Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa
File:                     d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa (raw, json)
Hash identifier:          1CBosr4BGAup5vq8OE1n3QXdilamf675X+aFliyb+RE=
Subject key identifier:   A5:3D:FA:3F:71:88:A7:2C:A6:C8:E8:EF:AC:EE:DC:33:33:EC:EA:E6
Certificate issuer:       /CN=a5c518d0-6c8f-4cc0-8433-e63522746509
Certificate serial:       010D0C9F4328584F70881D2916279AB59EE0C760
Authority key identifier: 2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     402778
IP address blocks:        2602:f33f::/36 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:1d:29:16:27:9a:b5:9e:e0:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c518d0-6c8f-4cc0-8433-e63522746509
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=d9bb1c3b-c9da-4834-a9f6-39bafcdf14ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:a5:a0:4b:c8:c9:a1:bb:fe:e7:a4:7c:1f:
                    61:89:3d:cb:06:6c:c4:46:1c:60:2c:51:0e:3d:1e:
                    f0:4f:de:b4:78:70:5e:23:42:ce:66:a1:f6:cf:e6:
                    ed:7d:bf:8e:0f:cc:7b:c7:57:b8:41:90:ac:7a:28:
                    5a:f1:c6:38:2e:cc:5d:0e:17:59:85:3d:90:71:cd:
                    2a:7f:66:0a:25:be:dd:12:d5:61:98:c5:8e:92:b7:
                    e4:e9:ec:0a:1d:3c:28:7c:9d:82:d0:53:5c:47:a4:
                    b4:87:4c:92:b7:24:33:bd:41:86:c8:1a:7f:15:fa:
                    83:e1:64:39:80:1e:e4:42:4e:83:33:89:f1:90:42:
                    9d:cf:cc:52:b0:8c:9b:a6:23:b9:19:8e:1f:56:6d:
                    2e:5a:2c:cf:4d:3d:f8:eb:45:e9:8e:ac:f7:9f:cf:
                    94:d6:09:9b:5a:49:64:82:ee:e6:7f:a8:78:87:f4:
                    47:3e:f1:05:05:fc:15:d2:9b:00:bc:c6:9b:75:6e:
                    ec:b8:da:53:de:34:fc:ea:05:4a:14:ba:dd:50:be:
                    b4:ad:f0:62:b6:9d:47:ea:8e:d1:c3:13:3b:44:29:
                    98:03:2b:0a:34:ba:39:44:ad:38:86:19:b6:ad:d9:
                    1b:f7:38:c0:fb:8f:97:82:8f:de:f1:72:5e:52:17:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:FA:3F:71:88:A7:2C:A6:C8:E8:EF:AC:EE:DC:33:33:EC:EA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/d5f112fa-bfad-3b7b-a77e-6e2ca2974fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509/a5c518d0-6c8f-4cc0-8433-e63522746509.crl

            X509v3 Authority Key Identifier:
                keyid:2D:BA:CE:8D:F1:48:38:B5:3F:38:07:D5:D5:4A:CA:FC:C6:C2:9B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a5c518d0-6c8f-4cc0-8433-e63522746509.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f33f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:2c:3f:f7:af:2b:21:5d:b3:5a:e6:e8:1d:2c:5a:8b:9b:
         66:da:2a:52:02:00:ce:f3:86:51:00:32:65:8f:50:54:ff:96:
         b6:d3:94:9a:af:3a:98:92:2c:01:c1:80:c3:2a:ca:4c:21:a9:
         c0:a6:40:ab:52:d2:2c:48:d2:b6:87:3a:6c:45:ee:95:40:99:
         de:17:87:6d:7c:8f:a0:86:d4:ab:d9:2f:c8:24:f4:9a:42:f0:
         d5:af:73:06:bf:96:0f:de:c3:09:f3:1e:3d:d9:40:c5:34:ca:
         c7:fc:01:ab:4f:21:e7:93:f8:58:fb:9b:81:4b:8a:bb:7b:b9:
         90:f7:ef:7b:71:40:ff:22:de:47:e1:8a:cc:df:71:06:85:56:
         e5:ce:89:c0:84:12:bb:f4:7c:f7:86:e7:d1:8d:8e:d5:f0:27:
         2a:e5:99:36:1f:eb:dd:f6:12:32:33:93:9e:87:5f:dc:5d:2c:
         df:e3:7a:bd:f6:31:0e:4a:82:c5:e5:39:8a:2c:4e:3f:2a:89:
         a4:c3:d2:0c:93:e9:6a:cb:ca:d1:0f:d6:07:97:77:ef:d0:87:
         03:0e:78:71:bd:29:c9:76:3e:1b:a2:1e:c9:ee:34:19:e4:e8:
         67:ca:42:28:64:56:52:8d:ef:be:ea:b3:0e:d1:4e:0a:34:6c:
         e2:cb:19:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:13:25 2026 by rpki-client