Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fde72308-bbb5-3336-8367-f5082aef8964.roa
File:                     fde72308-bbb5-3336-8367-f5082aef8964.roa (raw, json)
Hash identifier:          oHQlFrUzs1DZEnw3STREhizefgTwDLIkNerbCOMnDts=
Subject key identifier:   C4:3B:B4:ED:58:3B:19:37:D2:A9:3F:35:9B:C7:B1:F8:0F:A9:77:56
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584F498A4168DBC73F41DF22EEC0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fde72308-bbb5-3336-8367-f5082aef8964.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19165
IP address blocks:        2604:5500:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:41:68:db:c7:3f:41:df:22:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=376d31bc-9c64-4341-a68a-88e44f77dc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:6a:29:69:07:c3:ed:68:d0:a5:92:4a:b4:
                    db:75:fe:98:bf:40:ca:4d:30:1b:ea:5a:eb:f2:39:
                    85:8a:29:69:98:4a:c6:98:62:f5:2f:ff:18:b1:fd:
                    78:11:11:07:50:c2:57:b5:90:c4:8d:d3:84:e5:99:
                    d3:41:8c:fb:96:29:04:93:dc:7f:3e:c2:83:9f:8d:
                    8d:5a:6b:c3:b2:92:9c:70:b5:ce:18:9b:e5:32:e1:
                    bd:73:b4:68:7f:78:92:27:32:a0:0c:ca:03:12:34:
                    f3:13:11:91:62:9c:d4:4a:61:1a:d9:bb:21:b0:38:
                    a2:e8:a1:e6:e3:77:a4:af:c0:3b:67:02:ef:84:59:
                    3f:c8:79:a8:f5:ed:d1:32:3b:df:e2:65:7f:70:3f:
                    c1:ae:f5:eb:3a:36:7f:dd:26:af:2e:b8:fb:80:34:
                    d2:a2:dd:22:72:23:50:36:57:74:bc:f8:1d:0f:f6:
                    b5:02:e8:f3:67:32:ed:53:c8:bb:66:7d:80:db:90:
                    9e:40:6d:80:c8:60:c3:4a:07:05:1d:8c:1b:1c:da:
                    d4:07:12:b1:c6:a7:02:16:c8:b5:3e:2f:b0:94:f7:
                    34:60:16:ea:fa:7e:52:75:08:40:7a:2d:e5:a9:a0:
                    62:1f:e6:03:44:a9:95:27:29:43:5f:13:21:e3:62:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:B4:ED:58:3B:19:37:D2:A9:3F:35:9B:C7:B1:F8:0F:A9:77:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fde72308-bbb5-3336-8367-f5082aef8964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:bd:f0:51:b7:d1:cf:28:e9:da:9a:40:96:4f:e4:c3:5d:
         1b:b4:5b:2c:db:d2:98:dd:be:19:d0:a9:75:bf:41:fd:ee:86:
         cc:a4:ea:1a:46:b8:61:62:d3:be:bb:25:2a:2f:76:ba:18:f2:
         28:a7:3e:09:f9:d1:51:1c:4f:d6:56:d9:73:69:88:2e:42:06:
         ac:d8:a8:cb:c3:8d:7b:f4:b1:6d:58:69:7c:e0:e9:a2:55:28:
         d7:99:59:96:fa:7e:13:63:42:8e:78:07:44:39:52:09:5b:74:
         24:63:cd:72:c6:b9:cf:02:21:12:15:7f:3e:a7:c0:51:24:c2:
         8e:8d:e6:bb:4b:46:5e:d7:43:e2:5c:5b:99:b2:1c:61:41:d4:
         e9:db:8b:81:cb:6e:94:ca:27:7e:12:1e:fb:eb:f9:6c:8c:1f:
         ec:21:41:d1:b8:ff:89:0b:86:d0:7c:93:6e:75:ec:08:11:ea:
         ef:3d:39:73:d1:7a:f9:26:3b:a5:df:77:17:65:c9:73:fd:84:
         41:ed:3b:84:72:97:02:c9:e6:2d:3b:fb:9e:11:2d:c0:1e:76:
         f2:a1:15:7a:50:e5:19:b0:57:70:83:8f:86:cc:9e:c0:b2:ad:
         99:f3:54:bb:79:a8:b3:cb:80:77:4e:bd:1f:78:48:c3:c7:78:
         01:5a:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:29:30 2026 by rpki-client