Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa
File:                     a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa (raw, json)
Hash identifier:          IAuCGfrYOZ5cDTDBh7fkRZSM/8jd561fB2rEhgTvdFk=
Subject key identifier:   E3:14:22:25:CE:D1:E4:86:C1:DC:A3:20:B8:7D:98:55:D7:D7:FE:6C
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328584F4975781D9F4771E9013EF340
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3280
IP address blocks:        2607:64c0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:78:1d:9f:47:71:e9:01:3e:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=275a5d0f-632d-4128-8275-f4d19180cba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:35:f5:f7:5e:33:0d:29:02:d0:3f:03:97:
                    9a:fa:53:15:ee:fe:78:e2:ed:5c:15:1d:6d:7b:29:
                    4d:2f:f8:ad:5d:5e:62:e3:78:cb:04:2d:14:c4:38:
                    8f:47:d1:ba:ed:2c:a9:14:86:57:10:0c:09:a0:b2:
                    61:d9:f0:62:09:81:a5:b0:c1:2d:53:f5:32:c8:01:
                    00:de:a2:b0:aa:b6:ea:b8:2a:73:c8:03:5e:ca:f7:
                    f8:67:bf:eb:ea:42:b9:64:e1:bc:ea:bf:2b:e4:06:
                    5b:a4:74:6c:3d:c2:0e:51:73:dc:d0:ce:68:2b:99:
                    b3:83:f7:9b:0b:c1:45:8c:d2:e3:01:ac:5b:70:fc:
                    e2:9b:d0:48:df:da:5c:a2:d1:1f:1e:da:8a:38:8b:
                    f8:26:2f:fc:42:db:6e:c8:f9:f5:c4:9f:ad:1c:a1:
                    d4:87:8f:6b:f2:c2:ef:f6:f3:86:28:e7:53:ce:92:
                    38:2b:84:19:a0:50:0e:d0:e5:b5:f9:93:82:9d:e2:
                    89:81:2a:d2:5b:6c:9b:bd:73:ec:e3:77:03:23:71:
                    50:f6:b3:c0:09:6e:52:0f:84:d5:9b:e8:9e:b7:28:
                    11:f6:22:f9:20:a4:de:9d:0e:0b:72:90:7b:50:08:
                    c1:5e:af:e1:49:03:88:f5:cb:f0:dc:f5:b2:b3:ab:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:14:22:25:CE:D1:E4:86:C1:DC:A3:20:B8:7D:98:55:D7:D7:FE:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/a1982a37-b8eb-384b-8db0-0f83fdef21f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:64c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:dc:39:43:82:7e:f8:a2:e5:6c:1e:77:87:04:c8:14:7e:4f:
         57:12:a6:f6:43:da:b5:d7:7b:e4:bf:76:09:d6:da:05:4e:c1:
         f3:da:46:0c:b8:5c:c0:2e:1b:ab:a8:6e:6b:ad:a6:b6:e0:a8:
         34:39:49:b6:27:c1:4a:44:22:2f:0b:d5:84:4d:cb:0b:f1:67:
         9e:30:30:be:73:04:e9:11:6b:35:51:19:2a:df:24:03:d1:7e:
         a7:ea:a3:fc:7d:68:c2:00:b1:87:1b:b8:39:fe:e4:7f:cc:cf:
         29:c9:0c:6c:89:33:8a:bd:02:93:9a:fc:8a:59:ea:85:e4:b0:
         d5:7a:85:0a:26:3d:e0:d2:b6:76:af:bf:e8:17:29:f4:41:de:
         d4:42:34:dc:bf:8a:32:c0:8b:a1:ad:73:27:91:10:92:18:8c:
         38:0f:2f:f1:76:11:fb:ba:26:a0:a2:b3:ff:09:c3:05:29:48:
         ef:fd:d0:fc:14:77:31:35:3a:18:9c:b3:53:73:d4:f6:58:57:
         83:4f:05:59:16:b0:87:50:62:b1:ce:3c:46:9a:92:b9:55:22:
         60:d5:55:a6:f9:b1:af:db:a9:a1:60:6b:bf:bb:d5:9d:b3:91:
         b2:55:fb:35:57:f8:8e:c0:da:ad:98:44:16:60:82:06:51:e5:
         3b:7c:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:37:04 2026 by rpki-client