Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa
File:                     9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa (raw, json)
Hash identifier:          c1x5hMJt9xnjqogirM3TUhbUqG/F4K3ScGVpRlAm/hg=
Subject key identifier:   84:ED:E9:03:BB:81:47:34:72:11:1D:3F:D6:C6:ED:FB:61:DB:35:82
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584F549DAB7A3B05E66574687FC0
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        2620:119:5077::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ab:7a:3b:05:e6:65:74:68:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=cc5742a6-d5e9-4e84-b581-84e9ac92d6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:3b:4c:f8:56:c7:7d:f5:60:a9:09:d1:45:
                    16:b4:d1:01:20:ca:7b:64:3d:60:49:4e:de:02:62:
                    7f:6b:ad:8e:21:c2:b5:0e:e7:6d:a0:05:d2:f3:d6:
                    f3:7b:ea:ad:7e:60:81:81:65:96:85:4b:aa:b7:79:
                    c6:d1:d8:3f:ad:7f:f1:65:3e:fa:aa:67:11:98:ca:
                    33:02:a5:01:1c:e5:47:01:01:0b:58:f1:da:62:31:
                    13:3f:c0:61:a2:fb:c6:09:d9:71:1b:dc:0a:44:70:
                    c6:bc:28:a9:26:af:65:0d:4d:ad:8e:c4:0b:52:9f:
                    39:fb:a9:6c:b7:3c:c9:99:5f:f3:07:29:ae:78:09:
                    13:50:e6:54:c1:b6:25:76:41:97:f8:78:5a:5b:0f:
                    64:27:e3:f6:ec:39:f9:7f:b1:27:c4:20:e5:0e:a5:
                    b3:a4:6f:c9:25:fe:41:88:08:8d:1a:84:ee:a0:ae:
                    72:fe:1e:3c:6f:a0:48:a2:b9:b5:64:d3:03:cf:27:
                    b1:65:88:d5:31:ae:3c:7b:b5:5f:e5:17:df:7b:b0:
                    e1:1b:0f:d2:ba:8b:dd:5b:7d:45:46:2d:e1:c1:70:
                    ce:27:63:2a:da:02:fd:cf:50:55:f2:b4:d8:66:00:
                    24:4f:7b:26:4f:5e:41:16:08:cc:18:78:60:ac:d5:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:ED:E9:03:BB:81:47:34:72:11:1D:3F:D6:C6:ED:FB:61:DB:35:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/9d0c5c91-f8d4-3a3d-a007-5161257ff2a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:5077::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:68:8d:79:e8:56:7a:3c:1b:c4:57:99:25:70:55:3c:ec:cc:
         7b:bf:f8:7b:8e:0f:bd:a9:bb:33:7d:d3:32:a5:61:76:a0:a2:
         57:4b:19:fb:12:fe:46:5c:e4:79:e9:43:91:9b:ff:cf:f9:06:
         84:cf:2d:d4:20:de:1b:86:26:5b:bb:e5:fc:35:d1:d6:5d:5e:
         47:4c:27:28:e1:ed:d5:95:56:d7:70:f1:3e:a8:f4:bb:35:7e:
         a9:53:62:42:24:7f:07:b0:05:a8:e6:64:69:e3:7e:0d:5d:9c:
         3d:18:3a:fc:86:73:c6:a6:21:e5:49:3e:b4:e5:a6:dd:97:ee:
         fc:7d:87:79:c0:e5:75:79:35:b3:56:32:ea:b1:74:44:b9:a1:
         86:23:af:94:e8:e8:a0:ba:bd:a0:4b:0f:66:c2:ff:f3:d7:d6:
         e9:1a:b1:fa:ea:7a:74:81:d5:63:2e:3e:76:bb:8e:1c:36:83:
         e9:7c:42:00:bf:ea:47:c1:35:d5:62:83:7a:ce:f3:94:c0:d7:
         06:41:4d:5c:2c:fd:59:fb:70:43:ad:ce:78:d4:57:65:28:18:
         97:7d:b6:f2:b7:9e:b8:79:7e:c6:ef:92:e8:0d:6f:c3:8c:f5:
         18:7e:2f:7c:06:95:8a:8e:46:04:2a:93:c1:f5:ee:ab:97:08:
         40:f7:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:25:06 2026 by rpki-client