Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/c9cbf123-2ffb-3a73-b614-69c7c21eb832.roa
File:                     c9cbf123-2ffb-3a73-b614-69c7c21eb832.roa (raw, json)
Hash identifier:          dTVwl+N0p2t1c0hxU58vUBmsGUQ+DXE3nBT1jc2syJE=
Subject key identifier:   32:C0:53:48:B8:EF:5A:62:AC:08:41:5C:00:03:F9:58:E6:53:31:BC
Certificate issuer:       /CN=bf16245c-ee02-43a5-8f72-89ffd5b7bc6b
Certificate serial:       010D0C9F4328584F33178067083E8FDDF5B6BC80
Authority key identifier: 73:EF:11:6B:E9:B5:45:9F:F6:3F:C4:DF:61:F8:26:D1:32:10:DB:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/c9cbf123-2ffb-3a73-b614-69c7c21eb832.roa
Signing time:             Thu 17 Sep 2026 00:49:02 +0000
ROA not before:           Thu 17 Sep 2026 00:49:02 +0000
ROA not after:            Wed 16 Dec 2026 01:49:02 +0000
asID:                     396144
IP address blocks:        2604:6340:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:17:80:67:08:3e:8f:dd:f5:b6:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf16245c-ee02-43a5-8f72-89ffd5b7bc6b
        Validity
            Not Before: Sep 17 00:49:02 2026 GMT
            Not After : Dec 16 01:49:02 2026 GMT
        Subject: CN=98d00167-8570-42e8-b605-df04ffe0f727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:06:f5:ae:57:1e:8f:4e:99:3c:88:6f:46:
                    02:5d:eb:32:6a:6d:f4:bc:0f:5e:80:a0:30:25:b3:
                    5b:25:d0:85:fa:89:85:5b:6a:ef:85:5f:33:ec:5e:
                    d9:f7:7b:24:6c:15:75:0c:f4:05:85:b1:14:66:7e:
                    a5:de:4b:80:24:56:a5:09:c2:34:ce:fb:69:f5:f4:
                    5c:1d:8c:0f:85:73:ec:a5:d7:4a:6c:84:3c:c7:e5:
                    c4:b2:cf:a4:f7:92:3a:be:78:bf:3d:92:f8:95:f0:
                    22:8f:5e:10:1d:a5:25:1b:d3:60:d5:d8:58:ca:90:
                    be:e1:2d:6e:67:e5:b9:fa:18:f3:30:9e:ec:05:79:
                    fb:4f:f6:c6:06:85:cb:95:7f:b8:42:66:a0:1e:5f:
                    82:6c:c0:7a:51:c4:86:38:55:7e:bc:36:f9:63:ae:
                    f9:dd:b3:6e:f3:52:fb:28:49:37:d7:3e:0e:a7:cb:
                    36:5f:05:cc:85:02:e4:ca:41:c4:6c:1a:65:01:81:
                    8c:52:98:3d:0e:d2:ea:34:0b:d0:77:4e:b6:12:54:
                    40:4f:c1:36:69:8d:55:0f:3e:4b:44:83:34:a0:8a:
                    9b:d5:69:a5:89:8f:0b:a7:ce:d8:c4:fd:17:9d:14:
                    be:0c:2b:ef:b9:d8:2e:41:c4:9d:d4:ee:55:cc:77:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:53:48:B8:EF:5A:62:AC:08:41:5C:00:03:F9:58:E6:53:31:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/c9cbf123-2ffb-3a73-b614-69c7c21eb832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.crl

            X509v3 Authority Key Identifier:
                keyid:73:EF:11:6B:E9:B5:45:9F:F6:3F:C4:DF:61:F8:26:D1:32:10:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6340:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:50:e6:6d:63:f2:5d:4a:87:70:f9:06:68:cf:40:39:9b:82:
         8d:87:92:a2:36:20:ec:ee:5c:6c:cd:e3:8f:20:e1:fa:24:54:
         f6:d3:5e:66:bb:e8:a9:80:f1:32:3c:17:b6:2c:f8:6c:3d:0f:
         f1:49:51:c8:85:81:e1:99:4b:10:cf:a3:08:01:e5:4b:da:bc:
         5c:9f:68:1d:7f:1f:9a:87:4b:8f:4c:8b:57:d4:de:3b:fa:27:
         41:68:eb:01:08:03:32:4f:78:5e:33:0e:ef:e2:7c:a2:38:68:
         80:4c:9c:13:cd:ca:9e:8a:f6:e4:d7:6e:dc:29:88:15:a1:89:
         0b:5d:be:ff:f3:e7:e7:ae:0d:88:d5:3d:a5:62:28:4c:91:6e:
         5e:95:e5:d2:de:8f:59:f8:5e:0f:1c:82:12:21:c0:8d:f6:e7:
         59:9e:51:ae:6c:65:bc:5b:d7:23:bc:f0:32:c9:48:bd:cc:4c:
         2e:3b:4c:46:b2:5d:9b:77:fa:c2:13:f5:ab:ae:4f:d4:52:3e:
         de:94:d9:8c:4c:e9:e4:c1:ef:5c:81:49:e2:f1:c1:47:26:25:
         d4:5c:7f:3c:65:54:23:58:b4:28:04:c3:bc:63:64:b8:02:43:
         74:ce:be:61:f7:05:50:10:d0:4b:dc:19:6f:a6:49:7a:56:45:
         04:95:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:03:57 2026 by rpki-client