Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/da17a72a-9032-3c28-9fe6-ff62e33999d6.roa
File:                     da17a72a-9032-3c28-9fe6-ff62e33999d6.roa (raw, json)
Hash identifier:          VknYFw77dXO3cr2zPGZZS2mInQxkOwAry7hcH2fywdE=
Subject key identifier:   92:55:58:F4:4D:85:78:1C:E9:89:4B:50:4F:E6:8C:5A:C2:FC:29:05
Certificate issuer:       /CN=61076595-f39c-462e-b686-d3fcac2df32b
Certificate serial:       010D0C9F4328584F4C3D53BC2540B4BCC2250080
Authority key identifier: 34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/da17a72a-9032-3c28-9fe6-ff62e33999d6.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     36222
IP address blocks:        2607:a300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:53:bc:25:40:b4:bc:c2:25:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61076595-f39c-462e-b686-d3fcac2df32b
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=9ae5d1bc-9aca-4557-b116-b77025bf9f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:2c:ba:7e:e8:3d:28:1e:d2:8c:63:f3:94:
                    62:0c:94:b1:3e:67:8e:e0:d8:3c:25:25:45:c0:6f:
                    69:f6:d9:3d:f5:2b:69:22:ba:63:35:04:39:0c:cc:
                    fd:04:70:5e:7a:e3:00:bc:e7:90:73:fc:9f:38:69:
                    a9:b4:b0:da:3b:b0:21:02:5f:a4:31:ac:bb:a9:2d:
                    db:e7:e4:00:b5:97:98:50:1c:94:3e:21:b3:72:f2:
                    ac:f1:f6:45:8b:08:df:ef:1e:05:55:38:aa:f2:74:
                    59:b6:ab:c2:fb:7c:c7:62:06:ef:c4:95:e6:f9:2d:
                    a5:6c:7d:a1:f2:0c:64:61:ea:51:d2:17:9c:65:bc:
                    ab:cb:f5:9f:d7:22:a9:bc:4c:80:cf:8e:4f:e5:73:
                    ad:a9:27:f4:c5:05:3f:41:6d:13:32:37:e4:5b:75:
                    4a:b7:b1:f5:28:77:c3:12:79:52:c9:22:86:c7:45:
                    8f:65:8d:90:98:3e:ed:cd:9f:fc:e4:10:65:7d:43:
                    22:b3:24:49:2e:3b:54:7f:95:d9:cc:53:a3:e8:65:
                    80:38:5b:6e:0b:e6:3b:e9:99:bb:ef:f2:8d:9b:d9:
                    e8:dd:b6:59:ae:f1:c8:92:c7:ab:e8:96:a2:bd:5f:
                    aa:00:cf:10:53:48:24:5f:93:46:51:a5:a8:92:59:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:58:F4:4D:85:78:1C:E9:89:4B:50:4F:E6:8C:5A:C2:FC:29:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/da17a72a-9032-3c28-9fe6-ff62e33999d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:0d:49:13:de:a9:55:95:2d:60:8c:a7:40:3a:02:8a:96:
         ed:29:5f:d4:c0:cd:5e:4b:86:5d:82:97:35:1d:bb:bf:56:d9:
         29:fc:90:69:74:36:76:10:3c:4f:f5:7a:f3:af:04:35:35:ec:
         3d:51:fb:ea:24:c4:62:5b:27:c8:6a:24:49:11:b8:b5:44:eb:
         4c:5b:5b:62:4a:24:05:d4:43:91:8d:2d:5b:3d:55:5a:28:e3:
         04:b3:41:c5:0a:fc:e9:47:5b:1b:1e:07:78:ef:b5:af:e6:77:
         69:05:88:ef:ba:ca:78:43:66:85:f8:95:c2:74:75:6d:0d:2f:
         56:a4:50:13:75:6d:0e:6e:2f:df:20:59:d6:6a:3f:6d:e8:53:
         18:0e:a3:5d:69:92:d8:5c:ed:b6:f0:70:2b:1d:eb:cb:6b:5d:
         d6:17:26:de:6a:5f:70:fa:df:76:33:77:e7:ad:58:c1:db:79:
         ed:d3:66:6c:db:c4:80:ea:62:3f:e1:0c:46:58:b6:a8:8c:d6:
         20:f4:27:90:4e:30:2c:cc:60:5e:fc:76:a1:15:bf:73:fe:a7:
         bd:af:50:08:5a:d6:9c:de:8b:ec:49:eb:a3:7f:90:a8:e0:eb:
         0c:fa:60:ff:23:7e:40:01:e1:46:da:02:0e:88:9d:0d:56:e4:
         c3:9b:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:17:53 2026 by rpki-client