Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
File:                     1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa (raw, json)
Hash identifier:          oNnyXPqwVfywYKYrZ7cS624lllWITLOh3rkbv7uPVHs=
Subject key identifier:   18:CF:A7:F2:39:11:16:A7:DF:5C:FD:A0:5F:CF:F2:D8:A9:A6:B6:FD
Certificate issuer:       /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial:       010D0C9F4328584F497640DF892CB558DB8DBF80
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55230
IP address blocks:        2604:c580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:40:df:89:2c:b5:58:db:8d:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4c49b037-c9d2-40a1-9f3e-da8e43256fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:de:bd:ac:81:c4:55:d2:ba:0e:06:8a:58:
                    df:8b:0b:8a:93:82:22:13:14:d5:56:89:88:a1:43:
                    b0:c6:27:dc:d9:27:91:1e:a0:5d:4e:e8:3f:54:4a:
                    b0:51:c5:78:7e:df:6b:a0:e7:da:5c:4b:e3:8f:b5:
                    d0:ec:f6:a9:ce:68:4d:de:d6:77:1d:9d:2c:b8:ea:
                    3d:eb:17:a7:c3:37:3e:47:ca:79:0b:a1:aa:45:ef:
                    a9:5f:35:ba:ba:b3:b8:ff:2c:64:2b:c9:61:17:26:
                    be:96:09:76:ea:ea:9a:c0:d8:19:78:29:67:b6:78:
                    ea:80:b5:0c:bc:dc:b0:a3:ae:b1:bd:d5:70:b8:06:
                    a1:e1:4e:7c:02:da:11:9e:92:e1:df:a8:39:fd:03:
                    0a:9a:47:10:a4:23:39:9f:c4:ee:af:7a:6e:64:3a:
                    74:cd:68:03:31:62:ce:c6:d2:cb:a8:b9:75:a0:f9:
                    f9:b0:d0:eb:c0:65:11:26:42:84:eb:51:f1:ca:bc:
                    8e:e4:b7:f4:3b:a2:5a:92:d1:75:99:25:9d:3d:54:
                    52:85:b9:55:d4:f3:b1:78:e2:dc:4f:2d:fa:40:6b:
                    3f:c0:dd:e9:16:01:c7:ac:8c:ff:35:37:2e:34:29:
                    e2:52:4b:56:c3:b8:36:e7:39:97:2a:f2:ff:a7:50:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CF:A7:F2:39:11:16:A7:DF:5C:FD:A0:5F:CF:F2:D8:A9:A6:B6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:51:84:6f:4a:9f:63:17:ee:07:b1:7c:39:4a:86:cd:75:1e:
         4f:1d:20:e1:5f:75:8a:80:49:f1:3d:be:5a:56:1f:ef:91:86:
         08:02:85:3e:5e:fc:40:e6:49:51:3c:67:ed:72:a7:cc:7b:19:
         fa:b1:bd:f2:8f:53:5f:90:29:a3:b6:3c:c4:96:37:21:81:17:
         7d:c9:ef:35:99:b9:ae:a6:cb:84:6a:e3:9b:a6:7f:93:f9:a0:
         89:7f:70:41:cc:a3:b3:b6:52:de:77:4b:01:c3:f2:be:29:f2:
         c7:b9:bb:8a:bb:61:89:f8:a3:61:dd:11:9a:4d:45:8e:71:0e:
         4b:30:a5:b1:0b:56:7c:c7:e0:ec:90:c9:0b:99:40:b0:80:71:
         ae:0f:d9:df:15:8e:97:1b:ee:08:78:67:dd:86:a2:af:3d:c8:
         b4:24:f1:0c:ec:5e:c8:ca:67:04:15:38:92:e3:6b:e7:79:40:
         1b:b9:37:17:f9:af:a9:9d:89:22:f0:0f:a1:7b:74:89:6f:6a:
         f3:83:a9:a2:83:fa:4c:09:39:76:6e:d6:58:07:84:63:77:c4:
         39:ff:28:52:85:db:c2:ee:5c:3b:92:bd:6e:28:e9:18:7e:2f:
         9c:ec:59:b3:4c:1c:70:db:8a:dd:ea:88:99:c0:3e:fb:39:c5:
         25:4b:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:40:00 2026 by rpki-client