Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa
File:                     1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa (raw, json)
Hash identifier:          +CpH7u0+vT4fdODj9YJnKNeWGLqkRH1tFhHrCDdkoIQ=
Subject key identifier:   77:47:AD:0C:69:D4:1F:42:2C:6E:DA:96:E3:0F:25:52:33:08:DD:FB
Certificate issuer:       /CN=b8726973-ff15-4a26-89ff-62843d7ac580
Certificate serial:       010D0C9F4328584F20F7BF1FB621143D9A23BF00
Authority key identifier: 01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     36048
IP address blocks:        2605:bfc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bf:1f:b6:21:14:3d:9a:23:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8726973-ff15-4a26-89ff-62843d7ac580
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=9df72c69-a4f9-4526-9dd1-7e7d496b35a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:97:bb:31:7f:30:ed:14:1d:d5:be:2a:01:
                    4e:33:a3:1d:b3:5a:3f:08:24:e4:54:c4:1f:84:0a:
                    60:bf:bc:91:66:e8:c8:41:77:15:b1:21:0b:73:45:
                    57:f5:93:6b:a0:76:77:73:d9:50:72:93:8f:fb:6c:
                    bc:1b:46:38:f5:dc:9e:75:98:4a:cc:bb:08:f8:7d:
                    0c:e5:d8:13:aa:7f:05:2a:c5:10:9c:1d:72:4a:94:
                    78:ce:f8:4d:d3:38:51:46:b6:49:3b:b9:49:84:8c:
                    ae:22:fd:33:9a:40:f5:21:6e:30:e3:e2:e7:de:3f:
                    0f:09:68:fe:f1:a0:50:ac:ef:c1:d0:e4:2c:4f:15:
                    aa:1f:62:68:8a:79:df:58:97:f4:cc:4f:d9:c9:fd:
                    94:0d:0e:2c:18:0e:4f:cd:35:11:f0:79:ae:c1:4e:
                    63:04:52:6c:5e:cb:5b:78:c8:94:5e:4c:66:6c:b7:
                    4e:9d:90:c9:b4:28:0b:f3:7f:0a:cc:7a:07:34:35:
                    11:19:87:ed:29:b2:f7:07:0f:4f:af:95:c4:6e:f9:
                    7f:d3:ee:97:48:85:e7:c2:3e:f0:51:e1:d2:68:df:
                    90:ec:0f:2b:ae:41:8f:75:13:3d:85:ab:fa:17:25:
                    79:97:e4:7f:9f:ad:39:b7:11:10:df:17:57:2d:ac:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:AD:0C:69:D4:1F:42:2C:6E:DA:96:E3:0F:25:52:33:08:DD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.crl

            X509v3 Authority Key Identifier:
                keyid:01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bfc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:b7:90:cc:a4:88:c7:c3:b0:a3:a8:08:7a:e2:6f:c2:dc:
         ff:ea:3b:9e:3f:83:28:02:a8:fa:72:2f:bf:a3:91:c1:9b:68:
         a5:97:1c:b3:db:65:ae:59:78:00:27:4f:fb:18:2f:df:14:4c:
         69:b0:48:c3:85:ae:46:9f:b6:d6:23:6a:7a:6f:46:a3:48:55:
         49:3c:d9:a6:1d:a3:ef:d4:69:e7:55:bf:77:d1:92:6c:26:8c:
         c4:da:59:63:2f:3a:95:54:76:74:d0:f0:27:be:37:d8:89:77:
         f0:b6:b4:bd:b1:02:37:6c:ea:5b:7e:f7:5f:da:97:20:0f:63:
         2f:cc:68:7b:84:9b:fa:c3:34:b8:e4:70:16:63:b0:ab:41:0b:
         eb:2a:76:1d:16:45:81:12:19:dd:99:d1:4f:d3:ef:a6:43:b7:
         f1:2a:1f:1f:69:46:c5:ed:b2:81:11:bf:dd:a3:47:9b:61:0f:
         df:6e:5c:be:93:b2:3e:cf:ac:71:20:09:d1:a0:e1:6c:63:2e:
         ad:7d:5c:f6:5a:27:8e:c2:ae:d5:e7:cc:6d:ed:58:8c:98:39:
         d4:b1:08:e6:52:7b:91:40:05:2f:ba:7f:da:03:a9:64:4e:66:
         84:cc:ca:3e:85:0c:62:0c:98:92:b5:16:79:d1:28:74:2b:98:
         28:f9:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:20 2026 by rpki-client