Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/f263d4b1-d3f2-37b6-9a6c-e0bf93bfd1b1.roa
File:                     f263d4b1-d3f2-37b6-9a6c-e0bf93bfd1b1.roa (raw, json)
Hash identifier:          tQHgsy0XuE0qr4vRHttnF1QNSfdMaWgc9Wglm6onCXI=
Subject key identifier:   F0:DC:D8:17:25:09:77:48:4C:CD:BE:DE:76:9A:D0:DE:B0:09:42:A1
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F4328584F498725735D5E008184718480
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/f263d4b1-d3f2-37b6-9a6c-e0bf93bfd1b1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401082
IP address blocks:        2602:f8b4:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:25:73:5d:5e:00:81:84:71:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6ab738b4-b274-4880-aaa7-4c8a631c528d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:83:31:3d:05:9d:35:0e:7d:73:6c:4b:c3:
                    30:fb:38:e8:9a:43:02:32:e4:fb:b1:b2:47:a3:c4:
                    a3:2d:ae:b0:9c:a6:5f:36:7f:00:7c:82:86:83:00:
                    aa:44:6b:da:a0:7a:4d:25:19:ad:08:c8:be:a8:5f:
                    5b:da:7b:6c:a6:fc:97:9e:e7:16:40:d1:57:e0:c0:
                    09:46:dd:b7:cf:58:2c:07:e3:cb:c5:0c:d0:6b:3a:
                    4f:bc:76:da:e6:c2:4c:8a:06:ca:6a:c2:79:2a:f3:
                    06:13:f9:2d:46:6a:54:67:3f:d0:c4:f1:ab:b1:3d:
                    e8:e6:4f:54:94:62:f4:e1:73:07:c2:e8:39:9a:b4:
                    c9:8c:08:fb:e8:d5:77:d8:35:c4:7d:90:e1:48:6f:
                    f1:d2:cd:bd:06:1c:48:7a:63:03:64:48:1b:1f:a5:
                    52:88:a1:4f:7e:60:c6:9a:91:84:aa:80:5c:8d:f8:
                    28:0f:bb:09:e4:53:23:69:d4:2e:b0:5f:54:d4:db:
                    f0:2d:2b:ba:10:8e:d6:09:24:ab:94:f7:d6:3a:45:
                    88:db:95:c4:ee:76:49:4f:4b:75:2c:a3:84:0c:19:
                    35:21:5b:a1:c5:48:1f:49:19:20:9f:a7:b8:25:c0:
                    67:c5:4f:31:10:a5:f5:35:b9:4b:8c:67:78:cb:8e:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:D8:17:25:09:77:48:4C:CD:BE:DE:76:9A:D0:DE:B0:09:42:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/f263d4b1-d3f2-37b6-9a6c-e0bf93bfd1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:1e:b8:97:21:93:b9:f2:15:b9:4b:d9:13:ab:b8:42:a0:
         3e:bc:96:31:d4:9d:66:51:31:0e:50:6b:c8:2a:f3:89:a8:89:
         79:52:19:97:33:09:99:f6:d7:f2:76:b6:3d:1c:4b:a4:4e:71:
         a7:c8:79:d5:0a:64:6b:53:83:8d:8a:6f:bf:14:d2:80:35:6a:
         ea:88:27:f8:30:bd:a4:95:c9:bc:7b:37:3b:77:39:19:b8:23:
         3c:ea:a7:72:f0:8a:b3:42:fe:94:13:c4:83:f5:94:16:02:dd:
         72:cb:56:b3:26:aa:de:d6:d1:0b:9a:4b:15:42:16:53:54:29:
         2c:2a:e6:d1:fe:db:a5:4d:38:28:7e:b4:e6:38:34:cd:1a:0c:
         fb:2e:1f:3c:80:2b:d4:90:97:25:f9:17:63:48:e3:72:3f:5e:
         b2:32:4e:82:84:23:57:72:ed:b0:1a:5d:44:54:31:38:e3:4c:
         83:fc:63:21:c4:ef:e3:e8:be:87:f7:3e:60:f1:a3:ae:20:61:
         f0:0f:f8:76:93:7c:b7:98:39:41:d4:6c:7a:e4:11:28:09:4a:
         52:1d:b9:9f:1b:4e:27:60:a3:9d:4c:9e:c7:f3:97:86:3b:fd:
         88:4e:25:6a:92:ff:94:7f:3b:53:f9:24:77:c2:c1:77:85:0a:
         1f:ae:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:40:12 2026 by rpki-client