Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa
File:                     6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa (raw, json)
Hash identifier:          fBzM5hMAzee26S0EQ3kEuZcHQrYQ7Rp91bI3xg6aN80=
Subject key identifier:   B3:B3:12:A9:BE:9B:CB:0A:94:62:74:B9:AD:5D:E1:82:22:CF:8D:C7
Certificate issuer:       /CN=ba2f27f4-9270-4d20-9b84-034ca573f183
Certificate serial:       010D0C9F4328584F3E47E827F36A6FC3AFA57080
Authority key identifier: 67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     397375
IP address blocks:        2602:814:3000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e8:27:f3:6a:6f:c3:af:a5:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f27f4-9270-4d20-9b84-034ca573f183
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=8c3e0903-54ae-4d7f-9194-f9f3ac1607ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:17:b0:b7:e6:f3:4a:66:fb:b5:aa:61:9f:
                    5c:72:db:be:69:8c:6e:29:20:a7:c2:5d:07:80:3a:
                    2d:87:4b:c2:04:24:7e:8e:c0:94:e5:33:88:ec:03:
                    0b:6f:6a:9b:e9:19:3e:9d:10:64:10:9e:37:d7:25:
                    c3:43:44:89:de:19:0a:8d:e3:95:97:05:a0:47:77:
                    4e:35:62:c4:54:1c:aa:6f:ad:34:7d:7c:57:bc:e0:
                    62:ea:96:d6:b9:21:1b:84:f6:b0:4a:93:52:2c:bf:
                    51:7c:31:f3:2f:3b:63:78:08:b6:d2:d2:0e:fc:5c:
                    49:ae:4c:91:2a:50:5b:3d:9b:29:0c:a1:53:f0:23:
                    5e:4f:59:8c:6e:12:d5:97:52:de:e0:6d:8c:27:45:
                    a9:ac:27:dd:7e:b4:61:ce:b8:13:15:d0:06:19:ff:
                    cb:57:31:e9:96:9e:f2:c1:f9:07:51:de:4e:a6:c3:
                    43:8c:e9:13:31:ac:35:41:b3:de:e5:d6:51:2d:a1:
                    a3:93:32:a3:2f:14:fe:2e:5c:51:8d:ac:83:7b:36:
                    fe:93:10:a3:33:0a:98:e0:30:ae:63:47:b9:41:82:
                    38:bb:c7:bf:2a:98:95:c2:dc:fa:b7:c0:e2:c3:b5:
                    ec:1a:cb:c2:25:4b:fb:6b:ea:28:e9:fc:a9:cc:a1:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B3:12:A9:BE:9B:CB:0A:94:62:74:B9:AD:5D:E1:82:22:CF:8D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/6f2e4c4d-ee8a-32dc-8bc2-acee77c80c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl

            X509v3 Authority Key Identifier:
                keyid:67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:af:7f:b6:93:33:73:8c:02:ec:eb:06:44:48:b4:6a:78:
         7c:88:c5:b6:76:2a:69:77:9e:22:4e:e1:60:db:9c:7f:00:f1:
         b3:8c:2b:0c:90:81:77:f0:01:cd:28:fb:c9:c2:ed:e6:2b:77:
         6f:d8:ff:1a:89:72:e2:15:9f:1f:72:1f:92:5d:81:07:6a:7d:
         9d:8d:78:4f:71:04:ba:16:0f:b1:f4:1a:d6:ef:39:e4:fa:58:
         09:e0:61:6a:97:d1:d3:a2:86:c1:10:0a:3a:e5:70:d8:09:08:
         51:6b:f1:86:8f:9b:08:dd:bd:c2:e7:a6:b1:17:64:2e:d5:02:
         20:61:a2:a2:95:8c:32:6f:04:04:70:99:1e:87:5e:c4:44:41:
         50:87:16:3f:c7:23:b1:6c:1b:b3:c4:7c:09:2d:c3:a7:9b:26:
         3f:f3:12:68:a2:ed:ef:ed:9e:b2:62:3d:f4:d6:57:7c:b3:b2:
         b9:89:d9:57:40:c2:9e:f1:d3:d0:f9:f9:34:a6:d9:60:bf:b1:
         a3:69:04:90:aa:6c:18:3c:12:1e:51:59:9c:6f:b8:4d:35:4c:
         92:d4:b2:de:44:28:75:9d:96:e6:a9:1e:14:9c:63:82:c4:1d:
         11:2e:66:cf:76:52:97:d6:50:57:ee:b7:84:9b:11:72:85:1d:
         e6:9f:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:30 2026 by rpki-client