Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/35c26137-b7ac-3179-9af2-35035f058b12.roa
File:                     35c26137-b7ac-3179-9af2-35035f058b12.roa (raw, json)
Hash identifier:          wqR9bVYSjUotwtnYhgb7YLqsXfg6LJn6+79V6h0GI1M=
Subject key identifier:   79:2C:03:7F:7E:EF:15:23:10:37:47:CD:40:EE:91:4C:D9:C5:E6:58
Certificate issuer:       /CN=919a4b9c-70ba-44da-8f00-056b3a87c761
Certificate serial:       010D0C9F4328584F453B0978AA35C1EB8159F200
Authority key identifier: 91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/35c26137-b7ac-3179-9af2-35035f058b12.roa
Signing time:             Wed 23 Sep 2026 12:45:11 +0000
ROA not before:           Wed 23 Sep 2026 12:45:11 +0000
ROA not after:            Tue 22 Dec 2026 13:45:11 +0000
asID:                     30150
IP address blocks:        2620:1b:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:3b:09:78:aa:35:c1:eb:81:59:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919a4b9c-70ba-44da-8f00-056b3a87c761
        Validity
            Not Before: Sep 23 12:45:11 2026 GMT
            Not After : Dec 22 13:45:11 2026 GMT
        Subject: CN=91ab714b-324e-449f-8135-1c96c53296b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:e2:cd:28:cc:87:85:fb:45:a0:f5:6d:1b:
                    79:f2:08:f1:af:f5:92:f8:be:ad:58:9c:44:be:c5:
                    a0:37:ba:5d:7f:de:f7:1a:88:ce:b9:af:ba:6d:d1:
                    ab:01:a1:a9:88:16:86:0d:5b:12:fd:cd:08:b9:ce:
                    fe:63:98:aa:5e:f9:2e:ac:1d:43:6c:16:9a:19:c2:
                    73:c2:06:36:01:51:b2:24:56:1a:00:57:4b:de:bd:
                    37:58:ff:5f:2a:77:17:5c:cd:a4:89:0f:99:01:93:
                    55:cf:c3:96:ad:97:c5:d3:2b:a0:ac:35:c9:78:f6:
                    b1:3d:25:4f:e9:07:a4:ec:cc:af:d3:e3:80:ce:4b:
                    60:4c:a9:5d:cc:ac:1c:ee:f7:26:dd:7e:8c:34:53:
                    2e:c4:54:20:2a:3d:e4:54:bb:2f:55:bc:a0:63:a5:
                    c5:06:5f:3f:ca:87:e6:9c:8c:5d:be:97:18:c8:31:
                    95:a0:f6:64:69:a5:b9:39:d2:0c:4f:3e:a5:f0:39:
                    33:e4:60:37:d2:82:8f:72:29:d5:15:a4:d1:fd:c7:
                    3e:8e:9e:89:47:04:b2:3d:46:d0:6a:41:49:30:ec:
                    2e:ce:c3:3a:19:75:0b:f0:f6:8f:a8:fd:5b:88:02:
                    6f:cb:80:a3:71:a1:dc:b7:ce:90:1a:60:ab:34:62:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2C:03:7F:7E:EF:15:23:10:37:47:CD:40:EE:91:4C:D9:C5:E6:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/35c26137-b7ac-3179-9af2-35035f058b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl

            X509v3 Authority Key Identifier:
                keyid:91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:d6:27:2e:f8:ff:03:a3:7a:0c:3e:cb:1a:4f:c1:de:00:
         3c:aa:cb:0b:4b:1b:bc:b6:0f:df:c9:be:9f:4b:45:ed:7e:9d:
         35:63:79:72:83:3c:e5:f4:30:a3:92:67:eb:09:35:50:3e:bc:
         e6:d0:ab:dd:8a:dc:b0:c9:88:b6:18:18:e2:f2:21:91:d6:6d:
         08:4f:0a:c4:15:f6:9b:aa:72:14:c6:a0:5c:fc:72:dd:af:1b:
         28:cd:4a:41:b3:bd:c2:95:6e:d6:94:c7:59:02:ff:2b:06:ab:
         1e:33:5f:70:11:ca:fc:92:45:af:77:6f:44:4a:05:77:43:7f:
         26:4e:62:24:95:26:b3:98:36:a6:b0:ac:8a:39:d6:83:60:37:
         e4:4f:4d:3a:2b:a9:df:82:e5:85:36:3c:af:b3:66:5e:80:23:
         ff:d7:bb:f2:70:95:88:b5:51:9e:bc:1f:cb:0a:63:84:be:5d:
         5d:3a:0b:83:7b:71:aa:61:55:ad:bd:91:c4:55:31:71:2b:01:
         b5:31:aa:35:e7:70:01:26:6d:f3:ed:db:98:2a:7c:13:5e:77:
         f7:3c:ce:1c:f7:a5:4e:08:e4:46:61:88:e4:ce:fa:86:88:e7:
         cc:f4:0b:a9:85:05:9b:c3:41:ee:01:16:1d:34:da:bb:db:c1:
         4d:e0:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:00:10 2026 by rpki-client