Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
File:                     9785b2c1-44bc-393c-9287-c1b9c65de83f.roa (raw, json)
Hash identifier:          0mYlx7EX1mdQlVVcuSW+CJrpBwZtIcR1VQNbhs0Ptnk=
Subject key identifier:   63:1D:13:DC:29:B1:8D:EF:65:40:22:58:AD:31:92:A5:53:65:83:80
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584F71ED9A4E4D27A0EFE0F7E360
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     150369
IP address blocks:        2602:fd6f:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:9a:4e:4d:27:a0:ef:e0:f7:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=985ddb23-b884-4fe6-a857-a3d0be5d356d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:b0:47:5b:db:0a:4c:af:79:f4:97:ff:f2:
                    05:14:cc:3c:7e:d0:95:2e:0b:9d:2a:aa:77:4e:38:
                    77:2c:10:48:44:b2:53:25:28:78:ce:38:fb:be:6c:
                    ee:7c:f1:a0:3e:62:23:49:27:5c:fc:19:02:56:5b:
                    c1:ab:95:b4:c7:91:e4:0d:ab:88:e9:73:53:7f:36:
                    73:6c:84:fc:f2:34:7e:61:e0:83:54:67:bc:d9:fa:
                    d9:56:4f:52:0a:ab:5f:6d:c6:bb:fb:a2:b6:b6:75:
                    4e:ba:43:ef:7e:a5:0d:97:6f:17:2a:22:1a:f0:ab:
                    cb:47:4e:b4:98:50:d5:fc:bc:39:58:30:98:5a:3f:
                    81:68:bd:75:f0:60:77:0e:57:af:9b:b6:90:ba:6a:
                    b5:87:43:d3:c3:95:8c:58:dd:bc:37:c8:3c:bb:c2:
                    f8:75:b2:5a:91:06:95:23:c1:ae:e4:53:d8:c4:82:
                    4a:3e:c5:5d:5c:d9:8d:ff:df:ef:8d:a5:a2:f1:1c:
                    ea:da:0a:c3:2c:f4:27:91:80:1d:f7:5b:df:35:cb:
                    ba:ee:f1:c0:34:30:7d:31:41:0a:6d:47:42:c5:64:
                    cd:22:1f:86:4d:c9:df:99:5f:bb:c9:fb:74:48:29:
                    ef:42:ed:e2:2d:6d:f3:e6:4e:e0:27:b7:77:3c:83:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1D:13:DC:29:B1:8D:EF:65:40:22:58:AD:31:92:A5:53:65:83:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/9785b2c1-44bc-393c-9287-c1b9c65de83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:ca:43:fc:98:20:f2:31:52:30:7a:45:e0:b7:39:ad:ac:
         94:ad:70:e5:5d:3e:9a:f2:49:ce:e9:74:fd:f9:e1:3f:5d:80:
         e9:9d:cc:86:41:71:d6:e3:ce:74:ab:3a:c9:60:08:12:e3:9e:
         09:5f:85:84:0e:65:c0:3f:62:73:94:13:c0:48:2e:a1:03:ac:
         bc:61:cf:f6:94:4c:02:e9:a7:49:35:38:79:b5:14:78:74:42:
         bc:7e:93:c6:2e:1e:1a:eb:79:97:f0:5b:f7:c9:9a:23:d3:5f:
         f5:f9:23:db:06:8c:ca:b0:2e:27:82:68:5f:62:25:b4:fe:b5:
         ce:9f:94:2d:11:07:bf:77:16:14:26:39:a1:be:77:15:64:cd:
         25:ab:71:c4:b2:68:8a:6c:ad:80:8f:de:05:24:6a:f0:e0:03:
         4f:57:c9:28:a2:e6:38:36:fc:37:4c:d8:8a:73:e2:86:cc:f0:
         b0:f7:be:2e:5a:a2:d1:e3:fa:dc:11:f3:b4:a9:f3:70:9a:f7:
         a4:1b:d1:dd:72:01:c5:30:56:e6:86:92:9e:b9:67:5a:94:7f:
         a8:88:86:78:01:c8:e5:f4:ff:3c:e1:78:40:60:bf:a0:b0:02:
         22:f3:ed:5b:36:31:45:e1:3d:3a:c2:dc:b7:21:76:4a:74:9c:
         78:57:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:28:19 2026 by rpki-client