Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa
File:                     a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa (raw, json)
Hash identifier:          2MUrJ/7LWudBTWqNgCPIBStFy3JMvzUVgCKMnNOrPaw=
Subject key identifier:   33:74:99:1A:74:28:98:87:61:67:1E:B3:D9:69:EC:D0:CF:66:ED:A5
Certificate issuer:       /CN=39812a66-44de-45e0-a65d-fd3a7673a954
Certificate serial:       010D0C9F4328584F3A17D980866E1A1B4399CBC0
Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     401574
IP address blocks:        2607:39c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d9:80:86:6e:1a:1b:43:99:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=0216fcba-133e-4af3-bcdc-26c089419197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c7:3e:fe:5d:2f:d9:fe:77:a4:c2:7e:53:05:
                    ea:54:48:ee:28:71:93:9b:e0:9a:53:90:50:a8:a1:
                    65:8b:c9:44:ad:69:93:d4:6b:28:35:76:88:88:ef:
                    51:24:1d:f1:b9:d3:7e:91:7d:df:d4:48:1d:f1:96:
                    c4:45:8c:c5:32:4b:fb:72:41:c4:1b:90:08:03:9f:
                    81:89:54:36:c7:77:d1:93:fb:c8:86:ef:1b:3f:4c:
                    80:b1:19:b0:90:73:b1:3d:e5:b2:0f:ea:ea:bb:3a:
                    0a:b2:5f:73:3d:2e:bc:69:b5:ab:87:6f:5b:90:e2:
                    c9:9c:2a:d6:0b:eb:95:e3:71:18:16:14:45:9a:3a:
                    25:6b:65:ac:2e:47:67:0e:45:e4:09:99:11:fe:1a:
                    63:42:51:6c:1c:f2:59:00:7b:ff:a5:95:dc:df:f8:
                    23:df:fd:b2:2e:25:35:08:77:ee:23:cc:6e:5f:0d:
                    7f:9a:ce:7d:ad:8b:10:bb:ae:cc:a0:b5:fd:4f:25:
                    2c:a1:fc:6f:da:29:94:e1:7f:f4:21:12:6f:45:6c:
                    5c:fd:c7:fb:7a:60:69:0d:0b:44:1f:ec:2c:9a:0d:
                    1e:7a:e5:37:b3:bb:70:d2:e5:03:ef:08:81:a2:69:
                    c7:51:3a:e4:60:0b:f0:0d:76:b0:8f:6e:65:a3:f8:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:99:1A:74:28:98:87:61:67:1E:B3:D9:69:EC:D0:CF:66:ED:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl

            X509v3 Authority Key Identifier:
                keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:39c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:8f:05:9e:f3:56:79:f9:d8:7e:69:c6:a0:45:bc:0d:65:
         d1:70:2d:ec:bf:dc:03:c8:28:76:33:79:d2:e8:70:0a:62:b0:
         fb:fa:a8:6a:9d:f4:00:95:6b:64:40:60:b8:a2:c0:eb:9e:b1:
         2f:a3:11:5e:58:86:cb:f1:cc:87:dd:28:8c:fc:1f:65:d1:af:
         ce:85:d6:63:02:5d:56:45:8f:66:4d:6b:05:e6:07:a4:48:54:
         69:76:f2:98:14:cf:6b:0f:7d:f1:19:c4:d2:80:a8:00:e6:59:
         94:2a:9d:cc:72:2f:11:3a:48:c3:18:65:23:97:95:32:5e:4f:
         c2:b8:22:90:de:04:ab:3f:54:ab:4d:ec:17:67:89:c9:cd:44:
         51:cb:20:40:80:21:1e:ee:ab:0f:4a:18:81:a2:ef:f6:54:7c:
         69:8a:1e:d9:0f:c8:74:57:0e:ff:ec:47:8f:d6:cd:69:1c:f9:
         0d:1c:a9:79:e8:86:0f:7f:c9:9a:69:8f:3a:5e:13:ac:8c:6d:
         c2:40:d4:b5:09:01:25:0c:e6:a1:40:5b:bb:75:7a:a4:53:af:
         42:54:0b:ad:bd:c9:11:ec:e9:6a:af:cd:50:31:3a:46:92:7e:
         b5:77:b3:03:95:fa:0a:34:c0:21:03:73:09:dc:1d:13:47:f2:
         ae:e0:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:18:46 2026 by rpki-client