Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
File:                     85f2ea3c-4e52-3222-94c6-afd6e810592b.roa (raw, json)
Hash identifier:          Sv8cNiBYnNoo3amy5jlPJtgSFsveZaYTRPVFB9OHlVA=
Subject key identifier:   BD:82:6C:89:8D:53:27:BB:BA:98:AA:E9:1E:E6:D2:3E:E6:8E:BE:07
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584F34827452386D87A4B2A64A80
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2602:fa28::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:74:52:38:6d:87:a4:b2:a6:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=6ba5d008-1ca1-46a9-9711-4fcc09b46895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:4d:ca:7b:53:5a:ee:05:a8:52:64:be:91:
                    59:77:de:88:7e:54:bd:0e:d6:30:26:3a:3f:ca:c8:
                    fe:8f:30:33:94:8d:ef:49:55:46:a3:eb:d9:cb:1e:
                    fa:83:4a:8c:de:34:3f:2f:be:69:8e:3a:7f:20:f3:
                    b8:11:f1:13:15:b7:b5:40:2e:1e:03:07:a5:d4:90:
                    4b:bf:ef:c1:13:f9:83:d7:8e:fe:c1:9a:7b:4d:8c:
                    96:9b:06:f4:dc:86:84:1f:f5:79:da:83:22:4d:0e:
                    be:9e:23:7c:10:fa:f0:80:e9:dd:39:69:7e:a9:df:
                    14:6a:e9:a7:1b:ba:92:e5:2c:7f:f8:82:79:d5:14:
                    05:95:0e:da:3f:6a:b3:a5:da:55:6a:81:84:65:d7:
                    de:03:e4:42:de:aa:1e:97:ff:ac:30:95:15:65:29:
                    d6:44:e1:eb:eb:0e:c6:08:f0:34:b2:72:99:d7:29:
                    50:3d:b4:aa:ae:a5:a0:c0:92:90:b4:f0:a1:37:5e:
                    40:f9:c3:81:0d:c9:f8:1b:d3:47:92:01:b5:98:78:
                    73:8d:99:24:e7:a3:44:0e:db:b7:68:17:6a:01:60:
                    6c:bb:90:f2:f6:60:1f:b5:97:45:5e:a6:25:35:e6:
                    63:3f:22:44:11:52:74:d8:d1:6b:11:3a:27:b7:e1:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:6C:89:8D:53:27:BB:BA:98:AA:E9:1E:E6:D2:3E:E6:8E:BE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:06:d6:22:15:7f:aa:e5:d5:bf:b5:04:13:f4:33:26:2f:
         3c:85:14:09:63:6e:8b:ed:3c:dc:8c:76:63:06:8a:8f:1b:8b:
         15:f6:1d:13:68:b5:a9:2c:13:f4:9d:6b:29:23:0e:7a:4b:43:
         a8:88:d6:17:c0:d2:39:0e:3b:d3:13:b7:61:e1:dd:8b:1a:42:
         00:03:14:ac:47:60:3a:62:45:62:ad:28:b7:1d:70:58:be:ab:
         4d:ef:0a:84:f7:57:b2:ec:d8:ac:a5:f4:1f:94:b8:32:c6:28:
         1e:b2:33:a6:45:e2:a1:6b:7e:f3:75:96:25:77:ce:b5:0c:0e:
         78:ee:17:13:7d:76:06:17:f3:25:63:a2:66:70:f5:fc:9d:b4:
         b0:c7:cc:90:c5:d4:07:13:06:64:72:ad:5e:19:1f:8a:3c:51:
         cb:27:d3:b9:a3:a3:77:8d:ad:eb:a9:cb:72:23:b0:5e:83:64:
         b0:c6:f7:bf:70:75:d7:ce:e4:78:32:e2:c7:ec:e6:f5:59:df:
         26:b8:8f:57:48:9a:54:d6:31:2c:41:df:7e:b2:d3:66:c7:5f:
         c7:8c:1a:aa:a7:c5:00:19:af:35:11:67:d8:3c:79:e0:08:4c:
         78:0f:29:4d:44:43:10:a4:f3:41:61:3b:94:d9:9e:25:e3:fd:
         a9:f0:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:08:13 2026 by rpki-client