Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
File:                     5f8631ab-4845-3aef-950c-39ad06146aa0.roa (raw, json)
Hash identifier:          Ljq4fmKGpW9vf4W86x35w1DXBGR7XQI71Zf0qyN0p9Q=
Subject key identifier:   9E:5E:69:6F:78:00:A7:2C:9F:FD:1B:A0:80:B0:0A:17:52:19:0D:2C
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584F1037989A02CCA88CED3BCA80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     27539
IP address blocks:        2604:a900:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:98:9a:02:cc:a8:8c:ed:3b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=0727f23d-c10e-4855-b098-db625fef8080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:be:e6:aa:8d:27:e5:3a:69:7b:16:15:cf:
                    d1:ee:29:44:1c:04:fc:15:5a:43:36:b2:6c:4c:09:
                    8b:b9:dc:8c:9f:d4:53:e7:7b:26:57:be:6d:94:f0:
                    53:e5:44:4b:da:21:2f:64:18:34:99:3c:ae:fb:79:
                    a6:e9:e9:59:e4:f3:5d:db:19:1b:47:10:29:63:05:
                    9e:43:2d:5c:9a:e1:a0:08:7e:b3:bf:a0:64:18:ee:
                    bd:f3:e1:47:96:b4:3e:65:c7:84:b8:b3:59:7a:06:
                    58:04:b3:c3:21:37:79:9d:b7:ed:fd:72:f9:ed:57:
                    54:e4:61:05:f0:65:52:cc:61:bf:f8:01:6c:c8:9b:
                    c2:d0:71:b3:ce:63:0d:bd:00:61:29:00:74:19:1c:
                    6d:e3:79:10:3b:b7:5f:73:2e:c2:9e:34:8c:32:08:
                    5a:d4:d0:c5:fd:2e:fb:ec:e3:0a:13:94:aa:5f:8a:
                    ca:08:ff:43:7e:67:31:e7:c9:90:89:0c:de:42:d6:
                    96:48:1a:07:c1:02:f4:ac:7c:f9:f5:c0:a3:d8:13:
                    2c:d2:b7:13:21:03:9b:00:53:c3:28:2f:cc:b3:d7:
                    38:e5:df:9b:e9:dc:92:34:b4:f1:cc:fb:85:b5:89:
                    2d:c5:21:af:74:44:e2:3e:6e:55:f5:84:ce:21:a9:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5E:69:6F:78:00:A7:2C:9F:FD:1B:A0:80:B0:0A:17:52:19:0D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:55:a8:c8:22:51:b6:b7:68:d7:38:d9:11:f8:8b:67:4d:
         75:41:39:e4:82:eb:2d:9e:65:d6:81:d3:09:87:42:92:66:46:
         ec:b1:b0:4e:21:e8:db:db:c7:8a:3d:d5:9e:3a:6c:88:f9:ea:
         eb:09:83:90:49:83:2e:26:e1:1a:ea:b9:da:d8:c4:ea:51:cf:
         09:ef:e3:b0:f1:1b:43:c3:33:8f:bc:8e:e3:6d:28:82:9d:2b:
         cb:1a:de:44:ae:01:5c:1c:2e:ff:67:54:a5:a3:6f:0a:a4:f0:
         b4:79:03:ff:e6:3e:06:89:8f:5d:da:31:0e:d7:f6:73:60:ea:
         ef:90:4c:a5:d2:1f:02:a1:8a:64:e5:2e:49:36:1e:29:f1:0d:
         d7:59:32:06:80:1d:9e:54:c6:f7:58:d3:d8:7c:0c:71:13:f7:
         dc:bc:c9:bd:e7:23:9c:96:85:94:42:be:fb:24:ea:92:35:91:
         fc:eb:2e:ad:50:da:af:3f:c7:a5:f4:57:ea:25:af:3b:16:3e:
         bf:fe:e8:1f:f6:75:25:c0:9c:94:d2:6a:76:86:f6:f0:c2:53:
         36:fc:a2:76:cd:2c:14:2f:14:f1:8d:a3:12:da:da:ff:b4:c4:
         ef:e6:2b:87:98:50:f3:c1:15:12:11:18:f2:be:83:06:3e:bf:
         ad:8f:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:43:28 2026 by rpki-client