Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/bf871785-9653-31b5-bd26-956ac60af095.roa
File:                     bf871785-9653-31b5-bd26-956ac60af095.roa (raw, json)
Hash identifier:          L+bjrYyxWIzet5zLY3LTK96XML/BPb516FO1P/Yy06Q=
Subject key identifier:   D9:45:02:BF:7A:1B:79:78:16:C6:CF:C9:F5:E2:AA:1E:7D:9B:5F:E3
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584F4975C7B1CB215997D6977700
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/bf871785-9653-31b5-bd26-956ac60af095.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     152598
IP address blocks:        2602:fd92:cc0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:c7:b1:cb:21:59:97:d6:97:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dc772225-bbc8-4f90-97cd-b2b3d60b111e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:78:cb:79:55:b3:a0:8f:0a:86:de:3b:f0:
                    70:7e:df:1e:00:28:5c:95:0d:5b:cb:23:14:e9:80:
                    01:cf:be:1e:de:76:4b:27:14:60:e4:22:f8:22:d6:
                    d4:e3:53:79:4c:de:35:9a:d4:db:f8:71:a8:86:06:
                    61:2c:1f:11:71:7e:8c:65:c7:1e:5f:07:f3:5c:06:
                    e4:f4:21:df:3a:c7:82:ed:fa:c0:39:8f:0f:66:a5:
                    84:af:7f:9b:7d:ba:76:35:40:fd:9a:c2:69:69:13:
                    22:fa:5d:d9:11:1e:33:8d:37:88:18:a9:75:5f:52:
                    22:8e:ed:01:a1:6b:f2:09:fc:14:d8:28:37:c4:db:
                    ec:5b:bc:0d:4a:66:75:cf:f0:05:05:1c:c3:d0:5e:
                    c5:a1:0f:40:c1:d5:6d:cf:2d:27:c4:1f:ba:54:f5:
                    fc:70:ae:13:44:7e:ab:17:ee:4d:a8:4e:9e:f5:5e:
                    2b:d9:24:2c:a8:ac:08:07:46:61:2c:4e:f0:df:29:
                    9a:4d:3b:87:d6:78:14:81:e5:5b:a2:f5:ef:b7:df:
                    95:17:a6:c1:e8:7c:db:f6:59:76:2b:8d:00:01:06:
                    06:2f:ef:95:e6:3c:0e:d8:c7:88:0b:33:f7:93:4b:
                    e6:05:cc:18:b0:3b:25:cd:2b:21:0c:c3:09:fa:ed:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:45:02:BF:7A:1B:79:78:16:C6:CF:C9:F5:E2:AA:1E:7D:9B:5F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/bf871785-9653-31b5-bd26-956ac60af095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7b:25:11:8a:b9:66:48:85:ac:e7:e9:37:d6:ef:1b:d2:d0:
         a3:af:9c:b8:58:6a:7e:07:9e:c6:01:85:7c:81:0b:33:40:81:
         f8:0e:ce:47:bc:06:9b:c9:22:ce:e8:c3:c7:d1:bc:aa:34:f9:
         36:ec:89:5e:31:6d:e5:d8:5f:0c:e6:cc:e1:72:f3:3d:25:49:
         bc:4e:3f:63:5d:1b:5c:7b:37:19:0b:e6:2a:61:e6:83:05:c2:
         ab:70:2f:2b:ce:da:17:92:56:68:a5:c8:4f:20:0c:09:5c:dd:
         69:fe:ca:14:9f:88:32:be:30:28:26:c4:fc:61:6d:7e:22:ac:
         9f:6d:47:1d:0b:79:f1:ce:57:c7:69:4e:62:b0:76:9b:5b:2b:
         f4:01:f1:59:34:ba:9a:e6:f6:3a:4a:14:d1:e3:64:46:9d:6b:
         89:39:d0:c4:22:f6:e2:fc:dd:c9:48:aa:85:5d:09:cc:21:70:
         6d:fe:81:f6:0d:c0:5e:a2:60:02:e7:09:16:81:7f:68:33:ff:
         2e:35:9f:be:83:a1:56:8a:4a:50:e2:4e:2b:73:34:26:a4:f6:
         6c:3e:de:4a:12:da:b6:7c:53:43:86:82:d5:52:a2:33:9f:1b:
         5e:28:74:a4:04:f6:af:0c:00:18:41:93:6a:18:c3:c5:35:83:
         8c:10:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:21:03 2026 by rpki-client