:43:71:C4:AE:53:17:B8:F3:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbfa0893-69f8-4451-9526-12cfa4bebd97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3a9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bd:27:50:a8:5c:74:af:e2:0f:d1:0d:c3:dc:4c:32:b4:78:
         2e:67:07:29:a2:2a:76:c3:45:65:a2:0b:51:03:2f:b7:90:e0:
         0d:82:1a:3e:30:73:6d:ef:81:65:71:72:bd:22:61:f1:db:2a:
         b6:28:86:7f:30:e6:03:32:d4:75:4d:02:22:d5:55:90:f6:6a:
         34:e5:55:03:bd:cb:30:c5:ca:98:69:e8:4a:5e:5f:f2:6f:31:
         1e:8f:18:7d:e9:83:92:30:8f:a6:c9:7c:2a:7a:26:cc:41:f5:
         34:41:b9:7d:b0:1e:3e:02:c9:7e:06:c3:03:8c:af:5a:3e:9a:
         14:c5:ce:38:6b:8b:5a:64:6b:fb:92:97:97:d8:d5:34:42:e2:
         2c:7f:39:d0:26:8d:5e:a2:10:73:31:b5:d9:e1:59:2c:25:22:
         7c:53:b3:72:06:1e:91:b0:d9:ba:b2:ba:b8:91:28:42:81:b1:
         10:d2:b8:9e:e1:2a:b7:d1:01:45:9f:9a:8a:f0:cf:fb:67:03:
         7d:95:33:82:b5:e6:a1:52:d9:ca:e3:29:20:57:13:a7:e9:d2:
         a1:72:08:df:46:1b:c3:12:a0:3d:8f:e1:19:77:0c:fa:6e:a3:
         ef:0b:3c:04:49:01:34:a6:d8:04:c2:7d:c8:d1:4a:e7:02:51:
         0d:db:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:26:24 2026 by rpki-client