Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
File:                     2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa (raw, json)
Hash identifier:          47dlob+87MrvS/KVyYYi3vCvQZT30GwPQWJQDhrPrK4=
Subject key identifier:   78:33:57:97:4C:F7:23:22:19:C8:B8:CC:2A:57:9A:47:92:0B:C7:96
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584F225D001E8A9E37A7DC126F00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     398351
IP address blocks:        2607:f790:fff6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:00:1e:8a:9e:37:a7:dc:12:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=871c3f42-1428-4373-b933-3b4d2eba92d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:91:43:2a:48:d3:b2:0b:a6:d4:d6:67:da:25:
                    f2:64:77:03:fe:ab:1e:04:45:d8:a4:77:aa:df:93:
                    b8:3a:4a:99:3b:5a:ed:cc:05:94:39:67:c7:d1:4b:
                    5a:7d:9d:d4:44:b2:51:42:5f:51:b3:c3:2e:7c:0d:
                    70:f7:3a:b7:3c:d4:40:57:40:eb:81:de:86:5b:8d:
                    f9:31:02:58:fa:05:c1:86:3b:31:2e:13:32:84:0e:
                    7c:a3:ca:72:52:25:69:61:79:8d:a7:8e:97:cb:b8:
                    78:ef:f4:97:4c:05:2c:dc:eb:03:a1:06:1c:d0:48:
                    6e:bc:6e:22:c8:10:68:3d:44:d1:1d:cf:a7:f2:03:
                    ea:ab:82:53:92:dc:01:49:99:a8:df:99:ff:20:9c:
                    f4:7d:54:c1:18:ef:9f:06:46:3d:79:e5:b8:70:4b:
                    bb:18:97:31:6a:14:19:c9:1d:21:f4:b7:bc:ff:04:
                    20:d6:34:01:5e:cf:12:fd:3c:f6:90:af:6a:ef:02:
                    a8:30:be:86:07:b3:7e:07:fe:78:f0:eb:77:cf:47:
                    18:41:91:42:db:0f:a1:94:94:7f:30:89:26:1d:09:
                    2d:7a:f7:13:82:7e:3f:28:5c:aa:a6:42:b8:3e:84:
                    93:41:7c:af:00:cf:41:9c:65:28:27:7f:9e:33:42:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:57:97:4C:F7:23:22:19:C8:B8:CC:2A:57:9A:47:92:0B:C7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:d6:6d:dc:16:04:23:dc:d2:aa:14:59:0a:db:01:0d:da:
         9b:24:ff:b9:23:26:1a:5c:1d:fc:fe:94:46:06:77:b6:c0:5a:
         04:27:f7:f0:6b:d5:78:c3:ed:6b:7b:34:c8:46:a0:d0:8a:50:
         3a:7e:05:de:b1:c7:14:4d:16:c1:5a:7b:c3:3b:20:20:7b:47:
         3c:18:3b:1b:1e:91:26:5c:4a:44:6e:86:a1:ec:d2:3b:54:73:
         92:23:2e:09:fc:28:f0:be:92:e6:d3:88:65:69:fb:d7:fe:8d:
         97:50:76:5c:a1:d5:89:8e:f3:39:9a:e9:1a:35:5d:f8:0b:5c:
         5c:63:7c:fb:77:ee:45:55:24:4e:7c:90:73:4a:2f:15:fa:1c:
         d3:6d:d0:e6:72:0b:1f:67:2a:c4:06:0e:63:fc:8f:13:3c:d1:
         13:00:ad:98:ea:71:37:3d:28:8b:47:2f:3d:67:ad:67:24:2a:
         ff:db:fd:ea:44:b2:80:31:0a:09:ca:be:7f:bc:1a:85:3f:26:
         a5:94:dc:dd:84:67:8b:3b:c2:15:9f:9d:d7:6a:84:71:db:bc:
         0f:0f:ca:f3:76:f4:b6:4d:95:bd:a6:f9:08:29:4e:4c:64:5b:
         be:94:40:c9:4d:47:4c:a5:b0:5f:ad:3e:dc:a5:33:e7:2a:77:
         d0:75:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:17:45 2026 by rpki-client