Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa
File:                     fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa (raw, json)
Hash identifier:          SzD+LEMHmlNWzI+/hLY7cXufC7KOdjcYj3mvkpAb9tk=
Subject key identifier:   0F:D2:6E:F3:5A:31:B1:C3:C8:4F:47:FE:35:1D:1F:98:BB:3A:90:26
Certificate issuer:       /CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
Certificate serial:       010D0C9F4328584F30525E4A214D50530ED3AE00
Authority key identifier: 83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     15304
IP address blocks:        2620:aa:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:5e:4a:21:4d:50:53:0e:d3:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d295ea86-0494-4e74-88f5-331b8cd3aedf
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=f045147a-ac99-4f6f-9d0e-7199459550e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:43:46:ca:e1:a8:9e:d8:a4:a2:f2:b2:39:
                    9c:16:8b:82:62:c0:cc:95:c9:7e:fd:56:c4:65:ca:
                    68:78:b6:ad:e0:e9:ed:aa:e9:c4:75:35:ad:e9:bc:
                    56:ec:98:ab:2c:8e:f9:d5:90:33:5c:ef:5d:68:b8:
                    be:dc:50:42:91:44:3d:a7:70:72:85:01:27:0f:7a:
                    2a:37:23:ca:b4:dc:1b:e9:67:1a:97:06:7b:aa:ff:
                    c7:7d:58:29:2a:9f:3c:8f:7f:e9:8f:a6:42:53:ac:
                    bb:b1:4b:10:d7:02:cf:10:c4:b3:37:95:97:0b:71:
                    2d:e1:12:91:25:de:98:1a:78:08:4a:b2:db:19:ea:
                    bb:9d:0a:df:7d:0c:3f:04:9c:23:8b:01:e9:36:15:
                    60:02:1d:4c:29:9f:ef:35:23:e2:b2:4a:f0:d4:b4:
                    4c:c4:06:91:d7:f9:08:60:3a:8d:cc:06:15:77:c9:
                    ef:dc:8d:b0:7b:8e:0b:40:c2:04:5a:0f:96:aa:58:
                    37:1d:f9:53:77:77:a8:2c:05:f8:de:4f:4b:cb:7b:
                    8e:df:c4:88:28:a1:71:cb:6c:a8:e2:58:16:7d:f8:
                    35:0b:5b:fa:eb:8e:94:9f:c2:6b:5b:84:00:80:a0:
                    57:6d:9a:2e:09:e7:76:c6:80:7d:3c:ca:33:ac:6e:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:6E:F3:5A:31:B1:C3:C8:4F:47:FE:35:1D:1F:98:BB:3A:90:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/fdf255a8-a262-3f43-8b31-c291f0b34ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf/d295ea86-0494-4e74-88f5-331b8cd3aedf.crl

            X509v3 Authority Key Identifier:
                keyid:83:74:CA:8C:E7:6B:AB:C7:73:BD:A1:E6:0A:E3:D6:B2:3D:0E:8B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d295ea86-0494-4e74-88f5-331b8cd3aedf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:aa:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:91:54:3b:2b:68:ee:ac:7d:a5:bb:62:eb:22:dc:a7:83:eb:
         a7:a3:ea:42:d7:44:3e:ea:7c:8d:d2:1a:1d:05:4e:cb:83:bc:
         79:d6:eb:d9:3d:1d:03:4f:5f:a7:8e:7b:67:5b:a0:2a:49:d9:
         cb:a0:8d:e3:11:f7:ec:ce:cb:b0:2a:ac:a1:03:0d:5c:74:d8:
         b3:7f:e9:8f:a0:f7:f8:4b:87:f2:ad:20:c2:95:02:ab:1e:58:
         ff:7e:41:e7:2f:c5:eb:bd:94:b1:0e:61:b4:cf:ca:91:d3:ea:
         1c:a2:3c:f5:23:bd:37:14:8b:45:fa:2c:b7:8f:00:04:87:49:
         58:e5:89:62:ed:07:24:09:bd:45:df:31:9f:a4:1b:39:9e:c4:
         bf:42:f6:82:1f:2d:e2:17:03:7b:a4:8f:8c:12:75:ac:4e:e7:
         d5:a0:dc:58:8e:f4:87:a6:ab:f3:1a:d0:9a:75:4b:0d:45:c2:
         20:c9:2d:99:f9:e1:c6:b4:ed:af:9c:87:fc:7b:92:13:53:02:
         00:a6:62:2b:55:0e:da:42:c4:06:e4:b2:fa:3f:3d:f4:93:b0:
         a8:ff:58:43:09:43:6d:2c:35:e9:0d:ac:28:f7:bb:45:ca:fd:
         e8:eb:3d:9f:1a:09:27:7a:de:57:cb:7e:56:ff:c8:9b:ab:3b:
         3c:a1:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:38:11 2026 by rpki-client