Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1c3fd989-51bc-333f-911d-75aaf834352c.roa
File:                     1c3fd989-51bc-333f-911d-75aaf834352c.roa (raw, json)
Hash identifier:          Y8ikMzQ6XC9sdfkVvEEr8aQzoS/Gd0HmhzLZBE+48K0=
Subject key identifier:   2E:9C:26:03:F9:2F:A7:2B:68:50:84:19:3C:4F:A0:7D:B0:61:A8:9B
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584F2D87C41B759D19968520B260
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1c3fd989-51bc-333f-911d-75aaf834352c.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     393885
IP address blocks:        2604:4a00:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c4:1b:75:9d:19:96:85:20:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=7a57f063-11da-482a-b36a-eb0951b0631d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:ff:b5:f8:4f:90:5a:12:ac:7a:75:94:a8:
                    d2:eb:18:d9:03:4a:86:00:a0:2e:23:3c:17:2c:0d:
                    e0:1e:15:fc:ac:0b:ef:d2:8f:08:a3:dc:6c:30:ad:
                    d4:14:2b:59:76:b6:83:94:a6:88:06:da:a9:ec:5f:
                    8b:ef:d2:bf:6a:56:75:81:d1:3b:5b:f6:20:9f:e9:
                    64:76:c2:97:a2:74:cd:ff:12:0b:47:81:86:dc:c1:
                    b8:f8:45:bd:62:7c:e2:da:0a:0d:a5:80:ee:c0:3a:
                    ed:9f:b7:a3:9b:e5:a2:b1:c5:8a:d6:90:f7:42:8c:
                    e5:f3:6c:71:d9:db:d7:f6:44:08:8b:5d:dd:93:9f:
                    d4:2e:8f:a1:ec:8a:62:dd:e2:ae:e4:cf:04:18:d4:
                    5d:a1:39:f8:75:d5:fa:8f:fd:56:e7:ef:02:72:2e:
                    e2:0b:33:57:cc:68:30:7d:97:3d:61:b4:29:8d:c0:
                    9c:4b:0f:05:90:0d:3a:be:be:40:79:93:d2:05:cd:
                    44:c1:cf:d3:18:81:a2:e6:0a:ec:2d:b5:96:2e:d8:
                    c4:a5:26:94:7d:09:36:ef:14:a9:22:2d:f1:71:09:
                    29:3d:88:a8:94:9e:e4:a3:ee:8c:7b:0c:fc:9a:67:
                    39:07:7a:0a:2c:cd:1c:70:63:5d:c5:d0:31:38:2f:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9C:26:03:F9:2F:A7:2B:68:50:84:19:3C:4F:A0:7D:B0:61:A8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1c3fd989-51bc-333f-911d-75aaf834352c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:90:37:66:6c:e0:e1:dd:11:b9:8e:3b:b8:bf:a6:a9:bc:
         93:04:38:08:14:f1:62:4e:52:f5:d3:16:47:da:40:fc:6f:bd:
         8d:d1:11:9c:bc:b2:33:40:87:64:6b:85:10:5a:b1:42:7f:36:
         06:a3:16:a1:33:2b:62:59:63:e4:30:4a:e2:c5:96:72:86:8f:
         67:31:78:5c:2c:67:08:69:a7:b7:05:57:71:06:7f:c1:ed:5d:
         bf:85:27:f9:5d:dd:95:c8:a6:a7:b4:46:af:72:d8:eb:ed:17:
         b8:04:ff:41:24:2d:77:87:c0:62:18:ce:ee:25:53:94:ef:ee:
         e5:67:d1:15:03:9c:30:67:00:da:74:c5:cb:64:b3:3d:ad:20:
         ea:75:c1:33:88:7b:f9:6c:a0:19:39:02:b7:bd:36:5a:bb:cf:
         48:91:75:33:19:01:4d:17:30:05:a4:15:d3:08:ab:a0:4f:62:
         12:70:73:b1:7b:20:4a:10:3b:e5:d4:23:50:8c:e6:99:a0:0d:
         be:96:8d:ef:df:a6:1f:2b:51:52:0d:84:01:51:cc:fb:07:cc:
         25:02:6d:45:b3:71:bf:e1:78:a2:b9:01:c8:45:cf:d6:31:f8:
         65:6f:09:f1:e7:a8:4a:1d:be:e3:e0:71:29:53:fa:f5:99:d3:
         cf:1f:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:11:25 2026 by rpki-client