Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/22171a35-e97f-3107-8643-2ebd8460405a.roa
File:                     22171a35-e97f-3107-8643-2ebd8460405a.roa (raw, json)
Hash identifier:          Bs+Ee47LV+d0g7sI6jfzJcrh7tHh7ECRruStn/vH3hw=
Subject key identifier:   09:6B:97:BF:13:CC:B5:D0:34:E2:7D:18:18:40:0A:B8:C3:09:B8:90
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584F7E7E0B95AFFFF304BA95C9C0
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/22171a35-e97f-3107-8643-2ebd8460405a.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     14618
IP address blocks:        2602:f775:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:0b:95:af:ff:f3:04:ba:95:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=fd2c865f-daff-4477-a277-0c1cffdcf5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:3f:84:b4:29:46:38:24:f0:05:3d:9b:4a:
                    e3:e7:df:20:20:dc:20:2e:cf:40:48:a8:35:6a:df:
                    e2:3e:a4:80:dc:d6:b3:e9:8d:c8:5e:84:82:d0:3f:
                    ff:bd:f4:8a:3b:99:29:ae:e1:e7:b3:be:2c:d3:d9:
                    c4:07:e4:0d:b3:e2:a0:b6:ed:ca:45:12:1f:27:6e:
                    11:4c:e5:6f:1b:d6:56:8b:91:34:c2:5d:d9:26:69:
                    74:fd:8a:4f:9d:10:26:d3:bf:b7:21:0f:81:89:74:
                    4d:fc:83:77:35:21:53:7e:2f:39:4e:91:0b:21:a3:
                    89:a4:bf:9e:51:22:7e:d9:be:08:1e:9f:a2:76:5f:
                    20:37:8d:35:02:e7:0b:5d:66:9b:84:d7:59:75:40:
                    80:3f:f1:97:bc:77:73:c1:a6:12:49:ad:e7:a4:b1:
                    26:15:68:e3:47:7d:ca:64:09:be:eb:b8:a0:59:87:
                    a4:4f:11:87:e0:2b:3f:28:a1:3c:60:1f:bf:91:b4:
                    b5:8d:14:fe:73:bd:0c:f2:88:8d:3c:59:9b:38:96:
                    3b:8b:7e:b0:59:ca:48:89:09:59:64:4e:a1:09:f7:
                    30:b4:3c:7e:c9:98:2c:87:a9:9d:54:87:d2:ba:1b:
                    4a:79:f9:54:7e:d4:03:0d:3f:48:a4:0c:75:f6:8d:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:97:BF:13:CC:B5:D0:34:E2:7D:18:18:40:0A:B8:C3:09:B8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/22171a35-e97f-3107-8643-2ebd8460405a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:7e:0d:06:ee:45:87:8f:0d:4d:94:a6:37:af:01:68:fd:
         3c:11:5d:bd:29:a7:0f:9c:ea:3d:45:b7:62:8e:5f:ee:4d:4d:
         4b:a1:3b:6f:25:eb:7d:fc:8f:29:f0:27:dc:2b:b8:6e:0a:83:
         9e:a6:15:c5:49:25:45:42:7e:1c:8e:91:66:65:b7:3e:af:2f:
         01:d4:0f:29:87:7a:17:06:c2:d9:a6:a7:3d:b1:1d:c0:37:4f:
         62:e3:80:57:6c:5f:35:e7:8d:2a:94:4c:02:8d:a3:37:e0:e4:
         8e:e3:dc:dc:f2:fd:3b:29:ab:78:41:0f:6c:1f:47:03:5e:2a:
         70:7a:0f:ef:41:50:a2:e3:ec:fc:1a:fd:ac:eb:be:fa:f6:cf:
         48:e5:ee:b2:76:7b:e5:5b:eb:e9:f5:a0:a9:e4:8f:24:e6:80:
         52:0b:06:c3:7a:e9:5b:8b:2d:a1:14:82:a9:4f:9f:e9:e1:cd:
         a4:8d:fa:7c:65:70:1b:00:d5:a9:b0:8d:74:ca:81:9a:12:ca:
         c7:16:07:b7:47:fc:db:b4:5b:f6:70:a2:e2:1f:e4:d2:84:71:
         4c:99:78:c1:6b:0b:29:51:9d:64:71:82:d5:ec:42:5c:85:59:
         09:59:27:46:e4:20:98:0f:fc:36:5e:3e:c3:9b:fa:a0:f4:38:
         82:d1:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:53:29 2026 by rpki-client