Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa
File:                     2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa (raw, json)
Hash identifier:          7TEmsGwA+ZSj215C4NDuRJgBgLly4l6i0tPEq3VKRGk=
Subject key identifier:   EE:63:FC:25:AA:52:3B:1D:3A:20:A8:B2:E1:B0:0A:C9:83:9E:B4:BE
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F3CE2B18856EA6E803A468400
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b1:88:56:ea:6e:80:3a:46:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=6793d4d1-a408-4b7a-a833-aa389b86aa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:60:72:78:37:be:eb:14:43:38:26:3b:d7:
                    c9:77:da:8e:f5:d9:a9:2d:6f:b1:a9:7d:13:07:35:
                    38:f5:51:45:c6:a7:ae:11:95:26:98:82:40:7e:ae:
                    2e:61:89:91:8c:85:c1:3e:ac:c3:4e:0c:bd:17:4f:
                    ee:f8:d7:de:42:f1:b5:85:53:e9:9d:0f:65:34:87:
                    d7:70:5e:ba:ec:d8:db:da:ef:88:37:47:90:7e:fa:
                    18:6a:fc:62:4f:87:b6:3d:c5:99:dc:1f:94:4b:a7:
                    ae:02:c9:50:d0:35:0d:0f:5b:ed:b6:1b:82:37:1f:
                    74:a9:aa:b4:2e:07:3e:5c:94:c9:17:a4:cd:7c:6f:
                    c3:1c:45:85:79:0e:64:a9:88:69:43:d6:21:72:55:
                    f2:72:23:0f:32:e3:f3:6d:2f:74:6f:13:21:9d:f4:
                    dc:b1:3c:64:54:4f:da:21:75:b5:d5:ce:3a:c1:cc:
                    aa:aa:08:86:ed:fe:8f:11:cc:cb:73:41:a1:21:4c:
                    74:e0:9f:92:85:12:44:a0:08:eb:f8:04:4f:92:ad:
                    b0:60:2d:20:79:e9:32:be:bd:89:61:a8:f1:2e:68:
                    27:09:5a:90:38:30:e9:67:e4:66:51:82:e3:ee:25:
                    81:fb:25:2b:02:4f:d0:13:75:01:93:ad:3e:73:ce:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:FC:25:AA:52:3B:1D:3A:20:A8:B2:E1:B0:0A:C9:83:9E:B4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2a76e7ce-5657-306a-b6ed-94f1c6f0b3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:99:d4:31:85:1a:56:3c:4e:0b:de:86:fb:3c:5f:bd:1d:0d:
         b8:aa:8b:3c:ae:a0:dd:c5:2c:7e:d7:6a:0f:bc:79:9b:01:12:
         2a:66:c3:43:6c:15:3b:d3:4a:69:9b:b6:85:a4:ca:e2:df:be:
         70:3a:31:a5:54:b9:ff:4e:8b:bf:9f:c9:e4:a7:38:64:a0:43:
         c3:98:9c:62:9c:f6:12:0d:9e:76:13:5e:c0:72:7f:0d:96:43:
         b0:42:21:97:fc:22:c2:ae:c1:5f:54:10:cc:01:3a:71:14:71:
         4b:3b:87:f5:dc:fd:22:ff:98:58:a9:54:ae:ee:ff:bc:21:47:
         99:9a:dc:60:a1:07:c2:a3:32:ba:0b:9e:d5:25:42:94:bf:25:
         1b:1a:8d:61:ff:38:5d:c5:6b:79:fe:c4:e7:ee:22:88:60:e4:
         6e:95:15:0b:a8:7d:c2:48:21:8a:f2:b5:1f:82:45:cd:39:1c:
         d3:ec:d0:92:33:88:62:e5:86:d5:67:52:d9:91:b7:df:19:3d:
         45:85:c4:f9:a8:5d:a1:d0:23:7e:e2:1a:ea:c9:41:03:c3:9d:
         5f:05:72:45:3e:51:b9:1c:97:b1:92:ec:a2:d5:b4:3f:a9:0e:
         de:01:39:89:11:8b:07:1a:1c:da:52:c9:6c:21:a8:9e:d6:0b:
         4b:8d:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:26:53 2026 by rpki-client