Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa
File:                     5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa (raw, json)
Hash identifier:          XMP7mFiZa0J5dfvBvwqH2NbWk6uzSTYGB1svOcIFyP0=
Subject key identifier:   35:21:82:85:49:D1:1D:11:7C:1D:E5:AC:39:76:76:05:D2:FE:AE:B4
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584F6C5832AD4DBCB752C4809F00
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     31898
IP address blocks:        2603:5000:2040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:32:ad:4d:bc:b7:52:c4:80:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=9790c68c-a388-4f2e-8098-c3514a289f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:c3:98:60:24:60:75:2e:d3:5d:13:27:5d:
                    71:58:02:3f:e9:15:5a:53:b4:2a:f5:33:74:87:a0:
                    63:8f:e0:3d:c8:86:89:4e:86:01:94:b3:f6:8f:fd:
                    a0:86:30:2c:e4:72:6b:b5:41:f7:b9:fc:0f:d5:bc:
                    c1:33:d9:71:05:0c:3a:86:1f:ec:64:fb:a1:41:0c:
                    e3:96:9a:b6:a2:ee:13:f0:64:f0:4f:24:8a:27:92:
                    71:5a:c2:52:f3:28:b7:27:9d:81:70:65:1e:15:2d:
                    61:ef:57:26:5f:f4:d8:e5:7b:cc:7f:07:3d:8b:6d:
                    79:46:50:46:ec:60:98:32:dd:9b:e9:48:96:fe:ba:
                    54:18:a0:2a:e6:a0:c8:af:51:29:0a:96:41:de:91:
                    2f:87:d4:2b:77:40:89:42:7b:ec:b5:cd:4c:fd:aa:
                    9a:1a:4c:55:79:83:99:1a:06:75:77:5b:b2:50:c2:
                    93:60:2c:31:59:07:da:cc:9e:bc:07:ee:4f:cf:77:
                    64:fd:70:0c:ff:ef:59:dd:83:5f:ae:c4:94:33:63:
                    9e:c5:c0:2b:b1:5a:24:15:e8:4a:6c:7c:ff:49:3c:
                    5e:bf:c6:e6:59:b2:60:08:c8:5d:f3:92:e3:2b:ee:
                    6b:57:f8:a7:fc:b9:65:4f:fe:ce:5d:7a:e4:b7:7a:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:82:85:49:D1:1D:11:7C:1D:E5:AC:39:76:76:05:D2:FE:AE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:2040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:57:63:79:bd:10:d1:44:ee:a3:81:ba:00:95:98:3c:85:
         5f:79:c6:28:ba:2c:6f:18:2e:9d:74:de:74:0e:a2:ea:0e:d0:
         58:7f:62:48:20:64:bb:8b:0b:21:5b:e1:7c:ef:32:a2:53:c4:
         9a:6c:84:6d:1c:57:12:87:e1:06:76:28:f3:14:48:e4:5d:06:
         01:43:b5:f1:f1:c9:04:18:48:47:26:c8:95:66:d3:e9:a3:45:
         5c:14:18:6e:c6:0c:3d:ee:9c:75:8c:ac:23:d5:90:e3:f4:fd:
         a3:37:f9:a5:a1:5c:c4:cb:39:64:6b:9f:07:88:c3:64:98:86:
         32:dd:57:0a:9d:3c:05:f9:ab:06:09:cd:b5:0c:94:b5:f8:f6:
         d8:7b:0f:32:06:e8:e9:bd:d4:6c:51:6c:3b:20:ad:b3:13:22:
         57:ff:ec:b7:54:86:c3:64:54:63:8d:8d:da:92:84:0f:25:05:
         1f:34:68:80:73:13:14:5f:22:b7:f5:2d:44:73:5a:b5:b0:13:
         77:dc:25:30:4b:64:47:33:56:6e:f0:5e:09:63:34:16:0b:20:
         36:77:76:34:d4:ec:3a:ed:5d:19:e1:3c:48:56:e0:1a:e1:af:
         65:36:b5:9c:b4:4d:e2:61:1a:57:dc:e2:6f:15:23:95:6f:b1:
         8d:15:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:05 2026 by rpki-client