Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa
File:                     a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa (raw, json)
Hash identifier:          sQqIJ2nAOZS82QIdfSgExJZ83VLijS2YoWO8/7jyseU=
Subject key identifier:   B6:C5:57:54:D3:52:75:20:E4:1B:03:CA:C6:85:48:A1:6A:F5:A2:FD
Certificate issuer:       /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Certificate serial:       010D0C9F4328584F6292D77D0DF824D904EF0D00
Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     32639
IP address blocks:        2602:fdf2::/36 maxlen: 36
                          2602:fdf2:fab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d7:7d:0d:f8:24:d9:04:ef:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=8f13270b-4ec8-47a4-92c2-a31131c430c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:c1:d7:b5:df:ff:75:7e:94:d8:6c:8b:3f:
                    3a:55:20:e6:24:99:f5:d9:06:5f:ba:cd:37:e6:fd:
                    03:42:e7:16:95:7a:47:0e:e7:db:01:fc:0e:89:81:
                    7d:be:cb:5b:3f:bd:73:f9:a3:66:3c:04:3a:ed:bf:
                    d0:94:d1:07:a1:f2:77:de:9f:fc:e9:29:e9:7b:03:
                    bd:f7:bf:fd:8a:ca:e2:46:43:b4:12:be:67:93:d7:
                    93:ae:91:0a:d2:f1:4c:3a:7f:df:b2:24:4f:b0:4f:
                    19:fd:85:09:0b:91:37:59:63:db:53:68:a1:90:a8:
                    30:a1:c4:26:bd:ce:50:39:8d:f3:cd:10:d3:47:9f:
                    61:c7:bd:8b:e4:8e:91:c9:b0:36:5d:28:8d:39:f3:
                    66:a3:36:6d:91:7e:69:e7:6a:df:0b:fb:22:87:40:
                    ce:d2:08:7d:a3:40:50:3d:af:4c:ac:e0:3f:0b:65:
                    a4:9a:eb:bc:72:a4:18:12:69:53:ff:3b:cf:85:ea:
                    40:77:90:3b:70:6e:b1:a7:f5:33:97:21:3d:0e:99:
                    7b:85:24:97:1b:71:73:dd:c8:de:06:fe:0b:cf:61:
                    5d:da:36:2c:90:6d:62:8b:50:73:02:bd:0b:79:e4:
                    57:0e:e8:c3:8c:7a:e3:27:f1:9f:3f:bf:eb:fe:e5:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:57:54:D3:52:75:20:E4:1B:03:CA:C6:85:48:A1:6A:F5:A2:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl

            X509v3 Authority Key Identifier:
                keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdf2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d1:52:42:03:bb:3a:30:94:ee:16:54:52:9a:f9:a2:ff:7e:
         38:72:5c:ef:a1:3f:e9:ac:6b:a4:32:1f:32:4d:bc:b5:0c:70:
         d5:26:12:ba:45:71:75:9f:c2:a4:dd:7b:fb:8d:c2:c0:19:4d:
         d4:d2:de:00:8d:06:95:52:5c:93:08:ac:bd:89:8e:9d:15:bd:
         86:26:be:d4:c4:8a:bc:4e:a0:43:40:d8:88:b6:ed:18:3a:6b:
         16:4a:f6:a6:00:08:79:f7:13:07:c7:24:4f:b1:10:71:b1:af:
         cf:9e:4b:4a:f2:8f:50:45:10:ce:dc:0e:16:9e:89:b9:44:85:
         de:6c:26:64:f0:b9:7f:38:d5:9e:06:b6:45:9f:50:7e:52:ee:
         1c:6c:41:bf:ed:1d:73:9e:ae:71:44:39:53:dd:37:86:78:2a:
         ee:b1:2d:d6:ab:7a:ed:0d:af:22:ce:96:58:6d:44:b3:dc:4a:
         e4:a4:d8:8c:e7:73:03:05:ca:8f:0c:5b:cd:68:fb:b4:ae:dd:
         67:32:63:71:b7:c0:c4:a5:4d:cd:78:06:fb:93:90:5a:54:91:
         cb:91:6d:80:f0:e2:fd:8c:28:6d:bb:19:69:5d:4c:91:38:35:
         92:44:ba:a4:08:cf:82:77:db:00:05:f2:f7:6d:75:c4:e3:f0:
         25:2e:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:28:05 2026 by rpki-client