Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/df490bd0-0779-3f5f-bb40-4a405208be8e.roa
File:                     df490bd0-0779-3f5f-bb40-4a405208be8e.roa (raw, json)
Hash identifier:          rFEC9vbn7borFoeEqh0kg4MqZf/PUQgQKW4W+cgrhEg=
Subject key identifier:   EA:A9:DA:21:0F:B8:A1:A8:93:18:1D:9C:75:CF:72:F3:9D:70:61:E4
Certificate issuer:       /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Certificate serial:       010D0C9F4328584F4974E3925626FE92F2790A80
Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/df490bd0-0779-3f5f-bb40-4a405208be8e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32913
IP address blocks:        2606:c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e3:92:56:26:fe:92:f2:79:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=73ff7908-562d-4963-bee0-85f9f29d62fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:c3:d4:42:1d:32:f8:a0:9c:a3:c5:a0:af:
                    2a:4e:77:49:17:5a:bd:9a:4a:4b:e5:8d:18:03:f8:
                    79:68:70:12:1a:88:02:8a:53:a9:ba:83:b7:89:25:
                    b4:d2:ab:4b:04:53:97:ee:f2:67:10:4c:10:07:7c:
                    51:5f:24:2b:c0:ad:42:ed:51:9e:f5:2f:38:1c:f8:
                    f8:22:b7:99:a4:e6:d4:db:74:e1:34:60:58:31:a5:
                    c2:65:22:eb:8c:05:c1:d8:5a:c2:1f:ca:79:52:d4:
                    2d:76:36:dd:b7:c7:85:7b:1e:09:f7:dc:d3:f1:92:
                    89:60:dd:70:80:02:68:07:55:61:f6:25:1c:8b:14:
                    02:a1:8d:17:6c:cd:7d:20:23:f2:46:95:3e:96:6b:
                    85:21:63:9d:31:47:c0:5a:00:99:04:8f:4f:b1:c9:
                    84:02:17:9f:59:5d:e8:17:b1:2f:cb:84:60:01:98:
                    a9:0f:a6:4e:bb:b6:67:cc:d4:a2:a1:28:b8:0d:f9:
                    b4:a0:9f:55:6a:92:df:95:b5:0b:34:4f:34:8f:56:
                    0f:08:6a:45:99:c7:2d:ea:66:cf:5c:eb:16:8b:b1:
                    4e:9d:27:f8:61:d4:3b:ba:50:7f:3f:40:5a:88:cf:
                    56:71:53:91:19:c5:4b:f9:d6:53:21:c2:19:bb:8b:
                    a3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A9:DA:21:0F:B8:A1:A8:93:18:1D:9C:75:CF:72:F3:9D:70:61:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/df490bd0-0779-3f5f-bb40-4a405208be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl

            X509v3 Authority Key Identifier:
                keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:a5:fd:d6:b9:57:1a:22:80:ab:ff:25:8b:7f:29:b6:76:
         dd:31:b1:c0:ea:6d:fb:0c:71:2b:eb:8f:74:36:59:af:26:e3:
         32:67:94:72:b1:b3:d0:9e:b6:72:fb:16:84:27:0c:ed:4f:e0:
         0b:5e:d7:da:55:e6:77:c5:3b:b4:9b:20:09:e8:87:ba:a8:dd:
         cd:83:0f:0f:05:fc:10:7d:c1:b2:38:d0:fa:6b:74:cc:2a:86:
         80:96:c3:68:aa:19:46:b1:50:88:31:90:16:fe:a8:34:65:04:
         22:3c:3d:15:d6:b7:c0:88:03:28:22:bd:10:05:ad:7c:8b:ca:
         db:ee:fd:2b:f2:f4:b8:3f:5a:f9:75:99:84:6b:da:13:0c:eb:
         37:ef:39:7f:6f:a5:6b:32:d9:cf:36:9a:03:e5:e6:83:fb:15:
         f1:d8:e0:80:d6:1f:93:06:49:00:9b:16:3b:21:0c:74:a5:1a:
         e8:26:a3:8e:bf:9d:ee:cd:86:92:e0:e6:f4:14:3f:c0:da:e0:
         59:97:e7:cf:6d:02:fa:95:11:a9:64:9b:d3:b9:94:f3:41:7c:
         a0:71:65:4d:73:c4:24:60:06:0c:e9:08:aa:62:64:a6:1f:94:
         60:d1:47:fc:d9:a0:e5:60:e6:ee:ea:da:88:40:1e:b9:06:6c:
         b2:a6:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:58:27 2026 by rpki-client