Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/77bc85c8-edcc-3e52-895b-c66bb08b2478.roa
File:                     77bc85c8-edcc-3e52-895b-c66bb08b2478.roa (raw, json)
Hash identifier:          vld8qNFu4+hrMQ4+ENk5gODGKdHYztBI6dmREqtjpSA=
Subject key identifier:   34:4C:A2:D8:2E:AE:38:0C:FE:F1:F5:8A:26:8F:75:AD:8B:B8:76:5E
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957CF39F58A40EFA4E77140
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/77bc85c8-edcc-3e52-895b-c66bb08b2478.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2620:147:c30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:cf:39:f5:8a:40:ef:a4:e7:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=2d2cbee0-85e4-4e09-a56c-8e7f4fbc7307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:b3:56:96:fe:c9:0e:3e:87:a0:ff:42:92:
                    57:d2:a0:f3:85:c8:03:8e:69:0a:10:11:be:3d:1b:
                    26:b3:5a:b6:c2:64:dd:d1:b2:fe:4c:41:e8:97:03:
                    b9:4f:8f:84:fc:54:83:dc:12:2a:69:ee:b9:79:a9:
                    59:68:9b:49:56:af:72:39:62:0c:0c:c2:1a:6e:2f:
                    88:e4:9e:15:87:56:d5:91:4a:ec:4e:42:6f:50:55:
                    48:09:4a:14:e5:af:93:43:10:70:99:7b:8c:bb:e2:
                    fa:fe:46:b7:dc:30:e2:f5:1b:49:b2:83:d5:1d:6a:
                    4e:68:79:3e:1d:b9:f3:15:1a:4d:2c:7d:a6:db:95:
                    5f:1d:2d:51:4d:60:2f:83:3e:37:a4:1e:2a:d4:46:
                    54:49:91:ef:45:a4:66:2a:55:a7:aa:91:f0:2f:50:
                    56:f7:02:90:88:a9:09:e4:bf:cb:96:d6:32:f0:fd:
                    08:30:96:de:f2:6f:28:39:e0:2d:9b:91:b0:38:ac:
                    10:b4:da:fa:06:16:e8:b6:9c:5e:bb:13:3b:47:00:
                    3e:43:0a:a7:86:d9:ea:63:60:5f:f4:50:cb:c9:6a:
                    2d:99:7a:41:22:da:aa:c3:9d:05:73:98:ec:e3:11:
                    e9:f4:58:a0:b8:16:00:97:ee:8b:f9:a6:78:cb:5f:
                    7d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:A2:D8:2E:AE:38:0C:FE:F1:F5:8A:26:8F:75:AD:8B:B8:76:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/77bc85c8-edcc-3e52-895b-c66bb08b2478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:49:b5:52:09:b0:e8:9f:1d:92:6c:84:d5:ac:42:64:29:
         a3:0e:d0:c4:79:14:ce:be:2e:9e:4c:bf:15:c2:2a:e8:41:56:
         23:45:84:ec:66:ea:f4:cd:b5:d0:aa:36:ea:18:e8:57:86:a3:
         ed:b2:ee:d1:33:46:dc:98:08:9f:4a:40:a2:a1:1d:a7:7a:d8:
         7f:80:02:7d:f3:4b:a0:ec:81:fd:81:50:84:43:c7:ad:85:12:
         df:70:56:17:5f:22:aa:7a:d3:21:ac:51:48:b7:b9:65:e4:10:
         01:99:5f:de:09:79:7e:70:60:be:fe:31:6a:19:22:95:39:f0:
         07:37:4f:36:73:d4:56:5b:c3:63:84:96:1d:32:03:b7:67:88:
         f3:e1:8a:b5:3b:5f:c3:de:4f:86:04:94:65:a5:87:35:9a:76:
         e4:c7:c9:ac:62:da:52:2c:30:ae:c2:28:ee:dd:5a:ac:05:60:
         b4:fb:99:8c:f8:07:6a:53:d2:dd:71:26:0e:89:ae:d4:42:3e:
         35:1a:03:24:d2:bc:b9:32:7a:5b:23:77:70:3e:7f:b2:cb:4c:
         06:c2:30:12:93:92:75:d3:c0:b2:9e:cd:b7:40:8e:8a:3f:af:
         f6:e5:7e:04:6a:5e:85:11:32:44:24:b2:25:d2:71:da:e9:32:
         1d:5c:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:38:20 2026 by rpki-client