Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
File:                     7af76982-96b5-37be-836c-3c4e67f26093.roa (raw, json)
Hash identifier:          hdUGGdDMZzrxMu98ATKKB6Xnx1DkzFd6XqCVJEEYoog=
Subject key identifier:   93:69:1D:20:93:1D:68:F2:14:D6:C5:4C:89:69:58:EE:7F:E6:C3:82
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F4975E0337EEA276598032E00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22781
IP address blocks:        2607:fb50:2000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e0:33:7e:ea:27:65:98:03:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=30909205-ac43-4e81-ad4e-c125e59e46cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:31:9c:31:cb:8e:d9:a8:70:24:8d:8d:2d:
                    85:e0:f4:97:b2:9b:f5:c5:da:61:98:37:7f:28:d0:
                    2d:93:ed:a1:56:b7:48:0c:f6:e3:78:89:56:41:2d:
                    8b:a4:36:ce:a1:fa:ea:8f:ca:47:bc:89:0b:91:ab:
                    d5:87:e1:4a:c6:eb:1e:c9:25:c3:d4:42:ca:06:c3:
                    bb:5a:7d:4b:32:15:d1:3a:02:b9:c8:99:d0:e9:16:
                    4c:ff:75:77:69:f0:db:5c:45:64:49:d8:80:7c:c6:
                    c6:fe:ea:7c:7f:21:22:02:87:51:91:34:18:1f:78:
                    53:c5:c7:74:05:01:2d:fe:cf:fd:af:b0:4c:dc:cc:
                    c2:5e:cb:90:65:1f:60:17:15:dd:16:27:90:3b:55:
                    dd:5a:8d:38:49:ed:19:a8:18:c0:ea:1d:e3:ce:57:
                    39:fd:c4:98:58:c9:c1:fe:a6:8f:6c:37:4a:bb:0e:
                    1b:1d:4f:f1:8f:84:4c:cc:f9:8e:0c:dd:35:e5:09:
                    ff:93:67:7c:14:c8:56:d4:07:45:15:bb:f0:6f:58:
                    34:da:13:ef:de:73:72:74:2f:09:36:ac:96:9d:fc:
                    61:97:ae:0f:ef:ae:28:d9:7d:ae:99:88:b3:aa:4a:
                    ce:6b:f4:52:a6:d5:94:04:c8:28:2d:f3:ec:eb:2b:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:69:1D:20:93:1D:68:F2:14:D6:C5:4C:89:69:58:EE:7F:E6:C3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7af76982-96b5-37be-836c-3c4e67f26093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:56:48:6c:a4:62:60:49:bc:4b:f1:1a:75:fd:8b:62:70:32:
         87:e0:c9:08:ea:23:1f:b2:7e:ad:f3:68:8e:b8:61:c0:c5:c3:
         c7:87:3e:aa:d1:28:3f:0e:91:5b:55:e9:8b:93:d5:aa:93:8c:
         e6:b5:0e:7c:4d:8d:7a:fc:b9:b9:01:67:6c:0f:70:94:00:73:
         14:90:74:7d:ed:7a:ac:80:9a:74:2b:e4:62:18:34:74:96:4d:
         bd:ce:e1:b8:d5:d8:7a:50:83:ab:b4:78:4d:e9:24:dd:24:06:
         53:cb:2a:7e:7c:28:2e:39:dc:c9:55:9c:1b:b2:f7:4a:2d:23:
         a2:0e:20:29:dc:b8:e4:9b:bf:8e:5e:b0:f1:7b:f9:ea:ef:f8:
         a0:03:11:4b:53:73:96:ec:45:b8:a8:ea:2c:c4:22:ff:c4:f5:
         3a:6a:71:47:96:81:ba:0c:21:59:29:e5:0a:63:fa:b3:d0:14:
         56:d0:e5:b1:f3:23:00:0b:fe:b6:88:33:92:ec:8a:41:c2:20:
         d8:f5:25:f4:f4:7d:90:b9:c6:b2:4e:0f:59:46:1c:bf:f3:f5:
         08:48:1e:60:f3:92:fd:4a:8e:c6:b5:b0:d4:27:69:ff:b9:ad:
         45:70:aa:47:8d:8b:fe:27:28:ea:8f:06:7a:b9:f6:18:6c:4d:
         e7:4b:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:58:17 2026 by rpki-client