Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
File:                     3c215373-ba4c-387d-b2fe-0739ac64f909.roa (raw, json)
Hash identifier:          nWfH4A+Su1uD9zuREKfHEcsPZtdA5nc9n7cBUcrNeTE=
Subject key identifier:   40:9F:4F:B0:23:7B:CE:B2:E3:02:73:E5:D7:D5:97:ED:00:7D:B3:66
Certificate issuer:       /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Certificate serial:       010D0C9F4328584F2957C291D2A02C26DEE8E340
Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     53823
IP address blocks:        2606:48c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c2:91:d2:a0:2c:26:de:e8:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=9091953c-f8a7-4a8f-816e-edfca3b2a277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:47:ef:9b:9a:2e:22:dd:62:52:04:cf:76:
                    ef:1a:43:71:c3:5f:20:32:a3:32:23:ea:2c:e5:5b:
                    d8:f6:3b:f8:af:d7:d3:a5:82:6a:ba:e0:7b:2f:ad:
                    4b:a9:4f:96:8d:8a:76:03:ef:b2:ce:6d:95:fd:e0:
                    ba:f8:41:d8:d6:4f:5f:cb:d0:21:4d:ae:d5:7d:71:
                    7d:19:59:8a:14:a5:d7:2e:d5:c4:59:a4:a4:71:b9:
                    de:ef:77:9e:07:41:cf:34:e8:de:27:28:76:bc:02:
                    a9:96:e4:d6:76:d5:a8:f2:ac:e0:fd:ef:33:61:a4:
                    95:49:83:49:da:48:4a:47:94:ed:69:07:c6:9c:ff:
                    d4:ee:ed:94:0c:8f:09:8d:40:7d:95:7d:27:12:ea:
                    37:a1:64:1d:94:44:10:27:54:e0:aa:c3:b1:4f:df:
                    d4:f9:08:b5:5e:bd:38:f2:3e:90:33:71:fd:34:20:
                    fe:b6:d0:fd:4b:37:35:bb:b1:ef:bf:26:c4:ae:1b:
                    c6:61:42:a9:43:f0:f7:d3:4b:fe:a6:8f:ea:90:1e:
                    1a:0f:c8:91:8c:33:90:b2:1f:6b:83:21:a0:ac:e8:
                    f2:7f:36:f1:05:6d:83:0c:ce:c6:6f:71:1c:00:41:
                    3c:cf:f8:26:7c:19:16:ce:ce:3f:69:3c:ec:2e:5b:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9F:4F:B0:23:7B:CE:B2:E3:02:73:E5:D7:D5:97:ED:00:7D:B3:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl

            X509v3 Authority Key Identifier:
                keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:48c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:c3:c9:9c:bb:fb:e2:c1:2a:8a:6c:ce:c4:6e:b6:54:8d:
         ba:c4:18:e4:a6:b4:b2:98:eb:ee:b9:24:fe:a6:94:71:fb:98:
         84:d8:bf:77:6a:9c:a9:c4:c8:b5:69:c9:28:e7:ad:55:ea:40:
         78:cc:df:c3:fd:16:bf:b7:c9:3a:5c:78:6e:00:7b:91:1d:e1:
         b5:c2:97:48:d2:d3:4b:e7:ef:0c:42:33:07:72:d9:d5:84:b3:
         6b:b4:e8:b1:70:18:6c:ef:22:67:8e:59:28:61:d7:fa:68:a4:
         b7:f3:6f:ac:74:dd:1e:e9:55:f0:a4:0c:45:a8:fd:fa:27:c7:
         22:73:5d:03:2e:25:52:f9:3a:63:ed:1b:37:6e:da:f0:67:11:
         6a:d8:6f:f4:a9:b5:25:41:12:e6:f1:7e:9c:5a:8e:5d:19:1f:
         42:e8:53:97:d6:f8:d1:d4:8f:a1:3c:05:46:83:37:cb:ab:33:
         71:15:24:da:0d:ac:43:8d:db:d6:24:2c:03:f9:f6:c7:67:29:
         b8:c4:72:9d:bd:f1:0e:96:9e:ec:29:fa:90:e1:ba:65:71:c8:
         72:bc:0f:a5:6c:16:06:8b:ad:ee:29:91:d2:9a:25:f5:44:a9:
         5a:ea:24:b4:ac:b5:3a:cc:ab:bc:9c:28:f2:8f:e9:e8:0c:ec:
         e9:f5:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:40:23 2026 by rpki-client