Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa
File:                     493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa (raw, json)
Hash identifier:          hH+Ztou0zm6DeEi0BjtsTvzLgVG1h4x3rflzjCrVTZI=
Subject key identifier:   0C:7A:E5:08:AA:CE:B9:0E:21:3D:C8:33:AA:6A:C6:27:2F:38:82:CE
Certificate issuer:       /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f
Certificate serial:       010D0C9F4328584EE921ECA0A11D1C3573565920
Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     25635
IP address blocks:        2605:5640:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:ec:a0:a1:1d:1c:35:73:56:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=9353454b-7edb-44b4-a515-2a8149affb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:98:2f:61:85:a2:2e:7e:0c:03:33:f0:6e:
                    6f:fd:46:71:80:21:6e:f1:21:2e:fe:17:b7:2e:6f:
                    7a:fb:09:e6:32:9a:65:de:89:9c:ea:7b:72:59:b1:
                    5c:6d:85:41:eb:12:1c:19:20:c9:20:9d:c1:d9:8f:
                    d0:3d:0f:d3:1a:8d:bb:e7:8b:ce:3b:45:c1:85:92:
                    13:3d:c3:eb:f5:f9:cb:cc:eb:ad:d3:a4:69:35:ec:
                    59:22:e6:1f:c0:67:01:ec:36:09:dc:98:09:b6:02:
                    ba:3f:da:54:4f:0b:eb:05:0e:b2:24:f5:0d:1e:e9:
                    bc:ec:64:73:f9:2a:a5:93:71:03:9d:ba:37:ac:76:
                    08:a8:8b:91:11:a4:93:b1:9e:1e:4d:75:0b:7b:1e:
                    24:7b:47:b2:b9:56:70:dc:5c:36:c4:c7:68:2b:ca:
                    ca:1e:2f:f0:73:1e:54:5a:fc:64:f7:e6:9a:93:b6:
                    b2:34:95:8f:23:b4:25:3b:c2:87:bb:6e:d9:a5:b6:
                    d6:f5:ab:ce:91:5d:f8:cd:98:6c:aa:35:c4:46:6c:
                    c7:6c:2a:52:fe:35:be:0f:66:57:5a:fe:b2:d7:5b:
                    d6:16:86:4f:ff:e3:0b:85:bb:6a:67:99:4a:73:64:
                    1d:f9:be:4f:5c:a2:f9:9e:1b:08:ed:c1:29:f0:c4:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:E5:08:AA:CE:B9:0E:21:3D:C8:33:AA:6A:C6:27:2F:38:82:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/493b5042-cf83-3dc7-97be-ac05ec09cd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl

            X509v3 Authority Key Identifier:
                keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5640:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:82:d6:10:26:95:63:64:d5:52:1d:76:33:33:55:70:e7:76:
         e2:f8:f5:74:06:45:26:d3:0e:81:97:3f:39:13:40:51:55:4a:
         33:6a:9d:4b:71:0b:07:1f:db:a3:c5:31:c8:dc:39:2b:1c:35:
         4a:ac:18:3d:07:78:7a:a8:d8:f6:60:f4:01:88:31:c5:bd:aa:
         f1:6f:8b:75:ef:25:c7:88:a5:a8:e3:f0:c1:6e:fa:77:3b:f1:
         38:0e:f6:16:03:37:0b:67:71:52:41:f8:96:20:c5:c4:bc:09:
         c3:12:3a:16:2a:2a:9b:09:d2:e7:56:d8:85:ea:49:01:7b:13:
         96:af:21:db:e9:ed:6c:da:af:b2:ba:a4:86:00:db:f1:77:60:
         c7:0b:82:b8:19:bb:a7:c2:bc:96:6c:e7:81:dd:77:9e:59:32:
         22:cc:1d:3f:07:01:c1:b2:dc:69:4e:f1:2e:f3:31:19:6c:25:
         9a:e9:72:58:f3:2a:ad:4f:5a:20:5c:bb:ab:14:3e:d0:c6:e8:
         b7:b1:de:d4:70:62:56:88:c1:00:a8:f4:c4:a0:1d:b9:a5:76:
         14:a9:2d:85:9f:47:7a:71:21:49:dd:a6:8e:12:3e:76:f1:c1:
         b4:63:ec:27:6e:7f:49:80:33:90:18:c8:6a:9f:6d:d9:61:41:
         b3:83:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:07 2026 by rpki-client