Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/d82f34b6-2677-3517-bf77-6f7aa773ad1c.roa
File:                     d82f34b6-2677-3517-bf77-6f7aa773ad1c.roa (raw, json)
Hash identifier:          K8aMIxx+nmT1vrtCBP5ANVzCWpMhuduhBvZxqTJrMi0=
Subject key identifier:   B6:6B:2A:87:9F:5A:34:BD:DC:F7:C6:55:EB:32:02:13:AC:6D:8A:83
Certificate issuer:       /CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0
Certificate serial:       010D0C9F4328584F31B7CFCD068E9B5B11908740
Authority key identifier: F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/d82f34b6-2677-3517-bf77-6f7aa773ad1c.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     398816
IP address blocks:        2606:dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:cf:cd:06:8e:9b:5b:11:90:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=8edd499d-0368-4dcc-bc36-70818b1f3331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:5b:29:80:f9:83:3f:b2:69:90:b2:1f:74:
                    27:52:e5:9f:e6:93:d8:b3:b2:73:9b:d5:5b:eb:09:
                    24:81:6c:f3:09:49:11:6f:5f:4e:0d:ea:fa:17:91:
                    61:49:ab:aa:c5:ab:4d:c8:73:ee:a0:f5:44:90:3b:
                    71:f3:21:80:a3:76:41:87:85:a8:5c:68:0d:76:d7:
                    80:69:6b:96:ed:c8:c6:cd:5f:bb:a6:a3:04:19:29:
                    02:08:67:7f:b3:d8:f0:f6:f4:a5:66:4b:be:80:ee:
                    ae:6e:0d:aa:26:7f:b1:ad:a0:b8:dc:8e:73:ba:12:
                    c8:64:3e:10:b9:f1:fa:7f:c8:3f:dd:46:51:14:fe:
                    a1:c7:9e:c9:68:ef:52:57:ef:31:df:76:7a:b7:c1:
                    7c:6e:49:ee:30:c8:27:8a:81:dd:b7:e7:36:c2:18:
                    12:74:0b:cd:1b:54:4a:f8:ff:4f:e2:c3:64:0c:48:
                    a3:1a:d3:1b:32:35:07:02:35:cb:43:a6:87:6f:0d:
                    2d:6b:e4:8b:2c:23:3a:46:41:6c:51:05:2a:72:90:
                    7c:e1:ad:4f:60:61:f9:1f:97:61:94:2f:97:19:7d:
                    a2:05:ab:96:19:f2:db:5c:7a:01:db:d1:f4:93:78:
                    60:a9:f2:9b:1e:60:b7:90:78:79:b5:45:0e:80:49:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6B:2A:87:9F:5A:34:BD:DC:F7:C6:55:EB:32:02:13:AC:6D:8A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/d82f34b6-2677-3517-bf77-6f7aa773ad1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:99:6e:b3:61:b8:b0:40:78:04:83:00:40:c7:55:ca:cd:cf:
         ee:f3:94:91:dc:36:b3:87:ee:7c:de:59:8e:b8:0a:44:a6:e0:
         5e:bf:93:18:00:c0:54:0b:6d:02:03:cb:dd:21:24:d6:30:fa:
         a7:7b:b5:f3:79:f3:b2:52:da:b1:0b:32:04:3e:80:51:c5:2e:
         60:a1:99:4b:d5:b1:3f:49:de:84:6f:a2:4c:5f:5e:2e:3a:ef:
         b8:58:81:ab:b4:d7:57:0d:b6:d0:c3:36:92:4c:48:8e:14:52:
         0f:1c:c4:35:8c:72:84:25:2f:0c:62:1a:fe:94:aa:5c:5e:44:
         06:fb:67:b2:6d:d8:27:86:30:d8:98:b7:10:f2:56:a1:43:50:
         41:5a:1d:df:d7:cc:23:e8:d6:57:ce:4c:1d:69:24:9d:6e:79:
         32:04:26:e0:d7:1f:49:de:61:ea:82:8c:b4:21:93:b5:4c:86:
         ff:cb:9c:d1:44:c4:67:2c:65:c9:cd:41:ff:be:12:fa:40:65:
         6c:20:7b:ab:d0:17:84:49:6e:70:cf:63:5b:a5:35:1f:bd:39:
         8a:67:87:27:50:33:8a:41:42:c0:6d:39:5f:d1:2b:1d:9c:f2:
         b2:67:ec:a7:d3:c6:c5:8d:1a:fd:e1:be:ba:80:52:38:88:4f:
         c6:22:a0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:04:07 2026 by rpki-client