Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/e217ee32-280e-3bfd-8653-762c5505cf37.roa
File:                     e217ee32-280e-3bfd-8653-762c5505cf37.roa (raw, json)
Hash identifier:          8WkklIuUe8JxmBlI8U+qTFZp2Q1JTty5ZD9Drs2/zIg=
Subject key identifier:   DD:DE:29:D3:5F:2D:FE:0C:90:F3:26:0D:4C:9E:BC:5F:F4:CE:20:5A
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584F655D73CD15C5E6BA51B23980
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/e217ee32-280e-3bfd-8653-762c5505cf37.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     17714
IP address blocks:        2606:c00:c000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:73:cd:15:c5:e6:ba:51:b2:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=fa5d3205-0017-4ad9-a061-aaacf71675a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7f:bb:ad:ff:fa:b1:38:7f:ab:a1:9c:c0:06:
                    f2:64:c9:24:f1:80:80:d9:26:93:df:fe:2f:1e:f0:
                    97:c7:19:ed:3c:38:cf:46:f3:7c:eb:81:bf:83:9b:
                    cc:83:5b:1c:50:94:28:4c:64:bf:da:cc:b6:c4:32:
                    28:e5:59:c0:49:10:10:8a:e5:cb:c3:ca:32:5c:b8:
                    44:ba:e4:0a:7d:ac:8a:f7:bf:d6:27:07:24:64:26:
                    1f:f2:08:c3:7e:ff:7b:dc:df:6f:d3:a1:2d:0c:7b:
                    08:0a:e2:4c:04:ef:70:9b:59:24:05:9a:0a:a4:e2:
                    32:73:30:bc:4f:9a:29:97:7c:26:eb:73:a6:9c:20:
                    e4:74:e6:10:fd:b9:d0:e8:01:eb:d8:63:d3:e5:3c:
                    d4:3b:fe:1e:00:47:86:42:19:65:e9:f4:81:64:7b:
                    e8:d6:4d:60:e5:70:22:73:50:56:e0:bb:a2:f5:5e:
                    22:30:e8:e7:6c:86:17:c2:0e:87:41:9b:7c:6b:8a:
                    12:be:8f:96:78:9d:32:bf:00:7e:c2:c3:32:5e:20:
                    38:d4:55:c9:83:67:f8:22:5e:92:7f:88:c5:53:f5:
                    4c:79:a0:93:36:21:b7:fc:c0:af:4b:68:58:05:6e:
                    a1:ce:4e:45:84:a7:68:20:56:82:bf:4e:6f:f0:21:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DE:29:D3:5F:2D:FE:0C:90:F3:26:0D:4C:9E:BC:5F:F4:CE:20:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/e217ee32-280e-3bfd-8653-762c5505cf37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c00:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ca:d2:96:cd:11:cf:ae:ad:5e:20:e2:4f:88:05:d7:85:03:
         ec:94:7c:7a:e3:13:01:28:de:16:54:20:69:c2:6a:e4:b0:e6:
         87:72:6a:09:dc:32:78:c8:1d:30:95:9e:5c:a2:61:6f:09:34:
         22:b6:f3:d0:a6:3d:e2:6e:d4:95:e9:c9:aa:2f:a1:bf:9e:c9:
         97:47:29:f8:bb:7f:be:3e:29:c1:b7:d5:ce:8e:b8:cd:85:44:
         ce:0e:58:3d:0c:a6:a0:c0:ae:ba:65:cd:db:bf:24:b4:0d:07:
         1a:ec:b8:bc:1f:f6:66:68:8c:02:44:b4:03:b3:92:bf:f8:65:
         38:e2:5a:9f:6a:88:1d:38:2b:3c:33:f0:29:9a:c3:44:f4:df:
         45:3d:3b:36:b8:ac:3d:8e:28:8e:d3:a1:b6:ff:6e:8c:5f:2b:
         1e:cb:0b:fc:1f:65:31:5a:d5:ee:09:e5:f5:a1:3f:fd:7a:4c:
         48:4b:c0:6b:c7:9b:36:b3:aa:67:d5:fc:0a:34:d5:5b:de:3e:
         da:2a:fd:4c:70:00:f1:0e:5b:cc:4c:ea:6b:0f:2c:fa:60:91:
         2d:52:17:2d:c3:bf:f7:38:c0:b0:89:84:35:74:3d:12:0c:66:
         fe:ec:05:9d:53:2c:8e:f4:2a:12:36:52:21:4c:0b:44:f6:2b:
         7e:e1:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:34:30 2026 by rpki-client