Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa
File:                     edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa (raw, json)
Hash identifier:          rDRg6CYi9Ag3WC9lCpEGQfeqv8947+Uoi/Lm1M1Uzlg=
Subject key identifier:   A1:83:D0:5B:21:37:38:82:4F:78:B6:7E:F1:AE:2D:C7:D3:C3:18:0F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584F497D34FDBB414CC8211A1900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        2620:15c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:34:fd:bb:41:4c:c8:21:1a:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d155e0fe-7758-440c-93bd-754597c0de26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:22:02:ca:e6:43:0e:86:3d:54:50:d1:f9:
                    1a:a5:4c:c4:79:13:c9:da:e0:70:ec:35:a7:da:e8:
                    d5:31:57:e2:06:3f:ed:bd:b2:fe:90:c2:a5:d1:65:
                    83:d1:9f:9d:4d:87:16:c6:a1:29:c4:3f:bb:34:e1:
                    cb:47:48:5d:8c:58:60:a4:e9:7f:ab:7b:29:aa:1a:
                    d8:31:53:75:22:65:3b:8d:50:8d:63:88:d4:d2:5f:
                    ca:53:50:35:48:ec:00:a8:83:7d:2c:8c:57:c1:7a:
                    85:52:30:aa:e2:c1:b3:e6:46:8a:be:aa:0a:07:2b:
                    59:c3:b1:26:be:76:86:b8:18:f7:b8:af:2a:31:1c:
                    87:24:4f:da:f6:f1:06:09:67:1b:32:e7:69:cf:a8:
                    0b:6b:6b:9c:64:0c:79:ba:46:71:42:93:e6:72:72:
                    6c:fe:76:96:0d:d8:c9:52:1f:1a:ed:c3:d6:9a:97:
                    cd:f0:c9:4d:52:21:72:77:7d:cc:df:82:d5:99:3a:
                    cb:bc:79:85:6d:1a:9c:e8:2e:80:fd:68:40:05:9a:
                    25:65:41:14:69:d1:b3:76:f7:cc:82:80:3b:06:0b:
                    2d:36:bf:ca:de:04:25:95:15:a5:33:69:11:8e:5b:
                    07:85:17:21:1f:bd:32:5f:ee:46:33:2c:d8:31:ea:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:D0:5B:21:37:38:82:4F:78:B6:7E:F1:AE:2D:C7:D3:C3:18:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:15c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:90:85:1e:73:24:df:24:89:e2:40:d4:e8:11:59:ba:dd:8a:
         1a:7e:2b:9e:72:1b:9e:67:42:e7:4d:6e:ec:4e:57:e4:e7:97:
         af:c6:33:dd:77:55:65:2f:a9:c2:75:41:52:d6:0b:b8:fe:a2:
         38:e9:64:de:18:60:15:8b:a1:87:bb:b1:a5:7d:2e:f4:d2:be:
         de:c7:08:0b:40:de:b5:9c:46:80:e0:b3:05:82:e9:f5:b3:36:
         fe:d6:56:cf:fc:12:b4:77:5e:a9:55:0e:e5:40:93:14:22:96:
         32:45:f4:d7:28:37:33:84:8b:d9:be:1c:a5:b6:34:26:87:dc:
         ef:d7:be:5e:f7:50:25:89:ee:af:fe:17:c5:19:15:eb:90:97:
         12:70:81:bf:31:16:07:89:ab:ea:e8:23:2a:0c:6a:e4:47:4c:
         72:8d:fa:ad:94:90:1d:3c:cf:c8:f6:b1:23:1c:f4:ef:b5:ea:
         1e:7b:38:c4:7f:61:8a:af:fd:04:f8:88:14:5f:ba:c9:cc:4c:
         7a:9b:a0:b8:eb:40:45:b7:91:ff:42:f7:bb:69:ca:0a:cb:c3:
         0f:c7:ba:6c:4e:b9:41:52:70:67:1e:f7:c6:c7:b3:3a:28:cd:
         1b:7b:17:4b:db:bf:46:ad:a9:4f:c2:4c:d4:41:f6:bd:57:19:
         b8:45:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:55 2026 by rpki-client