Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa
File:                     efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa (raw, json)
Hash identifier:          48r/uq47Bes5pEjNHk7X626u8jkbVKGE9i7SVLOCHsA=
Subject key identifier:   63:0E:09:FE:77:0A:08:C6:87:1D:86:1E:F4:A9:1D:AF:DA:A1:0C:1B
Certificate issuer:       /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Certificate serial:       010D0C9F4328584F454292C19604B661F13C3280
Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     401578
IP address blocks:        2602:f739::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:92:c1:96:04:b6:61:f1:3c:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=fde5bc6f-ec69-4371-a9f1-b4ac7612921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:5c:b1:a7:b8:b3:ab:ff:7b:ec:5f:61:c4:
                    f1:ee:3d:cf:13:3d:07:7d:3d:f2:7b:54:1c:59:f7:
                    aa:cd:48:d3:a5:3d:ca:e9:7f:b2:30:14:a7:a4:a5:
                    98:15:07:c0:95:77:f4:6a:c5:54:13:59:6f:b7:cc:
                    7a:80:eb:11:bb:97:b4:3c:36:46:fb:40:c7:4e:81:
                    56:1a:5d:e3:7e:1d:02:3a:a7:4c:b9:8e:33:ab:cd:
                    12:f2:d8:d6:55:73:3e:01:d4:b5:9d:06:49:36:83:
                    1b:30:20:cd:4d:c6:fe:f5:de:ff:f1:8d:6e:52:cf:
                    c5:84:9a:c8:5e:b6:14:93:82:02:54:77:61:a3:aa:
                    d0:7c:14:cb:5a:f2:bf:d7:10:33:46:ad:29:76:9d:
                    0e:96:5b:9d:04:6c:14:36:8e:db:25:3c:58:d6:f9:
                    37:b4:58:bb:9b:0a:f4:56:4c:38:fb:11:7a:ce:6a:
                    4f:e4:62:2a:ac:87:39:f8:11:45:14:70:43:c2:6b:
                    f4:3e:fc:56:5c:41:c8:8d:d5:02:a3:eb:e4:8c:9a:
                    fb:af:4f:3a:78:ed:1f:bc:7b:de:e8:8d:d6:7c:f9:
                    6e:83:0e:9e:49:52:1f:d7:80:bf:99:0d:c4:43:19:
                    90:ac:31:f0:18:b8:bb:ee:e2:51:4d:56:38:7a:3c:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:09:FE:77:0A:08:C6:87:1D:86:1E:F4:A9:1D:AF:DA:A1:0C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl

            X509v3 Authority Key Identifier:
                keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f739::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:23:be:2e:5f:30:52:ea:cb:f9:a4:83:94:aa:8f:62:de:83:
         3c:28:20:37:ec:d0:60:a5:c2:1f:9b:47:36:b6:b1:24:b1:47:
         5f:2d:45:c7:2a:52:36:9d:e5:3d:04:ff:52:c9:02:77:f9:35:
         ef:0c:de:ee:6b:de:02:9a:e4:b0:0b:85:8b:26:76:ad:cf:69:
         2d:f1:96:43:90:46:2f:a3:60:01:42:b4:a9:ea:9d:d7:9d:a1:
         dd:58:e2:88:2c:0a:9d:76:38:b2:d7:4a:41:a0:16:62:1f:89:
         f7:a9:4c:9c:46:b3:0c:3f:f9:d9:d0:ac:59:b6:e8:50:64:e6:
         f6:04:35:d7:20:5d:96:e3:a1:5a:df:fd:3d:75:b2:2e:8a:71:
         76:40:e7:db:f1:b0:c9:a2:f5:37:5d:ed:a6:1e:b1:de:61:86:
         f1:f7:93:95:20:5f:a6:c7:93:d1:be:56:a9:45:89:cb:29:e9:
         97:da:5b:64:c0:9d:a1:ff:d8:63:7c:de:34:ac:83:45:7b:1b:
         f9:7e:0e:b4:9e:11:3b:60:f0:e9:1b:22:26:88:02:06:62:64:
         2a:a6:9a:99:3e:1b:ea:0e:1e:ba:42:6e:25:28:52:35:a2:8f:
         a6:a2:50:05:f7:a2:20:10:21:53:83:cd:2d:3c:b4:8e:7a:20:
         4f:bb:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:55:57 2026 by rpki-client