Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa
File:                     091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa (raw, json)
Hash identifier:          QDVpGnFcPkt1qePbV01/PhLbZNEw3HxO7dQR9Gr/x7A=
Subject key identifier:   F0:A9:61:61:29:29:0D:29:41:BC:70:3E:A9:00:7A:F8:7D:DA:B0:7B
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584F38B2731A03F3ECBFAB03E340
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     7352
IP address blocks:        2604:cd00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:73:1a:03:f3:ec:bf:ab:03:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=690f8d38-421d-4ebb-a606-5d15584cec40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:0e:d2:c2:12:4f:8c:d1:53:9a:8a:02:f2:
                    1d:76:53:6a:54:b5:7f:a8:d5:12:3d:9e:8c:f2:35:
                    79:be:fb:65:35:b5:d5:a9:b9:0c:5b:df:34:e3:54:
                    90:27:86:85:6e:4d:e5:62:59:4a:78:da:7d:c9:8a:
                    ee:73:01:90:42:e2:71:7b:01:ba:e7:96:6c:7a:60:
                    74:57:16:f9:db:e9:ea:5c:59:ba:e4:49:9d:86:c8:
                    d2:10:8f:07:d7:1e:6f:4e:4a:aa:02:84:6a:a3:a5:
                    76:e9:dc:af:ed:3e:c3:59:75:18:79:6e:9f:02:4e:
                    f2:38:91:b5:7e:e0:4f:56:cf:3a:b3:af:bc:08:e9:
                    cf:17:72:96:68:8d:05:1a:43:64:54:3b:95:7b:1c:
                    f9:1e:29:9c:d0:94:85:41:a1:b3:a5:8d:24:db:71:
                    9c:54:40:53:6e:26:09:52:84:c2:65:6d:51:1b:0c:
                    73:bc:c6:a4:33:5e:5b:71:e1:d6:16:6e:05:2c:e5:
                    d7:94:a9:24:68:da:c2:d9:df:64:7f:93:61:b2:5b:
                    74:71:56:57:88:65:59:e8:5e:b5:fc:4b:37:b9:dc:
                    4e:8a:c8:ba:fb:c2:e5:42:ac:ac:45:dd:5d:fe:bb:
                    d2:97:5d:5c:5c:e2:41:15:64:d8:64:b6:37:59:60:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A9:61:61:29:29:0D:29:41:BC:70:3E:A9:00:7A:F8:7D:DA:B0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/091b4ff1-98c2-334c-bbeb-478f25c0b18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cd00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f0:21:f2:8c:43:72:8d:af:d7:ab:ae:63:36:ff:38:ed:72:
         1e:5e:05:a5:72:5d:6d:9c:3a:e2:ac:d5:9e:50:fc:fa:a8:4a:
         a3:04:43:2d:a7:4c:c2:42:0d:34:f9:70:2e:f6:15:88:16:db:
         94:6b:ed:04:0a:4e:8d:50:20:d2:2a:ef:5d:19:69:a5:6c:3b:
         ce:fa:a1:c5:bd:8f:de:fa:be:07:6f:e3:14:a0:23:58:b3:d1:
         00:3d:d2:69:d6:43:f9:f8:2c:ef:67:68:42:44:0f:e6:34:b5:
         62:a8:1f:29:24:b8:12:68:53:27:1c:1a:a6:bb:73:67:02:a2:
         7f:8d:fb:6c:de:8f:3e:e2:23:80:ab:55:76:09:59:12:14:ac:
         c7:94:09:cd:95:36:73:21:8d:f3:49:fd:79:08:dc:0c:63:6d:
         d9:7f:b0:e6:ff:b6:b0:b2:3d:6b:2f:a7:da:43:de:d7:c4:1b:
         1e:e1:72:7e:4f:1f:d8:5e:8c:ea:45:4f:89:01:00:2b:5e:3a:
         9d:53:fa:71:6f:e5:d6:6d:fd:c1:53:e1:8c:27:96:6c:61:d4:
         56:68:46:bb:1e:ed:a1:2d:4a:4d:65:39:a5:de:1a:1c:6b:2c:
         54:84:49:ae:e1:bc:6a:0f:ae:b2:0a:5d:13:47:8a:06:36:83:
         ef:1b:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:03:49 2026 by rpki-client