Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/b8569f87-20af-3227-89ce-92d8ad441270.roa
File:                     b8569f87-20af-3227-89ce-92d8ad441270.roa (raw, json)
Hash identifier:          Fe8/mpzTv4b1Sw+bmCRmhVSc753MZImrj5f3hGmxEPY=
Subject key identifier:   C3:C1:08:F8:A7:93:50:FC:6C:6B:DD:7B:2C:5E:0D:1A:4F:B0:B7:59
Certificate issuer:       /CN=dca47667-8bdb-4edf-b1d2-ae7dd968e70f
Certificate serial:       010D0C9F4328584F497627235EABE9BB6D69C780
Authority key identifier: 42:CF:67:98:1E:6C:E9:A7:72:1D:BF:52:1E:7F:8F:1B:C9:4B:5D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/b8569f87-20af-3227-89ce-92d8ad441270.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31783
IP address blocks:        2604:6200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:27:23:5e:ab:e9:bb:6d:69:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca47667-8bdb-4edf-b1d2-ae7dd968e70f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a8255027-cdd1-43ed-a444-ae9875a5fb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:74:56:b2:1c:e3:31:b6:46:d9:ac:3e:35:
                    14:5e:4c:de:40:2c:13:36:35:71:92:c7:d9:ee:c9:
                    2b:7d:49:1a:15:ed:af:7e:a4:21:67:c7:9a:24:e7:
                    3e:49:ca:e4:8a:14:53:5d:b2:dc:22:89:d0:83:39:
                    b5:d9:ed:61:22:c1:bf:64:13:b3:89:0f:55:ee:e8:
                    1f:b1:4a:87:d0:de:f1:40:07:22:e9:df:e6:7a:b2:
                    b5:bd:67:4e:c7:91:ee:9f:8b:9a:97:76:ff:41:f6:
                    93:0b:84:3c:9a:66:ea:ba:97:68:46:a6:3f:21:c3:
                    9c:3a:69:7f:52:b3:18:2e:1e:43:78:e8:ec:94:80:
                    37:ab:22:11:84:99:27:fa:2b:f5:63:53:2a:78:0b:
                    6a:b8:5c:91:3a:63:fd:3c:a8:8e:cc:27:25:1d:38:
                    b0:f1:fd:e5:9b:86:23:98:fd:a5:08:47:40:23:d1:
                    4d:6c:36:c5:73:8e:11:67:fe:5b:ce:46:78:69:ca:
                    84:a8:b8:58:4d:8e:cb:26:c0:01:06:2a:6f:a5:f9:
                    c4:25:f8:d3:2d:c2:4c:6e:91:1c:90:a6:e5:f1:4c:
                    f2:43:48:a7:01:07:b5:fe:d6:b1:82:2b:64:c5:a9:
                    75:20:86:50:f0:8d:4a:9a:95:5d:38:66:27:e9:0f:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C1:08:F8:A7:93:50:FC:6C:6B:DD:7B:2C:5E:0D:1A:4F:B0:B7:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/b8569f87-20af-3227-89ce-92d8ad441270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.crl

            X509v3 Authority Key Identifier:
                keyid:42:CF:67:98:1E:6C:E9:A7:72:1D:BF:52:1E:7F:8F:1B:C9:4B:5D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:46:41:ba:b5:81:da:86:5a:c8:78:f7:3f:29:0b:86:2a:93:
         f3:4e:70:77:cc:7a:78:04:66:c9:93:02:3f:59:c6:83:dc:c6:
         8f:e7:b0:bf:1b:37:d2:7c:01:4f:e0:f0:55:34:e0:8b:63:17:
         dd:2c:13:5c:cd:bc:0f:08:cb:5e:14:3c:2e:51:15:ef:25:85:
         c9:bc:7e:6e:1c:59:be:0d:5d:40:64:19:9f:1d:a9:ad:56:79:
         53:1c:93:4b:a9:05:ab:8d:e3:45:96:2b:92:13:0e:2a:69:e1:
         0e:a5:92:f9:cd:9a:44:7d:50:27:84:8c:d6:29:df:d4:e4:00:
         95:7e:06:ff:3d:01:52:f7:ce:5e:a1:90:a1:cf:24:65:3a:eb:
         42:81:16:a4:74:cb:0e:d8:10:1e:6d:96:99:27:da:8e:5f:39:
         85:38:6a:b0:b5:41:78:1c:36:7c:f0:95:68:84:c4:b9:a6:71:
         b0:fd:bb:63:03:b5:10:ec:ae:24:13:dc:5b:70:96:5c:0a:17:
         cd:9f:e4:d8:a2:f5:d1:bc:80:3c:2c:c4:c3:3d:11:7d:9b:14:
         56:40:76:c6:cb:d7:e3:d5:79:86:fb:06:e4:4f:9a:9b:62:9c:
         00:32:b8:85:c6:3c:76:7a:03:d0:00:28:6c:e8:f9:0a:e0:97:
         26:ae:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:02:24 2026 by rpki-client