Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/ed8225c4-5cae-3e2b-bfad-297d1ecd2103.roa
File:                     ed8225c4-5cae-3e2b-bfad-297d1ecd2103.roa (raw, json)
Hash identifier:          dd0ogsIx04MHuddzE052Cpq8Vjrps5MfBRRtmbLPzlg=
Subject key identifier:   2F:38:0A:04:6E:5F:5D:A0:61:54:F6:56:F7:D4:2B:1D:1D:31:8A:3F
Certificate issuer:       /CN=f2560405-675d-4c58-8230-db678dbdf9bb
Certificate serial:       010D0C9F4328584F3A17CB5F1E1539AFFD422780
Authority key identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/ed8225c4-5cae-3e2b-bfad-297d1ecd2103.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2602:f6f9::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cb:5f:1e:15:39:af:fd:42:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2560405-675d-4c58-8230-db678dbdf9bb
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=7c22c0f5-358f-413f-8950-ecc64adbf246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:86:3e:47:86:7b:4b:7f:3e:b6:52:5f:91:
                    ec:e1:62:e2:d5:e9:6e:60:e9:70:90:06:f4:4e:7a:
                    fc:d8:8b:a4:96:bd:79:5b:ab:0b:e8:7f:2c:0e:dc:
                    d1:9b:9c:5e:ac:90:8c:40:3e:90:da:e4:a5:78:4b:
                    50:53:20:44:7d:da:4c:f5:ba:69:35:68:f8:a4:77:
                    1f:fb:5d:b7:62:c3:ad:23:51:b0:39:ae:ab:7f:b1:
                    6e:eb:73:aa:ac:07:01:b6:68:a6:01:31:72:6d:19:
                    ce:3b:ae:03:96:a1:e4:c8:f7:b9:da:72:9e:6b:53:
                    40:24:d8:c3:85:ce:93:bc:dc:11:23:43:67:7e:1d:
                    41:28:e7:ae:a5:ed:ba:0e:26:2d:d6:95:3e:cf:e1:
                    58:24:6f:79:3a:56:f9:dd:34:e8:84:44:12:48:a4:
                    5b:a3:6e:6f:8e:37:d1:79:e1:19:83:37:bb:11:22:
                    e0:29:2d:ae:50:96:52:60:10:b8:5d:13:a0:83:76:
                    16:3d:10:9a:df:e0:fe:0f:dd:a4:e6:3e:74:02:dd:
                    aa:14:55:7e:5d:12:67:74:cf:ac:f6:8e:eb:b1:6b:
                    cf:db:ed:33:2e:88:b1:d5:58:47:da:f7:7f:9f:6d:
                    60:40:32:1c:64:34:d9:7a:e8:2e:3f:d4:a9:d1:aa:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:0A:04:6E:5F:5D:A0:61:54:F6:56:F7:D4:2B:1D:1D:31:8A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/ed8225c4-5cae-3e2b-bfad-297d1ecd2103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f9::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:20:d9:c4:68:6a:99:0a:69:b0:d1:ad:c5:4a:0d:0b:78:03:
         10:8b:f0:6e:3d:18:48:37:e8:59:08:34:a3:16:d6:58:c3:89:
         3b:03:c1:01:10:33:ec:cb:c7:0c:a5:3c:01:b8:2a:27:a3:3a:
         54:f7:d7:43:4e:e8:de:8f:45:52:3a:06:d8:5d:01:ab:ec:38:
         8b:7b:38:20:d4:f2:08:97:01:c4:4e:dc:67:62:28:d7:24:2b:
         dc:0f:40:71:8c:dc:51:df:da:db:a9:c2:89:08:5c:88:a8:51:
         20:5c:2a:00:e6:f4:0c:c0:de:e8:2d:0f:f7:9a:de:a3:fb:45:
         37:ef:35:2f:42:d6:59:49:c3:71:be:e8:46:42:2b:8a:de:0e:
         b3:b3:5a:f8:2b:b5:36:7e:5f:4e:01:b3:c4:80:7d:78:69:0d:
         43:a1:34:c0:e3:76:82:63:08:3b:09:5c:1c:18:b6:7b:d5:db:
         e4:11:4c:3f:6a:80:53:bc:44:a3:fd:d5:da:27:d0:f3:bb:15:
         1b:fb:59:c2:42:da:57:30:ad:65:a3:e2:d0:66:d1:d9:e4:53:
         6b:2a:75:a0:d5:e3:8e:bd:8a:5d:3b:9c:9e:e6:26:6b:00:8d:
         85:8a:29:5d:37:58:cf:f5:17:eb:5b:36:07:d1:1a:d2:80:86:
         84:54:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:30:32 2026 by rpki-client