Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/25a05a0a-020e-370c-bff5-a8b1b1536622.roa
File:                     25a05a0a-020e-370c-bff5-a8b1b1536622.roa (raw, json)
Hash identifier:          K5gPuL5l6cAVTyrO7BeqbLSPbiEU98WNVDaidEnm07Q=
Subject key identifier:   02:9E:32:1A:26:6F:D6:AA:DF:84:C4:A9:4C:C3:D9:A5:50:06:F2:99
Certificate issuer:       /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Certificate serial:       010D0C9F4328584F506D448BB9FA71A13D19D980
Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/25a05a0a-020e-370c-bff5-a8b1b1536622.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     400942
IP address blocks:        2602:fcc3:4e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:44:8b:b9:fa:71:a1:3d:19:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=0e0a4ca8-033e-4c5f-9bc4-80cfca36a7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:ae:e1:cb:c1:41:8b:a7:51:9a:82:67:60:
                    ab:e9:ba:bc:60:20:9c:e5:95:01:01:d4:ea:e7:e7:
                    9d:2b:be:9e:d8:e5:85:01:84:41:49:a6:5a:81:ed:
                    67:bc:14:35:82:cf:e3:84:78:82:d8:78:1c:bb:48:
                    d9:13:9f:c6:8e:f8:c1:81:a8:0d:8d:14:b4:f7:60:
                    47:2a:fa:4e:5c:60:7f:2d:d7:c8:ef:65:e1:67:db:
                    6a:32:6b:b9:24:85:55:ee:5d:f5:76:54:c6:63:0d:
                    97:5e:28:0f:a8:0f:92:c6:86:81:6b:bb:d7:ce:5a:
                    ac:86:2d:18:ae:0c:55:d1:35:31:7a:82:26:07:8d:
                    ef:f9:a0:d6:47:43:77:a0:0e:bb:f0:2a:45:86:cc:
                    8a:ef:8a:24:5f:9b:5a:93:3b:f7:c5:be:36:85:3e:
                    05:8d:cc:5c:2c:04:c9:28:57:9e:b9:95:76:bd:a4:
                    69:cf:ac:1e:1a:c7:93:0a:57:86:40:c8:e1:2c:9b:
                    48:f8:1b:21:b7:86:c8:61:ed:08:8f:14:5a:56:26:
                    e7:b8:a7:e2:e5:99:29:a9:8b:c1:23:38:53:51:85:
                    82:49:b4:17:9c:19:b2:bd:6e:71:0d:58:4f:97:9b:
                    eb:22:43:a7:0f:d7:bc:f2:2b:09:7f:62:42:ad:36:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9E:32:1A:26:6F:D6:AA:DF:84:C4:A9:4C:C3:D9:A5:50:06:F2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/25a05a0a-020e-370c-bff5-a8b1b1536622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl

            X509v3 Authority Key Identifier:
                keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc3:4e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:d7:c0:df:fe:48:68:dd:eb:37:b5:77:cd:06:e2:6a:3c:
         a0:33:aa:7d:03:e5:dd:d5:18:24:20:78:55:90:70:c4:4a:81:
         34:75:f8:13:c6:2f:6c:fe:1b:2d:f6:80:64:b2:14:64:1d:79:
         51:33:42:3e:62:af:09:21:30:43:8e:c6:78:b4:44:c5:46:6b:
         90:66:f2:e9:1b:97:43:b8:5d:4f:b4:be:8e:b9:18:42:7f:2f:
         a6:45:39:20:37:0d:58:eb:2f:ef:99:f2:fb:d6:a7:79:02:b7:
         5f:df:04:85:cc:38:fd:55:96:65:69:7a:79:1b:ea:b0:28:c5:
         18:60:68:1c:8f:75:72:53:38:cf:87:4c:8a:b6:35:87:53:bd:
         07:44:23:03:84:53:b9:05:cb:b4:37:a8:fe:b1:b8:7d:2e:e1:
         2f:57:01:54:85:d0:c9:93:d6:0e:f3:bc:19:d6:e6:78:49:d2:
         71:b4:fd:2b:6e:15:36:09:d9:d9:d7:13:19:a3:8d:9c:bc:bf:
         96:a7:f1:4e:82:e5:ca:04:e1:a7:77:ef:2e:35:58:41:22:07:
         fd:42:8b:09:38:b2:79:20:19:f5:25:1a:c8:58:ed:e1:b0:ae:
         28:9c:5a:18:da:9e:e7:29:33:77:bc:ea:25:08:90:4d:a6:e9:
         c1:20:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:00:23 2026 by rpki-client