Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/00a00654-b568-3b7b-845e-fdba4c34aafc.roa
File:                     00a00654-b568-3b7b-845e-fdba4c34aafc.roa (raw, json)
Hash identifier:          wI4X95/gu+se6Rioe70r7PtjD4GD9JGN7BKhm4AhX04=
Subject key identifier:   72:0F:6B:23:0F:B7:6C:95:97:E9:5E:E1:7F:26:11:D5:E9:02:A1:6D
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584F480D664FE328B2D06FA21860
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/00a00654-b568-3b7b-845e-fdba4c34aafc.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     400529
IP address blocks:        2600:3500:c20::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:66:4f:e3:28:b2:d0:6f:a2:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=c20ec8f4-f798-44c3-97fd-e4cb4e97aa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:dd:5c:62:86:65:18:99:93:eb:84:57:be:
                    8b:07:48:3e:99:5e:62:61:41:ff:30:80:69:69:73:
                    16:e9:b4:d5:dd:19:03:e2:81:4b:8f:c6:df:f2:38:
                    09:72:d7:59:fb:dc:0c:07:a0:a9:17:6c:6f:d3:a1:
                    cd:e8:85:53:c9:d3:c8:b6:44:5c:7d:a5:66:31:4a:
                    50:fe:f6:32:c1:54:12:7f:ce:1a:03:03:5e:49:a6:
                    b1:7e:3b:06:dd:fe:e5:4f:33:13:a0:37:c4:f7:e3:
                    a1:a8:2f:8a:48:54:9f:de:6d:60:a3:98:e4:3b:4f:
                    79:e4:ec:88:ff:c3:27:7c:9c:54:22:a5:c1:db:02:
                    08:22:55:36:a0:43:80:a9:3e:9a:80:2c:a5:1c:d3:
                    cd:30:4f:b8:bd:ab:49:6e:56:41:cd:4e:c2:ea:5c:
                    de:f5:e1:12:bd:48:84:d5:b7:06:34:5f:46:75:12:
                    72:d1:40:23:e2:0c:a7:a0:5f:03:27:e3:af:d4:06:
                    6c:8a:80:7d:18:8c:e7:55:20:88:7d:9b:5d:5a:8c:
                    f0:f8:0d:09:ab:74:9b:de:ee:d3:79:ce:d2:bd:99:
                    a1:91:83:83:d9:8e:5a:4e:69:40:ab:bd:71:bf:5d:
                    17:40:5a:a6:61:3d:e4:8f:2a:6c:bc:45:61:41:1a:
                    0a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:6B:23:0F:B7:6C:95:97:E9:5E:E1:7F:26:11:D5:E9:02:A1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/00a00654-b568-3b7b-845e-fdba4c34aafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3500:c20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:81:03:2a:e7:cf:f3:02:89:97:5b:2f:c4:f7:e7:0a:b0:f2:
         42:93:36:dd:42:80:68:60:bc:c2:48:36:47:86:d8:a9:d8:07:
         be:a5:49:e9:83:f0:d4:a1:3a:ef:dc:45:26:6f:6f:68:c9:31:
         e7:e2:d9:f9:64:0e:5e:10:81:44:78:ee:99:b5:1c:db:62:96:
         40:6c:cc:ce:84:a0:06:d4:4e:ab:5a:77:a2:1d:59:51:08:48:
         d5:7a:9c:3c:8a:14:ef:18:85:d9:7c:cc:85:48:d7:41:25:83:
         4d:f8:08:1e:71:aa:55:87:37:03:a2:e1:2f:2a:e6:bc:a7:71:
         a1:43:51:ab:18:c2:6f:2d:db:78:57:7e:50:94:15:1a:98:7f:
         a1:d3:22:29:29:ab:bb:0a:af:31:43:b4:1f:fe:28:cd:7e:75:
         23:f2:9c:8c:47:ed:1f:c1:a0:2d:56:53:17:e1:b5:80:8e:4b:
         bc:78:71:7e:8e:70:31:4b:43:18:b8:9a:35:c8:23:1f:e9:89:
         d6:0a:19:19:c2:02:7c:92:1b:c5:5d:0c:3d:fb:84:e8:35:1e:
         7f:38:db:ba:fd:8e:3c:fe:4b:9a:f5:d1:7a:ba:2a:e4:74:be:
         16:97:ae:86:99:a8:84:5b:04:aa:f7:54:7c:01:53:32:a0:b4:
         01:f7:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 21:34:17 2026 by rpki-client