Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
File:                     4e50a587-28e3-33c4-93d2-06b5fce81567.roa (raw, json)
Hash identifier:          QTwSlxBArKJUaViFeL0TZb9kEkinMfDKk6V2qGfcqYA=
Subject key identifier:   A6:5A:40:7F:ED:B3:23:4C:80:F0:C8:31:A3:03:39:54:B0:2D:FF:54
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584F45428BCF7F23A02CD35B2200
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     30041
IP address blocks:        2607:9b00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:8b:cf:7f:23:a0:2c:d3:5b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=3561b520-3f41-45a0-b781-edec11b366d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:0a:f0:1d:26:f5:d5:51:c2:22:ad:18:5d:
                    f5:74:57:8f:37:b3:1f:13:26:5a:ea:8c:38:6a:3e:
                    97:2e:c3:66:32:95:05:b3:35:b7:1d:c1:4e:60:bb:
                    21:83:4f:0f:aa:ba:f5:ce:86:3e:41:6c:7a:72:67:
                    02:7a:f5:2b:1d:3b:87:5a:03:4b:45:c1:bd:1d:ea:
                    64:c2:36:80:61:07:27:50:41:e5:8f:15:c9:08:2a:
                    b4:72:e3:75:21:45:da:80:07:13:89:c8:57:d8:89:
                    85:35:52:ad:f9:7a:fe:01:f6:50:e2:cd:58:64:cc:
                    31:39:2f:49:7e:a1:50:b6:a6:8f:03:d8:a6:41:ce:
                    57:c5:e7:fe:5c:e9:ef:d8:05:c0:74:65:7a:76:64:
                    41:6e:55:ae:22:55:31:a9:20:79:b8:b0:85:0b:38:
                    bd:46:55:06:47:c1:b3:69:12:35:6a:cb:c3:05:0d:
                    d0:44:64:60:83:09:66:f2:bd:c7:a3:a3:7a:86:7a:
                    7c:1b:b0:91:0d:cd:f0:63:fc:49:d6:f5:ed:a6:60:
                    1a:94:db:9c:e2:42:e8:44:8b:88:fc:ce:55:a2:ff:
                    99:4e:9b:85:7e:36:86:86:af:12:ab:a4:51:cc:c0:
                    34:a6:0e:fd:41:18:71:e5:d0:f2:0b:88:b6:9d:4f:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5A:40:7F:ED:B3:23:4C:80:F0:C8:31:A3:03:39:54:B0:2D:FF:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9b00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:57:31:c8:d5:6c:8c:dc:83:82:45:df:21:4e:a6:b0:14:0d:
         09:c4:bd:b8:70:73:6c:c6:01:e1:e9:60:4e:99:12:f8:d6:92:
         d6:c0:c5:5a:37:78:a0:91:c1:70:b3:45:6e:54:3b:96:b3:fa:
         16:bf:a6:f3:b2:4a:16:eb:06:98:42:7a:38:71:9b:b3:b6:90:
         68:a5:9e:36:1a:9b:f9:6b:be:0f:fa:63:e0:df:2f:19:15:af:
         41:7e:4d:ad:9e:6d:21:55:f1:fd:e6:5a:de:16:ce:07:ae:a5:
         64:d2:53:77:2a:23:1b:ce:1f:7e:c8:a1:39:78:c6:8d:b3:5f:
         a9:c2:0e:28:5c:dd:66:11:d8:13:ac:95:0d:af:55:64:06:ad:
         eb:4b:fd:05:5c:4b:42:70:e9:5a:b7:9c:b9:2e:59:f4:58:6d:
         5c:8b:c9:73:db:58:95:e9:15:ff:6f:9f:d5:13:cf:94:c7:fd:
         bf:41:fb:c1:76:62:8c:ae:fe:fd:f1:27:dd:60:42:1e:45:2d:
         51:88:05:dd:a0:1c:28:f3:a8:ef:37:4c:ec:d5:f8:c3:0c:c0:
         91:24:ae:e5:91:27:c9:f2:3c:68:aa:59:6e:42:c9:4d:55:11:
         d1:60:04:d3:f3:7f:79:6f:2c:9b:cd:31:53:af:b4:56:b3:c6:
         e4:ad:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:10:38 2026 by rpki-client