Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa
File:                     99c569cb-49e3-3b55-8f14-63e32d1466d6.roa (raw, json)
Hash identifier:          tJd5hp7wbdxQP8lSdQ8gS73r3GZ5L4Y26Wn2s0YZO7Q=
Subject key identifier:   6A:9C:5A:6B:D6:94:74:DE:D7:D9:D3:35:A7:4F:52:8B:C6:8C:61:30
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584F549D6BFCF50FFC4DDF8CC1C0
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     32771
IP address blocks:        2620:111:800b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6b:fc:f5:0f:fc:4d:df:8c:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=1c4bbd92-481c-471b-8812-95caa5f77a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0c:34:27:c2:d5:22:b6:0f:ec:14:a2:95:cb:
                    db:bd:90:60:5f:a1:b0:ce:06:ad:0f:42:3b:f4:7c:
                    69:fb:8a:98:11:c4:ea:88:65:9e:55:2f:46:71:aa:
                    a2:2c:80:de:ea:ba:95:e4:5c:ab:29:58:34:52:0a:
                    f7:ed:3e:d7:7a:6c:f4:0c:db:00:dc:8a:b3:df:51:
                    58:9e:54:02:6c:43:e4:b4:dd:6b:ee:95:87:13:d6:
                    79:b0:ee:03:99:04:10:ba:75:12:25:f1:f3:d9:43:
                    9c:5e:2c:8b:27:d6:d0:90:3e:d6:6a:90:b8:12:d7:
                    a3:fe:1a:7c:f0:ea:3e:e8:1a:ee:b5:b2:44:2d:4e:
                    24:10:94:32:43:1f:1c:15:5d:15:ae:50:5e:2b:79:
                    d6:3b:42:7d:db:de:1e:11:2d:2e:de:67:14:d8:6a:
                    cb:d9:e1:0f:20:fb:0a:43:b3:77:e2:12:17:92:fe:
                    2e:86:9c:96:94:15:b3:3a:01:28:2d:d2:52:dd:74:
                    08:b5:18:59:62:5f:37:69:15:3f:be:42:b5:bf:89:
                    d0:58:5f:4c:91:eb:1c:61:2f:19:e3:69:35:d6:76:
                    3b:a9:1d:28:c7:d2:16:79:09:16:ef:ca:ac:fd:a1:
                    ee:5e:30:df:27:ba:fe:2b:9a:2f:0a:f8:08:4a:46:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:5A:6B:D6:94:74:DE:D7:D9:D3:35:A7:4F:52:8B:C6:8C:61:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/99c569cb-49e3-3b55-8f14-63e32d1466d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:80:92:52:11:9c:ed:d6:a6:b6:ac:24:4d:7e:af:88:5e:
         a0:26:77:53:95:74:85:59:7b:a3:56:19:30:fa:68:cf:df:1d:
         23:9e:e4:5c:7f:b4:b3:1a:5a:fa:c8:9f:96:4f:0f:df:a7:19:
         65:d2:bd:23:3f:26:db:7a:f8:75:b6:9b:f0:a0:39:87:a9:65:
         09:0e:d6:e7:92:11:ae:0d:68:d1:46:2c:a6:be:6e:b3:16:c9:
         e5:98:fe:ec:a4:8d:52:8a:1d:8e:9e:42:27:7a:4f:a0:d2:57:
         98:29:cd:cf:79:ea:fe:27:55:b0:fa:72:68:e5:8b:c8:58:44:
         ac:df:9d:ff:a5:a2:1a:17:44:cb:20:1e:d6:93:af:46:5c:1d:
         68:ef:d3:50:3d:d6:13:2e:da:e4:93:ef:6a:92:de:fd:04:57:
         df:a5:c8:8a:a9:62:52:79:65:6a:8a:4d:cd:98:4c:19:84:91:
         90:70:17:07:e7:04:2b:57:76:d1:76:0c:2b:72:cc:b4:d0:e0:
         93:85:01:41:78:0a:af:bd:25:17:15:c1:de:e8:a6:68:10:16:
         4f:81:a8:67:91:05:f2:8a:e6:78:06:c3:9c:44:80:60:09:01:
         91:cf:dd:30:ed:b9:7d:75:41:f8:37:2a:8a:19:ef:02:6b:62:
         db:6d:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:33:49 2026 by rpki-client