Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa
File:                     6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa (raw, json)
Hash identifier:          HqQlrPlow4ViCovfqbsoRq2+5VztKBa6p/J2mTm8liI=
Subject key identifier:   AC:70:2D:63:CA:94:F3:78:1E:E6:F4:58:75:94:A4:C1:61:92:9B:6C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F15CCF2E8B2D08CB06F54DC00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     30058
IP address blocks:        2001:49f0:d049::/48 maxlen: 48
                          2001:49f0:d04a::/48 maxlen: 48
                          2001:49f0:d077::/48 maxlen: 48
                          2001:49f0:d078::/48 maxlen: 48
                          2001:49f0:d07a::/48 maxlen: 48
                          2001:49f0:d07b::/48 maxlen: 48
                          2001:49f0:d07d::/48 maxlen: 48
                          2001:49f0:d07e::/48 maxlen: 48
                          2001:49f0:d07f::/48 maxlen: 48
                          2001:49f0:d081::/48 maxlen: 48
                          2001:49f0:d082::/48 maxlen: 48
                          2001:49f0:d083::/48 maxlen: 48
                          2001:49f0:d084::/48 maxlen: 48
                          2001:49f0:d087::/48 maxlen: 48
                          2001:49f0:d089::/48 maxlen: 48
                          2001:49f0:d08a::/48 maxlen: 48
                          2001:49f0:d08f::/48 maxlen: 48
                          2001:49f0:d097::/49 maxlen: 49
                          2001:49f0:d0a5::/48 maxlen: 48
                          2001:49f0:d0b2::/48 maxlen: 48
                          2001:49f0:d0b3::/48 maxlen: 48
                          2001:49f0:d0b4::/48 maxlen: 48
                          2001:49f0:d0b5::/48 maxlen: 48
                          2001:49f0:d0b6::/48 maxlen: 48
                          2001:49f0:d0d5::/48 maxlen: 48
                          2001:49f0:d0d6::/48 maxlen: 48
                          2001:49f0:d0d7::/48 maxlen: 48
                          2001:49f0:d0dd::/48 maxlen: 48
                          2001:49f0:d0e1::/48 maxlen: 48
                          2001:49f0:d0e2::/48 maxlen: 48
                          2001:49f0:d0e3::/48 maxlen: 48
                          2001:49f0:d105::/48 maxlen: 48
                          2001:49f0:d106::/48 maxlen: 48
                          2001:49f0:d107::/48 maxlen: 48
                          2001:49f0:d108::/48 maxlen: 48
                          2001:49f0:d109::/48 maxlen: 48
                          2001:49f0:d10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f2:e8:b2:d0:8c:b0:6f:54:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=7748134b-3a53-46f2-8fa1-68b0fa5acd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:70:f9:95:ad:ae:c1:bf:80:b6:0c:8a:1f:
                    10:27:e1:ec:0a:fb:dc:99:ae:76:09:d2:60:d0:0e:
                    32:8c:f1:4b:cc:90:03:6d:15:d2:7d:a8:7b:62:ac:
                    e9:54:8b:f9:92:43:78:30:20:d1:e2:c9:05:90:e6:
                    65:64:5c:0b:fd:05:05:cd:6a:21:e5:96:01:a5:d3:
                    63:50:35:b9:e9:0c:ec:d2:e4:45:b2:01:21:5b:e4:
                    78:e2:53:eb:b8:c1:ee:7b:9b:70:e9:ea:81:94:0c:
                    7c:b3:5f:e6:35:d5:3c:36:80:d8:79:6e:82:aa:90:
                    98:7d:f0:51:5e:8d:8b:66:e5:d4:42:cd:73:03:96:
                    e5:f5:3e:af:77:83:23:b8:7b:91:57:5e:7d:0c:58:
                    b0:e9:dc:d5:6c:d6:7b:08:ed:59:23:4f:a3:11:37:
                    e9:49:04:3f:54:09:fa:2a:c4:89:cb:79:a8:6e:28:
                    bc:95:6c:29:9b:20:48:b6:5e:04:dc:85:cd:97:30:
                    78:77:de:e1:d5:ee:23:df:d4:6b:b2:db:30:ee:c5:
                    12:ba:3d:b0:6f:1c:a7:01:6f:04:8c:7a:e9:75:59:
                    a1:cc:4e:59:e5:39:2a:3a:23:d6:4b:6a:f1:08:d6:
                    9e:d1:7b:3c:04:01:95:b6:20:e3:dc:98:e9:b3:ab:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:70:2D:63:CA:94:F3:78:1E:E6:F4:58:75:94:A4:C1:61:92:9B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6827d8d3-c2aa-3fca-b605-e469bc50b92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d049::-2001:49f0:d04a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d077::-2001:49f0:d078:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d07a::/47
                  2001:49f0:d07d::-2001:49f0:d07f:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d081::-2001:49f0:d084:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d087::/48
                  2001:49f0:d089::-2001:49f0:d08a:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d08f::/48
                  2001:49f0:d097::/49
                  2001:49f0:d0a5::/48
                  2001:49f0:d0b2::-2001:49f0:d0b6:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0d5::-2001:49f0:d0d7:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0dd::/48
                  2001:49f0:d0e1::-2001:49f0:d0e3:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d105::-2001:49f0:d10a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:24:59:df:62:9c:f0:0f:b8:85:c3:cb:fb:c2:2f:21:9e:71:
         f0:3c:30:ae:56:46:0e:eb:b9:30:1a:2b:95:d2:0a:e5:77:fe:
         31:1d:b2:57:71:ea:a9:22:80:46:8b:29:2f:3e:ea:1e:f0:18:
         4a:c2:ee:ee:50:8b:69:d5:15:e0:dd:0d:db:14:73:8f:a5:05:
         0f:51:bc:b8:ff:a7:1c:f0:34:c7:1a:4c:b4:bd:aa:b2:17:15:
         32:3b:88:15:2e:29:2d:7b:98:cb:ea:04:d3:90:8b:80:73:eb:
         30:ef:3a:23:07:79:a6:84:d3:81:c7:52:f1:1e:fd:b8:13:8e:
         29:be:6f:9f:19:27:f4:41:f8:81:f6:5b:ce:83:a1:e2:41:c0:
         5d:6f:ce:76:01:61:ff:69:e1:d7:eb:94:6c:c0:c4:c6:68:f2:
         18:d8:d0:9e:d5:fe:97:3f:fb:66:46:28:db:4c:7d:b6:45:70:
         b2:c9:f9:bb:09:a6:7a:cb:8c:e1:4b:f4:f6:bb:b7:ae:49:6b:
         de:57:95:5d:26:ff:75:bb:ba:05:65:e0:df:4a:78:05:59:48:
         23:66:27:c8:56:d8:cf:c4:83:e5:d5:4c:c4:f2:3c:ed:d9:73:
         46:02:b3:e1:52:c6:ee:3b:c1:da:9a:c9:32:91:99:66:5a:3c:
         08:7f:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:39:24 2026 by rpki-client