Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/bf55746a-f94f-33ff-a0a8-224364d864a8.roa
File:                     bf55746a-f94f-33ff-a0a8-224364d864a8.roa (raw, json)
Hash identifier:          MWmlyvK/sZeIGUJHaGFRx9NKKRbYru6I2oBFd9gUk10=
Subject key identifier:   B4:90:3C:36:9E:94:12:97:9F:81:81:DE:B9:BB:19:03:99:5B:1B:23
Certificate issuer:       /CN=d9f6ac92-07b5-4554-9d60-881006aaf145
Certificate serial:       010D0C9F4328584F45B22B02E2BB8D039B881580
Authority key identifier: AE:F7:F3:BE:68:5A:2E:46:D8:C6:9D:14:6B:56:5F:D9:43:C4:EC:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/bf55746a-f94f-33ff-a0a8-224364d864a8.roa
Signing time:             Wed 23 Sep 2026 16:45:13 +0000
ROA not before:           Wed 23 Sep 2026 16:45:13 +0000
ROA not after:            Tue 22 Dec 2026 17:45:13 +0000
asID:                     402898
IP address blocks:        2602:f32b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:b2:2b:02:e2:bb:8d:03:9b:88:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f6ac92-07b5-4554-9d60-881006aaf145
        Validity
            Not Before: Sep 23 16:45:13 2026 GMT
            Not After : Dec 22 17:45:13 2026 GMT
        Subject: CN=99780aa2-dbe5-4eb8-827e-7b2b986915d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:8c:20:b8:3c:a9:ee:90:88:c0:61:1e:f0:
                    e5:70:0a:e3:f0:c4:18:4a:d0:8e:65:c9:c1:cc:ca:
                    42:30:d5:d1:98:11:59:00:18:ff:52:68:c5:cb:67:
                    53:dd:c8:bd:46:cc:3f:76:0a:0e:75:2e:b7:3f:18:
                    f6:e3:78:36:90:c8:09:98:fe:bc:ac:0f:04:37:23:
                    9d:bf:c0:44:fc:b2:0b:9b:e4:ab:eb:03:c1:e3:9c:
                    98:b5:91:23:6d:ca:4d:85:9d:4e:47:17:cc:a3:46:
                    12:92:cf:85:c3:a2:d0:f2:22:48:c4:06:67:9e:e1:
                    dd:fa:22:e5:2c:74:db:8e:2e:33:41:75:0a:15:80:
                    2f:c3:57:b7:ca:dd:68:80:03:01:de:e3:73:17:d1:
                    49:a8:44:dd:56:66:3d:06:64:cd:f7:2a:81:be:46:
                    1f:a0:42:31:f9:19:09:79:b0:93:3a:ba:ac:59:0d:
                    92:3c:29:25:83:fe:7e:24:40:13:38:b1:82:d4:83:
                    18:1f:eb:6d:db:c6:03:56:12:b5:49:af:09:b2:14:
                    8d:41:0b:ff:c5:70:76:c7:f5:de:63:dd:82:d6:ca:
                    60:aa:5a:95:c2:f4:cc:88:b6:f4:5c:4a:00:4a:7a:
                    2c:93:f5:2d:8d:e7:eb:23:88:81:c5:0b:9d:40:f6:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:3C:36:9E:94:12:97:9F:81:81:DE:B9:BB:19:03:99:5B:1B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/bf55746a-f94f-33ff-a0a8-224364d864a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145/d9f6ac92-07b5-4554-9d60-881006aaf145.crl

            X509v3 Authority Key Identifier:
                keyid:AE:F7:F3:BE:68:5A:2E:46:D8:C6:9D:14:6B:56:5F:D9:43:C4:EC:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d9f6ac92-07b5-4554-9d60-881006aaf145.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f32b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:ab:6e:11:ad:18:bf:fe:62:70:fe:2a:55:80:f2:c9:c5:
         cc:c5:cc:0a:62:39:56:02:ad:0a:26:fb:4f:5e:ce:00:04:1d:
         44:91:b4:e2:44:9b:57:43:25:96:1a:d8:37:4c:80:a7:50:78:
         1e:72:80:de:f3:4f:65:97:e3:3b:0f:d8:dc:ed:27:e4:c7:41:
         6b:f5:9d:8b:1d:e8:77:cd:20:20:c0:b0:e7:02:fe:b8:73:4c:
         57:b1:a3:39:f1:8b:7c:5a:67:f4:72:f1:2e:45:8f:3a:47:95:
         8e:42:0a:2b:de:a0:63:17:95:54:e7:71:01:f4:f0:39:2b:47:
         e9:c8:95:e4:bf:ae:fd:0e:ee:99:2b:c6:2f:92:4b:70:05:b0:
         07:f1:79:54:61:06:00:26:c8:62:7a:98:95:d5:06:93:ed:f0:
         bf:00:a9:8f:82:91:c5:f8:c0:6f:f0:1c:0e:75:76:65:14:44:
         2e:05:a4:45:0d:0c:e0:08:bb:cd:97:76:cf:dc:dd:7e:52:6c:
         21:71:c4:e9:e5:0e:cc:cf:38:72:05:1f:6e:45:96:84:27:a5:
         97:43:7d:24:55:df:4f:dd:f9:37:db:30:4b:48:ac:f4:39:b5:
         2e:21:b5:91:31:5d:42:78:1a:2c:a6:35:87:54:d7:43:44:a8:
         1c:ec:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:26:29 2026 by rpki-client