Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/66fa1a90-946a-3294-96cf-c3356911307d.roa
File:                     66fa1a90-946a-3294-96cf-c3356911307d.roa (raw, json)
Hash identifier:          M5luWgw15YAj7LAcGszxsdm2SxpcvPp6jrm8zbOjSyg=
Subject key identifier:   5A:2C:20:8D:35:A6:D0:9E:32:47:ED:ED:CE:BA:26:28:49:28:DA:8D
Certificate issuer:       /CN=c48613e9-8730-4ebf-aaee-33654a980136
Certificate serial:       010D0C9F4328584F15CD02CFD9C40C8EC9BFB5C0
Authority key identifier: C1:7C:BE:BA:6D:03:C4:37:C4:90:75:3A:B0:1A:0F:92:7A:B9:D6:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/66fa1a90-946a-3294-96cf-c3356911307d.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     398638
IP address blocks:        2605:dac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/c48613e9-8730-4ebf-aaee-33654a980136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/c48613e9-8730-4ebf-aaee-33654a980136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:02:cf:d9:c4:0c:8e:c9:bf:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48613e9-8730-4ebf-aaee-33654a980136
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=f66a4296-2bed-4043-bf98-f374e7fbb36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e2:78:56:6c:42:35:a5:50:84:3e:c9:6f:a7:
                    ef:de:e3:98:c8:8d:6f:74:7f:c5:a2:b7:cf:b1:08:
                    45:16:e1:51:98:f0:51:7d:14:dc:68:0c:3c:24:0e:
                    13:21:b2:61:7a:16:86:47:66:96:3f:57:e0:92:7b:
                    01:c8:31:4b:3e:da:db:08:15:f3:9a:ac:9f:b7:4c:
                    3e:85:ab:25:b1:76:f7:6c:49:9e:fa:96:73:db:42:
                    09:2a:c1:01:34:e1:62:71:39:3d:5f:35:3b:b9:7b:
                    6e:b8:5a:94:6b:23:ce:6a:63:b4:cc:e2:51:f2:d8:
                    67:03:c8:17:3a:6a:91:09:a9:77:ec:c1:48:c9:44:
                    f4:bf:d9:1f:29:59:02:af:f5:21:3f:5f:dc:62:70:
                    04:d4:f2:70:ef:7a:f4:a5:58:2c:05:70:0e:82:a8:
                    53:4e:4e:bd:3e:64:45:61:5c:7c:18:ad:d0:16:ad:
                    03:c5:35:e4:7f:0f:cd:9f:24:53:f4:12:58:45:53:
                    29:78:89:81:fc:6d:4d:2f:1d:24:67:e3:d3:2f:68:
                    2e:cc:9d:b4:44:0f:03:3e:44:eb:35:7a:c5:e7:a6:
                    b3:bb:65:a7:8f:83:c4:07:a5:9a:a8:54:6a:f8:2c:
                    27:42:90:59:20:4c:39:c2:ae:b8:18:ae:91:71:1c:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:20:8D:35:A6:D0:9E:32:47:ED:ED:CE:BA:26:28:49:28:DA:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/66fa1a90-946a-3294-96cf-c3356911307d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136/c48613e9-8730-4ebf-aaee-33654a980136.crl

            X509v3 Authority Key Identifier:
                keyid:C1:7C:BE:BA:6D:03:C4:37:C4:90:75:3A:B0:1A:0F:92:7A:B9:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c48613e9-8730-4ebf-aaee-33654a980136.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:33:0c:0d:5b:f3:a4:3b:ff:6b:d1:0e:5b:fe:07:29:a0:
         6b:ab:10:2e:73:c4:9d:48:bb:b0:1b:6d:cd:e4:f6:9a:82:cc:
         57:54:26:d0:79:3f:9e:07:76:8f:39:c4:f3:6a:01:bb:23:4d:
         df:b2:ea:95:41:aa:96:d3:7e:54:47:b3:87:11:da:cf:f8:06:
         17:5f:44:b0:04:8b:98:a5:5b:e2:9f:84:ac:15:32:26:16:92:
         fd:94:2d:35:a9:2d:56:3a:02:62:67:71:1f:28:c2:7f:51:9d:
         d7:c6:62:fd:91:af:e9:16:38:6d:11:bd:8a:04:ee:1f:a1:bc:
         a6:b4:5a:4f:6a:e9:bc:b8:9f:02:18:0c:be:00:3f:e2:87:0a:
         02:a2:2b:3d:08:1a:d0:71:2e:8a:96:3f:68:41:38:87:4c:52:
         35:18:8c:46:6a:a4:26:ad:6b:fa:fd:5a:cb:3c:07:66:4e:78:
         30:5f:96:60:d6:11:2d:27:96:41:91:6a:70:70:46:39:48:84:
         80:dd:74:d6:9c:36:56:f5:31:cd:a3:72:a3:a6:72:87:a7:6f:
         d7:38:f2:df:16:56:e5:6d:22:5f:b0:42:e5:78:16:a3:b6:95:
         73:b7:bf:af:16:1b:5d:24:22:1f:1f:b0:af:8d:b2:cf:98:4a:
         d7:d2:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:48 2026 by rpki-client