Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
File:                     ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa (raw, json)
Hash identifier:          bIPZuGUQkpO3cDLPiPVe8UodEZsPATFM+KBrYfcZZmw=
Subject key identifier:   BF:1C:12:17:16:8F:14:5F:DF:AE:94:76:53:C6:40:89:62:75:42:BE
Certificate issuer:       /CN=00c081d9-ab0e-4270-b0f1-227e8a595105
Certificate serial:       010D0C9F4328584EF8247D9DCE5FB69E5EBA56B8
Authority key identifier: EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
Signing time:             Wed 26 Aug 2026 22:02:30 +0000
ROA not before:           Wed 26 Aug 2026 22:02:30 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     401315
IP address blocks:        2620:cd:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:24:7d:9d:ce:5f:b6:9e:5e:ba:56:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c081d9-ab0e-4270-b0f1-227e8a595105
        Validity
            Not Before: Aug 26 22:02:30 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=0d20ce94-2a3b-4772-85a3-14443bbc4f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f6:04:82:23:e2:65:43:25:7e:7e:57:a0:bf:
                    0a:11:aa:26:27:5d:c8:ba:64:5a:54:52:b8:49:96:
                    5d:a3:d9:85:18:02:6a:6e:cb:b5:95:33:3e:cd:a4:
                    f6:1d:43:d2:86:7c:8e:28:1f:3e:6b:bc:ab:73:58:
                    3f:86:a3:40:15:1e:89:16:de:76:6a:b4:25:ab:20:
                    08:00:89:b2:0e:e2:9b:8d:8f:f4:a3:b0:67:e5:90:
                    5d:05:eb:c6:f2:06:d5:85:75:9f:8d:b8:d1:5e:d2:
                    9d:80:09:e8:e4:1b:17:36:ec:54:0a:1b:f7:eb:8b:
                    82:dc:42:f2:3f:2d:6b:67:85:29:a9:db:f1:83:ee:
                    9c:f1:ed:f4:9d:38:33:12:6c:e8:03:73:5f:9e:ba:
                    3a:fa:37:b8:8c:1f:5f:50:38:9b:b7:16:09:23:49:
                    3f:78:bc:23:59:03:8f:4b:11:18:cc:77:d5:c0:51:
                    d3:42:23:44:f6:95:1f:cb:28:82:ba:61:91:04:ac:
                    33:52:86:5c:b4:30:b3:70:d2:77:64:f1:b7:b2:50:
                    e4:69:98:8c:93:dc:6c:c6:61:1d:19:ac:82:d8:42:
                    b9:e1:57:36:e2:5f:37:77:18:bf:1c:91:23:23:5c:
                    b4:88:8f:da:f3:b5:8d:08:78:bc:c7:be:3e:1b:9b:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1C:12:17:16:8F:14:5F:DF:AE:94:76:53:C6:40:89:62:75:42:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl

            X509v3 Authority Key Identifier:
                keyid:EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cd:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:50:94:28:31:e9:64:ab:f4:83:42:fd:bf:f5:79:c3:a9:df:
         bc:dc:c0:6b:9c:bd:fd:7f:60:96:5f:6f:f1:cb:cd:ae:9e:9c:
         fc:9c:a8:43:d7:5b:1c:67:5d:83:42:35:58:2b:f8:5e:b9:29:
         d6:8f:77:ba:9c:a5:9f:c5:41:5f:df:5c:84:be:8a:bc:6b:70:
         93:c4:ae:63:47:d6:b0:b8:81:8d:a7:d3:6e:05:96:c7:04:89:
         5e:85:ff:a0:62:aa:40:88:7a:80:a7:0b:3e:99:ba:b9:4d:98:
         79:70:b2:80:d1:1f:04:e3:8b:ea:73:28:4d:fe:5a:a3:6b:76:
         38:ec:4b:5f:2f:02:53:d4:bf:5a:1a:e0:cd:7b:ef:32:1c:fa:
         62:63:61:1e:21:b5:5a:6e:3b:32:b1:75:36:46:55:ff:95:86:
         3d:fa:2c:54:44:95:0c:61:72:2f:00:0e:cb:e7:69:d9:9d:11:
         4d:64:7f:87:d9:3d:fe:d1:83:90:4d:0f:d1:38:d0:20:b3:ac:
         be:62:1e:74:11:26:21:60:b6:77:7b:7c:ea:5a:81:53:4a:e7:
         9c:ef:99:c5:d3:49:b7:a0:d3:52:be:10:3f:78:57:d9:21:a8:
         4a:4f:87:78:4e:80:c7:74:b8:75:d5:98:6f:97:46:63:78:b0:
         f1:31:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:43:40 2026 by rpki-client