Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa
File:                     025f189b-ca85-3020-8e51-403bd292c2d6.roa (raw, json)
Hash identifier:          yXumVOJBLzCO2l1yBtRhhY+AfLHKW3o4iFBOSqIHzaM=
Subject key identifier:   01:F3:89:93:83:53:4B:13:6A:0F:3C:20:14:2B:F5:13:F4:8F:BA:2D
Certificate issuer:       /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Certificate serial:       010D0C9F4328584F49740C4F02E4D4BB095371C0
Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11131
IP address blocks:        2620:0:5300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0c:4f:02:e4:d4:bb:09:53:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59fc824e-7c04-43dd-822b-50c1f1e0fc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9b:65:43:4f:06:f2:ec:d9:5b:14:52:f6:40:
                    4a:8b:23:d3:24:5e:65:c3:c1:d5:8b:28:c7:2c:1b:
                    eb:4e:5b:a5:6b:24:3e:02:28:7e:b6:52:0c:e7:07:
                    71:22:d2:cb:b9:a8:84:37:fa:29:a1:54:8a:e3:62:
                    ad:76:63:a0:ce:b9:54:4e:ec:25:df:bf:e8:91:18:
                    c2:c3:17:4c:66:4f:72:ca:9f:b0:a3:b6:d9:6d:54:
                    78:54:1d:da:56:49:aa:c2:ef:75:ea:64:ce:b2:fe:
                    22:97:6d:3e:53:c3:81:48:82:ca:00:6e:1d:21:3b:
                    31:60:c1:9a:ff:a0:74:34:93:3d:4a:9a:b9:67:57:
                    58:45:b6:e1:cf:9b:2c:76:69:ce:d8:9d:1a:48:71:
                    42:60:e8:39:6c:d7:2b:4d:46:23:cb:d1:ce:5f:49:
                    58:f0:0c:9e:9e:be:e2:0a:31:03:26:a4:48:9e:10:
                    37:85:67:c8:cc:50:a3:a8:50:75:9a:29:78:74:6f:
                    53:b0:52:45:70:df:cb:f2:5b:f4:08:43:a6:03:6c:
                    1a:f9:83:49:bc:fe:92:33:93:3b:e1:19:8c:0c:5f:
                    90:dc:0c:46:50:ad:45:c4:28:37:2b:c1:73:06:19:
                    ad:58:7d:10:f9:4c:d7:49:e7:4b:2d:4b:8d:f1:f2:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F3:89:93:83:53:4B:13:6A:0F:3C:20:14:2B:F5:13:F4:8F:BA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/025f189b-ca85-3020-8e51-403bd292c2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl

            X509v3 Authority Key Identifier:
                keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:70:43:ec:05:40:a4:69:d8:8f:8f:6e:6a:6b:40:d8:7b:
         1c:fd:3e:f8:fc:73:b9:16:33:47:39:bc:d7:40:5e:3c:2d:90:
         47:60:8b:f2:8b:11:77:b7:49:a0:05:a4:a5:a6:f3:f9:09:49:
         69:e0:8a:e6:16:50:c1:08:49:62:e0:88:40:98:03:3d:de:26:
         f5:3f:20:4d:be:66:26:ee:b2:54:ae:6c:e1:18:12:61:b0:3e:
         14:58:8d:6e:09:eb:14:47:c4:9b:96:71:e0:d9:2e:98:71:a6:
         64:a1:d8:a3:cd:de:43:f9:44:72:51:70:ee:1e:e8:9a:66:3c:
         e9:9a:ba:ff:7f:7a:cc:7f:f7:29:44:e1:7a:f2:58:b4:d1:2a:
         cd:6d:76:f1:4a:1b:8e:a2:a7:c9:5f:74:7f:fc:dd:1c:e8:f9:
         dd:ca:3a:5c:46:cc:ab:21:94:f0:f7:a1:0e:53:2f:4e:e1:23:
         f7:d5:62:91:f7:3b:88:df:cc:0d:61:61:b8:ad:d8:7c:c0:52:
         9f:ba:5c:98:c7:8d:f9:09:38:7b:0a:b6:b0:8e:f8:1c:bb:fd:
         b3:ee:dd:5b:ce:5e:76:cd:88:7e:0b:d3:5c:d7:56:80:f2:a6:
         56:5f:85:f9:1a:68:29:bb:fb:68:95:ee:ea:50:d7:be:04:40:
         b7:a6:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:37:38 2026 by rpki-client