Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa
File:                     a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa (raw, json)
Hash identifier:          MMr2RIEMi9qnbpC9hZqVr7AcA/iXq/6pKsp+XUqHjJg=
Subject key identifier:   6B:96:73:37:C5:3F:BB:4D:7D:C0:DF:7E:FF:67:A7:EA:30:D3:C0:08
Certificate issuer:       /CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
Certificate serial:       010D0C9F4328584D6515250DD07A6890D9229780
Authority key identifier: B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     400283
IP address blocks:        2602:fbf9::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:25:0d:d0:7a:68:90:d9:22:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=54e19e14-78b6-480e-ad98-32e8df6f8c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:8e:59:cf:62:e1:7b:9f:e4:d1:79:58:95:
                    59:4d:db:96:3b:95:6e:23:a4:43:89:95:83:6e:09:
                    1f:d7:53:4b:ef:f2:01:ba:80:64:05:b3:fd:68:0d:
                    ad:71:d1:03:0f:09:1b:d0:4e:b2:ac:ac:bf:3f:c3:
                    1d:ab:b4:2a:85:d1:e6:8a:61:31:43:75:23:df:9b:
                    bb:23:5c:62:e6:96:56:c0:cf:35:e7:95:53:a2:b6:
                    82:a3:02:f7:86:e9:30:1f:d7:5f:c0:79:fb:c8:fa:
                    d4:68:4d:0a:dc:2a:9f:4b:2e:84:a7:28:4f:2a:bf:
                    95:ac:c0:7c:44:b0:39:62:af:b7:92:2f:15:55:6a:
                    c7:25:c7:e2:61:69:2c:81:4f:8d:76:cd:9f:88:14:
                    a5:43:40:f1:a3:02:88:30:33:c3:8e:bb:fe:0f:32:
                    41:dc:d8:5a:2b:21:f8:3a:34:01:d1:67:ce:06:10:
                    79:09:90:06:45:db:0a:2e:e8:0e:e6:7b:7f:81:04:
                    1d:2f:6d:84:16:1f:9c:cb:cb:a4:f8:af:50:3c:b8:
                    e6:48:3a:7b:a2:e3:da:f2:2d:a1:40:c0:06:55:a9:
                    c7:91:4b:aa:d7:d8:9b:0a:95:32:c8:c1:0a:d0:8f:
                    be:64:15:49:14:ee:69:cc:ab:26:c0:d1:56:83:27:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:96:73:37:C5:3F:BB:4D:7D:C0:DF:7E:FF:67:A7:EA:30:D3:C0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/a86f9a45-8b0a-3c18-acd3-90e8b3ce0d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl

            X509v3 Authority Key Identifier:
                keyid:B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:09:14:c4:60:48:a8:3b:e9:06:7e:28:57:1b:cc:a0:c4:74:
         f1:cf:68:4c:3e:67:2c:3e:e0:32:c1:14:fd:de:cb:6f:49:b2:
         dc:f8:b1:f8:4c:62:92:ba:63:ff:89:ee:5d:5e:05:70:ed:52:
         13:44:c6:f4:30:df:d2:82:83:53:47:08:ec:fd:b3:e4:35:12:
         b1:d4:eb:b7:61:d6:b9:6d:ee:41:f0:d8:e0:f7:db:0a:1d:6e:
         f9:e4:41:b0:95:d9:c0:27:b0:1a:8d:3c:07:96:b8:76:13:ce:
         c7:55:9a:d7:28:7a:59:c5:80:79:38:df:df:bf:29:ac:c9:ca:
         13:1b:82:df:b6:56:88:4a:35:a3:bd:37:67:6d:ea:0c:77:6c:
         f5:31:d9:fa:37:06:7a:6d:f9:2d:a2:3f:21:10:26:96:79:0b:
         ce:b0:36:68:69:b5:0f:23:03:5d:3b:e9:c0:6e:90:a3:ca:74:
         d3:df:17:fa:a0:fa:ce:14:5a:9f:05:d2:65:49:75:af:f9:a9:
         5a:c3:c4:35:c7:69:4c:27:61:2e:4f:f8:4d:b9:0f:28:9f:9e:
         00:61:1c:67:77:ac:8e:af:ab:dc:26:78:95:70:4b:05:77:a3:
         2c:14:96:b2:fb:78:7e:51:9e:51:f6:48:31:a5:b0:8a:19:f0:
         68:2e:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:21 2026 by rpki-client