Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/b5ef61c0-da25-3d22-b996-557135b77667.roa
File:                     b5ef61c0-da25-3d22-b996-557135b77667.roa (raw, json)
Hash identifier:          /Hu3qP5zEwsr1E1TpgW/iEfTBqcnUXa8a4uudScyXJU=
Subject key identifier:   84:1F:E8:8C:B2:A6:BF:D1:46:B3:AE:60:F9:71:46:F8:25:BC:09:30
Certificate issuer:       /CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc
Certificate serial:       010D0C9F4328584F19FCE8B9C30021206C113B80
Authority key identifier: FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/b5ef61c0-da25-3d22-b996-557135b77667.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     394711
IP address blocks:        2602:f3e9::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:e8:b9:c3:00:21:20:6c:11:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=a3c4e861-4acf-447b-a806-766c427318c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:14:98:c2:97:86:c1:b9:39:34:b5:5f:fb:
                    12:bd:e2:c0:ba:61:7c:bc:56:f7:80:97:1a:5b:86:
                    af:78:ad:a2:19:29:71:8d:51:53:97:0f:fc:af:21:
                    40:96:00:1b:66:40:21:fc:f2:6a:30:7d:0c:4b:4d:
                    2c:a1:e1:27:97:1e:a8:c6:ae:99:7e:3f:94:63:3e:
                    ac:c3:91:aa:5e:a0:30:13:c2:40:34:9f:ee:6b:fb:
                    fe:03:6c:91:49:6c:3e:9b:a4:b2:2e:9e:07:d2:30:
                    90:96:f7:70:b6:f5:60:b7:1a:57:64:f2:f2:6e:c2:
                    76:38:99:40:66:52:5f:63:7e:bb:d5:30:33:34:ea:
                    f3:cd:39:86:04:87:08:00:57:c1:02:06:5e:f1:9d:
                    6f:69:0b:71:93:ce:31:f0:5d:0c:e2:49:47:78:5b:
                    15:c1:55:b4:8c:44:10:f9:e5:52:f5:b5:aa:2f:0e:
                    06:93:8b:64:23:7b:fb:44:b8:6f:d3:7b:f8:b0:d3:
                    da:05:7f:e9:c2:6f:bc:9c:2f:6e:95:df:e2:56:51:
                    69:4b:a4:7f:07:21:72:53:42:c4:d2:c1:42:80:50:
                    bf:31:5f:0f:88:06:31:70:6b:a4:f5:0d:a7:d9:36:
                    8d:69:10:33:a9:aa:61:7c:dd:6c:6f:a5:58:7d:0e:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:E8:8C:B2:A6:BF:D1:46:B3:AE:60:F9:71:46:F8:25:BC:09:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/b5ef61c0-da25-3d22-b996-557135b77667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.crl

            X509v3 Authority Key Identifier:
                keyid:FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3e9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:cd:dc:bf:6e:58:8c:25:b7:57:63:da:be:a6:cd:4f:34:
         b6:e0:c1:13:ef:50:9d:3e:b9:9b:75:fe:ac:58:38:06:7d:35:
         c4:54:77:41:63:1e:b1:08:ec:99:43:d8:c3:84:51:d0:d3:2e:
         60:87:6c:36:02:bc:11:a7:78:11:ce:ca:9e:0e:88:6a:c4:9f:
         ad:92:ae:d8:98:8c:61:cc:c6:2d:ff:07:25:57:ba:f1:7d:34:
         75:b8:2f:13:29:4c:d6:89:f5:c4:44:3c:51:04:ad:2c:76:81:
         2a:3e:31:99:b2:37:5e:ff:dd:54:b0:c1:52:f9:b9:f1:a4:79:
         1b:c9:0f:98:c3:7c:8f:ad:24:dd:6c:f8:29:e2:85:3e:52:3f:
         d5:18:17:dc:9b:20:4a:aa:50:44:c4:00:02:f9:e0:3f:5b:7e:
         9a:fd:c5:9e:4d:de:13:f6:53:98:c3:41:b8:d7:5e:57:db:3c:
         54:30:75:e7:d0:0a:c2:f3:1e:7a:63:3d:2a:f4:c6:b2:65:22:
         a7:59:5b:16:e0:bf:bb:83:51:66:13:4e:1b:dc:b8:85:48:f4:
         db:d5:28:a6:df:8e:57:91:bf:9e:1b:ad:93:21:95:b6:59:c9:
         38:f1:c2:6b:c6:61:82:2b:95:fd:69:24:35:d8:9c:7f:1c:9b:
         cd:14:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:49:29 2026 by rpki-client