Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa
File:                     1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa (raw, json)
Hash identifier:          JlJBJ21Ma1LvLvlkaFLR6U7ELe/HZOtyjzEdRelKVRA=
Subject key identifier:   AC:82:50:6A:47:DE:2F:27:57:F0:85:0F:62:C3:B3:5D:7A:87:91:FD
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584F1467A324281C9C70F35E2980
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     398813
IP address blocks:        2607:2240:5000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a3:24:28:1c:9c:70:f3:5e:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=ca3f9b9a-d732-49c6-bd6f-fd53276f13a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:9f:3d:af:11:71:d1:37:74:4e:72:81:4b:
                    13:f7:0b:f1:1f:58:0e:09:1b:a8:4b:68:7e:5f:01:
                    62:59:f7:0e:1f:58:3f:67:0d:e8:3e:63:a8:90:ad:
                    67:32:6a:12:9a:cd:20:ce:84:10:56:21:a6:53:53:
                    67:b3:0e:c2:55:b2:7f:ef:7d:5d:a0:74:c1:58:78:
                    73:91:2f:c0:26:7d:87:bd:81:2e:15:55:29:54:14:
                    57:7f:a6:ca:17:a4:7f:1c:57:4d:a3:ce:04:1d:eb:
                    57:db:91:41:a6:4b:d7:39:ae:af:28:1c:bb:71:01:
                    91:b0:e6:ad:3d:6f:90:af:9f:cf:79:6f:e9:0b:a1:
                    1e:b8:b0:44:9a:a1:94:de:42:ac:f5:4c:74:57:4f:
                    4b:1b:03:b0:e5:99:64:55:cf:e9:9f:1e:63:f2:53:
                    f8:58:56:47:e7:84:7b:c0:99:2c:45:7e:9b:42:22:
                    2e:f8:6f:5a:59:2c:57:47:30:05:f4:b3:8a:77:ce:
                    44:ae:6d:82:2c:df:a2:d9:ef:dd:25:94:20:84:ce:
                    ac:1d:99:aa:7a:55:8b:eb:b9:e7:ca:ba:9c:55:cc:
                    02:74:bd:b3:06:9f:a7:9d:c4:d7:f2:10:bd:b4:65:
                    f8:48:96:02:0b:19:da:e0:5c:25:50:55:4e:c0:6d:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:82:50:6A:47:DE:2F:27:57:F0:85:0F:62:C3:B3:5D:7A:87:91:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/1c55df3e-9d8a-3c5f-9a3a-88ab8cf00d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:25:6e:c0:fa:cf:02:1e:b1:55:d2:9f:e3:8f:bf:50:8d:ca:
         32:03:c3:1f:9a:ea:45:29:12:93:81:cd:36:b5:99:2c:f4:de:
         9d:ff:01:95:8a:70:a3:f6:9e:84:1d:d2:e7:18:f5:41:32:e0:
         40:2f:2f:26:97:cb:7c:26:8d:13:13:17:d4:41:a3:18:88:f1:
         91:6c:25:aa:26:9e:e0:73:ec:d3:11:9b:15:0b:f3:a1:34:8c:
         9f:d3:1b:60:37:d1:e8:6b:86:23:52:fd:17:f5:cb:ca:35:c9:
         f3:69:d2:ef:98:cd:b0:ba:f2:59:37:4e:98:e7:cc:fd:b3:6a:
         53:2a:68:4b:7d:6b:26:bd:19:9e:77:7c:b5:e1:6a:76:dc:16:
         68:5b:7d:d3:6c:5a:cb:e1:2a:0a:57:cc:b9:93:ab:91:32:a3:
         c1:36:95:28:d5:15:35:6e:3b:7e:e5:3d:f7:01:1e:9a:54:5c:
         eb:ea:8d:68:ec:7e:d9:62:86:a9:f4:f7:47:ce:86:87:e7:d7:
         91:96:66:85:94:24:48:c9:c7:61:bb:f1:bb:1b:a2:3b:cc:f5:
         38:9b:81:be:34:4f:99:10:1a:bc:e0:9f:e4:09:74:b5:e0:c7:
         d6:ab:dc:98:3b:bc:3e:c6:22:b7:96:ab:74:2f:85:1e:f5:11:
         68:22:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:04:56 2026 by rpki-client