Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa
File:                     1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa (raw, json)
Hash identifier:          ywfJCtdTgZpKgZoACjpFwHrubY2HFWEbPjV8IabknRo=
Subject key identifier:   DC:A5:5B:A3:44:EB:B5:1B:06:F5:09:E0:BC:36:39:1E:DC:2F:AE:5F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F067235633732677C5EADA160
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        2001:4c0:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:35:63:37:32:67:7c:5e:ad:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=a9c41a88-4d9e-4e81-b678-73a30e4ec342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:64:40:89:ee:97:35:61:64:9d:eb:3c:7e:
                    2e:13:cb:36:ae:6f:d6:af:11:3e:31:b5:4e:db:4e:
                    5e:64:a4:07:4a:cf:c4:7e:1c:76:13:8e:5e:6a:da:
                    c3:64:61:e8:9b:75:e9:e2:95:bd:dd:ab:fa:ad:b1:
                    8c:3d:a7:22:7a:16:d6:db:bf:a2:97:b0:44:86:a3:
                    26:7b:3d:9a:17:5b:3a:7d:a1:9a:13:00:bd:d9:8b:
                    c0:bf:55:ed:cd:49:d9:19:9d:15:fa:86:9b:a6:8a:
                    af:a0:08:4b:30:f0:0d:7b:a4:8f:6c:0e:20:3a:02:
                    73:60:24:43:d4:f5:e1:01:8d:78:f2:bf:9d:5d:be:
                    8f:78:de:d4:e5:34:1c:97:98:07:6a:49:72:75:9e:
                    5d:2d:e7:14:d0:cc:99:19:a5:aa:4d:39:62:48:0f:
                    1c:06:f1:10:80:22:b3:9c:b3:d2:e9:21:3e:ba:31:
                    c5:b4:4f:eb:d8:78:1d:86:bc:21:75:24:27:b1:02:
                    fd:b8:ba:22:95:e2:8d:b8:d4:30:1c:48:89:51:96:
                    dc:a8:52:6f:ee:97:9b:69:73:c7:92:21:66:79:ad:
                    ed:0e:91:0c:e2:ac:ee:a0:02:38:ba:ae:78:f3:97:
                    a4:90:8f:30:42:8c:ee:f3:43:e1:5b:cd:b6:ad:4e:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A5:5B:A3:44:EB:B5:1B:06:F5:09:E0:BC:36:39:1E:DC:2F:AE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:65:2c:ed:6d:05:f2:aa:1b:10:e2:07:61:e3:35:27:b2:97:
         1b:e8:fc:dd:86:c0:5d:0e:17:d5:bb:6f:f1:de:13:fd:73:4c:
         03:9a:88:25:61:9b:da:53:00:89:b5:a7:3b:ea:ac:6c:f8:ca:
         6f:0f:71:83:c8:83:49:ae:88:9a:8b:49:ab:2a:39:8a:74:6c:
         01:01:5c:93:86:d8:6d:87:0f:60:52:1e:85:a7:72:be:b2:87:
         df:95:be:f1:29:e1:c6:91:6e:90:b9:0c:53:ad:4d:62:07:1d:
         bc:b0:49:84:14:c2:73:e8:f8:5f:ed:a2:a5:bf:49:11:1c:2f:
         32:43:f4:e3:06:eb:3b:69:d5:16:72:87:2c:81:9e:9a:08:7a:
         cc:d1:49:d4:64:85:16:03:92:24:a9:71:09:cd:21:81:a7:76:
         f7:cd:4c:10:67:d8:10:2f:cf:24:7a:7f:76:7c:88:16:2d:a2:
         2c:e4:63:1d:1b:a5:f4:e5:8c:84:ee:fb:c0:a3:af:77:6b:bd:
         e3:c3:53:d5:a7:17:cc:f7:13:4d:ef:d4:f3:dc:13:c1:17:59:
         8b:70:3b:25:62:7c:8f:ad:58:0c:55:5c:a4:36:ec:7c:78:8a:
         c4:a6:f4:4f:9d:9c:5e:b3:c4:cc:9e:df:2d:f8:3f:63:e8:11:
         19:54:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:06:03 2026 by rpki-client