Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ceecffb6-d1d7-380b-a99b-2e4daf892004.roa
File:                     ceecffb6-d1d7-380b-a99b-2e4daf892004.roa (raw, json)
Hash identifier:          JwI2LN0QppFu/ME74/UwiKpYWKjygiR5+fTaMqaGCiM=
Subject key identifier:   B0:C9:AF:60:9E:82:A6:1B:15:B1:9B:97:E7:3C:16:0D:71:3F:B7:10
Certificate issuer:       /CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511
Certificate serial:       010D0C9F4328584F7BB2E290B50BF434BDDC1EC0
Authority key identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ceecffb6-d1d7-380b-a99b-2e4daf892004.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     401896
IP address blocks:        2602:f5ad::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e2:90:b5:0b:f4:34:bd:dc:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=c18fec90-0590-4100-b622-72a2a7a84664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:f0:90:73:0a:85:89:a4:63:37:da:04:2b:
                    6d:9f:ff:2b:1c:c5:0d:52:b2:8c:30:44:5d:20:b5:
                    3d:bf:69:c8:b0:f5:43:66:86:3f:ea:fe:e0:ab:e1:
                    f2:e1:7b:00:ac:55:a3:5e:4e:9b:e7:b5:1b:d2:9d:
                    df:9f:c2:68:e2:2f:3d:da:21:92:d2:4c:4c:cc:39:
                    41:0e:8f:9c:74:25:ab:27:f5:1e:d3:43:a1:e8:e0:
                    30:26:5d:a6:fc:d7:20:11:ec:3d:70:cc:23:d3:c7:
                    10:b5:98:21:e6:98:b3:78:bb:b4:e2:b1:c9:bf:d6:
                    73:0a:f4:3c:eb:ea:c6:52:60:76:29:48:b2:15:a6:
                    6b:aa:60:00:36:4c:80:bc:c9:c3:56:07:5d:df:fe:
                    4a:20:90:e3:86:f5:e4:a0:83:8c:68:aa:2d:1d:d0:
                    f3:53:99:38:c7:d2:5d:05:f4:fb:5c:14:91:45:0b:
                    be:4d:10:36:02:21:66:98:4c:f3:0b:4a:dd:c4:9d:
                    ef:63:0a:27:c4:c7:88:08:44:aa:5c:2d:05:a7:c2:
                    0f:4d:9e:9a:32:1b:33:2b:11:4f:fa:bf:a7:12:9b:
                    e4:c0:37:a4:97:9e:1f:43:8f:98:f5:5a:c7:83:18:
                    91:a4:b3:a2:82:3f:a5:7c:e7:a1:84:ca:ca:04:25:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C9:AF:60:9E:82:A6:1B:15:B1:9B:97:E7:3C:16:0D:71:3F:B7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ceecffb6-d1d7-380b-a99b-2e4daf892004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.crl

            X509v3 Authority Key Identifier:
                keyid:B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5ad::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:06:f8:ef:b9:30:38:3e:97:78:42:92:78:1a:3a:42:2f:
         43:cf:5f:e2:d3:0d:d3:ca:22:83:0a:11:ea:fd:e0:b5:d2:c0:
         b8:34:74:23:ca:d8:93:b1:64:30:15:32:0d:93:0a:6e:4f:5a:
         1a:16:5b:e1:af:89:d5:1b:c8:20:6b:e3:0e:5e:00:11:02:18:
         72:68:93:2d:38:47:cb:26:d7:bc:6e:63:00:2a:dd:6b:7a:c0:
         b3:14:18:92:0c:4d:24:cb:05:c0:61:8a:6c:d3:bd:d0:a5:72:
         c5:e8:53:f0:89:6d:b3:63:25:c5:07:ec:f1:21:5c:d5:93:f1:
         7f:ee:f1:44:91:11:9d:3b:04:aa:03:dd:11:ed:5a:cd:0b:71:
         38:bf:d7:1b:e4:d6:a4:aa:2e:eb:2f:cf:6b:7d:9e:5d:3d:65:
         ea:ea:42:ee:8f:01:ec:2f:68:cf:bf:a4:75:06:7a:54:34:f5:
         fd:c1:ff:83:06:69:17:4a:f5:d0:5a:3d:1e:9f:c8:3e:97:2d:
         f8:2a:94:ae:fa:81:12:59:59:20:29:5b:aa:eb:b8:ad:1b:60:
         51:6f:6f:dd:d7:99:fa:bf:48:9b:a1:46:a5:7e:f0:c4:91:c5:
         bc:eb:8b:e2:fb:dc:5b:25:3c:9e:bb:b4:15:10:bc:91:cd:d7:
         26:df:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:48:41 2026 by rpki-client