Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/72f1ec60-6016-3f6b-aa54-86c82fdbad3d.roa
File:                     72f1ec60-6016-3f6b-aa54-86c82fdbad3d.roa (raw, json)
Hash identifier:          jmepWyrlvVnrd0t/N+Gra0KuJG152rZfgXfQZhz+JuM=
Subject key identifier:   D9:FF:E0:79:E5:45:C7:1B:6B:70:79:6A:CE:D8:EC:39:36:C7:DF:5E
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584F331D2A2D848BCC571A380E00
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/72f1ec60-6016-3f6b-aa54-86c82fdbad3d.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     396422
IP address blocks:        2607:c4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2a:2d:84:8b:cc:57:1a:38:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=d3884cda-9ebd-47dd-afea-0cddd1c66884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:a2:ac:c0:af:2d:c5:d5:50:d5:8d:76:5a:
                    56:e9:4e:76:b6:a2:ac:55:0a:6c:c2:68:88:62:f9:
                    e4:19:90:ca:20:98:7c:dc:ff:ee:12:c9:08:77:25:
                    5f:2e:6e:81:7b:1d:c8:77:b4:f8:91:00:1a:5b:39:
                    41:c6:e1:a5:a8:07:ad:d4:4e:01:91:f6:10:61:6e:
                    f5:f7:85:be:d5:fa:82:59:a3:b9:e5:cd:ef:ab:79:
                    36:5f:77:8b:c0:e7:8c:bc:f6:e5:f1:15:4b:ac:d2:
                    5e:63:f7:63:e8:57:d8:12:25:3e:70:6a:59:f8:ed:
                    d8:63:65:de:70:db:8b:27:25:96:a6:31:5e:b1:2c:
                    76:08:aa:79:d0:c4:10:53:ae:ad:ea:43:a1:52:40:
                    18:aa:c2:8c:6e:cb:2b:45:01:f7:8f:59:83:9c:90:
                    2a:0e:9b:3d:3d:ea:e5:96:f0:c2:1c:cf:06:05:99:
                    d9:b4:4a:c8:32:eb:db:6a:f1:bd:62:10:d7:f4:d5:
                    6b:53:58:45:4b:52:c2:e7:71:1f:6b:f6:ca:b9:8d:
                    e6:4f:b9:33:28:e9:26:9b:88:4f:7a:6c:fc:3c:01:
                    ee:b7:52:85:81:7b:59:9f:2c:6c:6e:36:c7:a0:be:
                    07:c8:cc:be:bd:53:a1:1b:07:38:1f:ba:d2:10:cd:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FF:E0:79:E5:45:C7:1B:6B:70:79:6A:CE:D8:EC:39:36:C7:DF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/72f1ec60-6016-3f6b-aa54-86c82fdbad3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:54:d2:96:15:94:da:de:a8:2a:45:52:a3:ff:56:70:01:
         63:6c:0a:a5:2c:36:7a:b4:b4:f3:d3:54:3f:56:f8:9b:a3:a3:
         77:20:42:8f:44:76:e7:a6:1c:86:9b:4d:04:65:d7:26:23:1d:
         c4:0e:dc:70:77:7b:92:8f:03:ca:15:b2:6b:08:0e:dc:9d:69:
         3a:23:0f:4b:5e:b3:94:e4:23:0d:69:7d:bf:af:85:f4:0c:c8:
         47:d8:13:96:4b:b5:d6:0f:8f:14:1d:5c:74:f1:26:d6:5a:f1:
         15:0e:12:90:4a:b2:d2:e1:a4:94:73:61:13:70:d2:65:a1:5a:
         2c:d6:7e:60:b3:85:2f:63:f3:08:c2:db:29:35:be:75:da:e6:
         51:c0:fc:56:47:cb:40:7b:1b:b4:1a:cf:e6:47:61:df:9e:45:
         b0:e5:b5:b1:02:78:ed:0b:48:9e:3c:0e:46:c8:89:c7:8c:7d:
         53:9d:f3:5c:f9:bb:e4:ea:1d:a3:d4:79:1d:13:94:08:4c:98:
         02:26:06:44:df:2d:a3:64:a2:b0:4f:80:a9:5b:2e:bd:65:9f:
         90:5d:be:f1:01:bc:9f:e7:89:90:4b:65:88:78:d8:68:5f:24:
         ea:aa:03:e0:e6:20:c5:cf:cb:ef:64:57:1a:f3:45:27:d3:d7:
         1b:69:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:05 2026 by rpki-client