Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa
File:                     cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa (raw, json)
Hash identifier:          7dVgKuFiCj0757xj5p+XWoQw3DUn19F/+HiX40JWpk0=
Subject key identifier:   89:5D:09:2C:A5:65:A3:BF:FD:5F:FF:3F:73:F7:18:20:77:A4:DB:21
Certificate issuer:       /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f
Certificate serial:       010D0C9F4328584EE921F56E2E78C39FCB637500
Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     25635
IP address blocks:        2605:5640::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f5:6e:2e:78:c3:9f:cb:63:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=f30dbd84-5c8e-469c-a83b-7142f05367e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:30:42:37:da:56:db:89:01:6a:dc:54:2b:
                    c5:fe:ec:68:8f:f7:88:94:db:c7:4f:df:d0:f3:5e:
                    9d:8f:79:b7:7e:3e:65:b8:83:d7:d4:89:18:6e:7e:
                    02:55:e8:fd:46:56:f0:0d:82:ea:a4:0b:31:28:76:
                    fb:e9:fd:81:32:ea:48:c7:30:2c:20:19:0e:2c:b1:
                    97:7d:e9:be:df:17:25:58:9e:76:57:a3:60:c5:20:
                    c7:a4:95:d0:65:b0:37:04:d0:7b:64:2c:bf:38:49:
                    ac:42:86:16:37:08:33:10:75:f6:9e:2d:20:70:4f:
                    3a:6a:18:51:51:94:7a:a3:ad:29:1f:a0:e1:d6:52:
                    a1:85:d8:da:00:63:cf:81:3b:0e:01:f0:bc:27:93:
                    4d:c4:4a:a0:b6:91:ec:26:a1:74:b2:4b:76:fa:6c:
                    dc:a4:61:d1:46:73:92:d0:dc:b4:ea:37:ff:27:c1:
                    e7:53:5f:74:0e:75:8b:d0:61:1d:33:0b:34:09:27:
                    b1:2d:11:83:60:93:92:1c:b2:42:43:96:af:6e:42:
                    32:7b:aa:dc:0a:9f:1e:1d:1d:d6:40:30:37:c1:07:
                    bb:c9:07:7a:f8:23:33:51:85:aa:01:fd:08:f3:1d:
                    6b:0a:76:23:7b:4a:a9:08:50:5b:44:f3:f3:e8:b7:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5D:09:2C:A5:65:A3:BF:FD:5F:FF:3F:73:F7:18:20:77:A4:DB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl

            X509v3 Authority Key Identifier:
                keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5640::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c4:fd:e9:30:5f:f6:6e:b2:7d:ab:52:7f:cf:e2:2d:4a:8c:
         08:7d:50:8d:6c:05:61:8b:b2:66:88:e4:63:07:85:e6:c1:bf:
         5b:51:61:af:c1:21:99:7e:66:1c:4b:a9:e6:d0:5b:af:d6:fa:
         9f:22:72:07:8c:f0:d5:ea:64:50:4f:80:dd:f3:50:b9:f2:fa:
         bb:b0:5d:8e:22:65:1b:11:8d:ea:ad:09:a7:e8:59:28:80:be:
         a3:0f:f9:a8:68:df:c6:08:ba:a5:63:e6:55:23:03:35:93:58:
         32:6b:ca:03:c6:20:a2:fe:74:95:ba:66:c1:e0:34:83:09:b4:
         16:fa:1b:86:c2:b9:92:07:f9:9a:68:72:3c:f5:ed:38:61:2c:
         15:10:11:db:f4:c2:41:76:f4:29:6b:22:7b:b1:45:51:fd:6a:
         e5:37:18:58:dd:19:0f:ba:21:76:8b:c7:1d:99:67:c0:79:66:
         55:fc:11:31:70:db:34:08:c9:b1:3d:7a:8c:7c:c9:24:9d:e3:
         9d:a7:72:aa:36:16:aa:1e:19:f3:2d:47:43:00:36:d2:03:27:
         8b:6c:a7:15:62:fb:40:02:8f:4d:cb:68:90:26:41:80:e0:bf:
         16:c5:4d:aa:41:ab:46:a1:e8:db:f3:61:fa:b2:30:30:ae:07:
         79:b4:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:39 2026 by rpki-client