Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
File:                     70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa (raw, json)
Hash identifier:          rB+QBeZbWKWcS7yh6LwnET8XwETuNiyqirosn/S/coM=
Subject key identifier:   AF:35:4B:30:E5:A6:D9:B9:72:C4:4F:6E:42:BC:E0:04:90:82:DD:24
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584F4975803582C21B0F76660090
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18672
IP address blocks:        2605:bb00:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:80:35:82:c2:1b:0f:76:66:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cc3b2595-e65c-4596-8222-e8229593f617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:91:3a:2b:66:6a:a1:11:40:17:b4:3f:0d:
                    55:e9:99:51:4f:1b:e5:59:9f:db:75:bd:d7:b1:05:
                    db:86:79:fb:33:54:b4:89:5c:20:d3:a3:37:7f:60:
                    41:64:28:83:c0:16:d9:aa:c1:42:8f:a1:35:f2:62:
                    ff:2d:18:d7:24:f2:ec:5a:30:4a:6a:dc:80:c3:54:
                    bb:ca:90:24:7e:6c:d1:a6:2c:7d:b0:f8:69:18:38:
                    ab:87:96:fe:c0:21:8c:15:f9:2b:01:5e:73:8a:64:
                    72:4c:e2:7c:a3:38:4f:22:6f:48:5f:bb:d8:bf:e8:
                    2c:75:a1:9d:4c:2c:d0:36:71:2e:53:7e:bf:20:92:
                    8f:03:e0:d5:97:b6:bb:a2:19:5a:3b:95:f6:8d:df:
                    d9:04:45:16:f3:07:e7:32:07:a2:da:16:79:b6:19:
                    32:2b:d8:71:c2:56:ac:bd:37:47:47:88:41:21:b1:
                    fd:1d:e8:2c:f6:4b:b7:64:e8:ec:f1:85:a5:de:c8:
                    28:36:e1:66:b3:e8:16:25:3d:0a:72:5e:8f:a3:1a:
                    97:86:49:15:70:de:95:a9:b4:60:44:31:f7:d2:3e:
                    1e:23:42:f6:70:a2:b1:3b:3e:69:21:ba:e4:29:76:
                    91:49:c7:0d:49:26:cf:dc:9d:d0:39:68:67:d0:cf:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:4B:30:E5:A6:D9:B9:72:C4:4F:6E:42:BC:E0:04:90:82:DD:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb00:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:65:9a:a1:72:3a:90:1c:74:9c:86:8e:53:03:02:10:01:
         cb:29:65:44:d9:95:7c:98:54:7f:d1:33:96:f5:57:51:24:a8:
         87:79:88:3a:4c:0e:7d:85:9b:85:ca:05:0d:59:bc:a1:f5:34:
         cf:82:69:9e:9f:6c:c9:f9:97:e6:9c:70:d5:31:85:11:79:6d:
         d7:61:66:c4:5d:f9:ae:84:fe:c4:2d:af:42:24:bc:3b:e6:97:
         10:e3:4d:c0:f8:23:0c:f3:44:18:d4:b1:5a:83:22:c5:a6:12:
         b6:cc:b2:42:1b:34:7b:3b:75:70:37:ce:06:02:0c:7e:e2:e7:
         5e:c4:97:7e:b1:87:12:65:2c:78:17:fd:7d:85:b6:a9:0a:a3:
         6c:51:54:9a:b6:4b:41:d5:af:e0:7f:8a:9f:70:c0:d7:4f:6d:
         79:2b:d6:de:73:a8:0e:eb:24:ad:6c:2c:42:cf:54:e7:7c:b4:
         8a:8e:c8:41:2c:66:17:8d:74:4d:1c:1d:65:03:26:05:a1:27:
         a7:a1:90:ed:11:ad:0e:e3:69:21:58:af:ee:5a:25:e9:b4:93:
         f2:a0:d5:c7:9c:89:c3:ea:b8:24:80:12:d6:ea:b8:ae:78:56:
         7a:91:a2:2d:3a:ae:d4:c0:7c:f0:2b:95:91:ab:fd:a3:c1:47:
         82:9a:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:06:02 2026 by rpki-client