Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3/a1b84b5b-25d9-3ebe-aaee-2c61670313f3.roa
File:                     a1b84b5b-25d9-3ebe-aaee-2c61670313f3.roa (raw, json)
Hash identifier:          YpyzEYukFT2x/GPV8ZvBRk8lCEHqxCMK5kQiwF0Bz7A=
Subject key identifier:   66:3E:21:B4:2A:A5:0E:4D:9F:8B:63:7A:72:97:2B:03:93:D7:AB:71
Certificate issuer:       /CN=5007ffb2-c78f-48f2-ab25-7670cd1c26b3
Certificate serial:       010D0C9F4328584F497297DE4FD3FBE76AD59280
Authority key identifier: B6:52:DD:A1:C1:E1:1B:8E:44:F0:4B:BF:09:1F:3A:31:32:60:17:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3/a1b84b5b-25d9-3ebe-aaee-2c61670313f3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402739
IP address blocks:        2606:c1f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3/5007ffb2-c78f-48f2-ab25-7670cd1c26b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3/5007ffb2-c78f-48f2-ab25-7670cd1c26b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:97:de:4f:d3:fb:e7:6a:d5:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5007ffb2-c78f-48f2-ab25-7670cd1c26b3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1465600e-2035-40eb-8857-5aeb34eb8ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:5c:4b:35:9d:81:eb:5f:ed:08:86:c6:97:
                    a2:3b:c5:23:5a:10:74:4a:0d:93:6e:72:be:62:b1:
                    91:e9:4d:5d:0b:83:8f:f1:ee:98:37:e6:cd:75:a4:
                    f1:19:95:fd:f4:23:48:48:21:7a:ce:98:a9:48:55:
                    b0:da:c2:80:59:db:aa:f1:8b:a7:0d:00:2c:d9:0a:
                    51:67:0b:f8:b5:91:2f:3c:2f:51:24:99:ae:e1:b8:
                    f9:1c:e9:20:ba:04:34:e5:f0:83:6b:5d:0b:a8:bd:
                    c5:e2:1a:3a:f3:2b:8d:e1:1f:14:7a:c1:62:03:45:
                    eb:ad:3b:ec:99:d8:f6:64:ea:76:3e:48:3b:56:62:
                    fd:42:e8:ba:99:13:d1:06:e0:7b:79:84:25:10:fe:
                    9a:06:a5:c0:34:bd:95:2f:9d:6b:48:b2:d5:bd:ee:
                    87:6a:23:1d:26:14:d2:46:68:5f:cd:18:93:a5:a3:
                    99:f3:4a:ce:57:7c:5b:fc:b8:14:c5:a8:9c:a3:69:
                    a1:77:05:46:ad:90:e4:e1:01:55:8a:e7:f5:92:69:
                    58:d2:78:dc:a2:04:0b:90:07:b1:7e:aa:2e:2a:d7:
                    92:6e:b9:16:db:1b:e7:30:1b:00:e6:ef:41:83:28:
                    13:d9:91:16:47:46:e6:eb:ab:d5:86:3f:fa:16:0d:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3E:21:B4:2A:A5:0E:4D:9F:8B:63:7A:72:97:2B:03:93:D7:AB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3/a1b84b5b-25d9-3ebe-aaee-2c61670313f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3/5007ffb2-c78f-48f2-ab25-7670cd1c26b3.crl

            X509v3 Authority Key Identifier:
                keyid:B6:52:DD:A1:C1:E1:1B:8E:44:F0:4B:BF:09:1F:3A:31:32:60:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5007ffb2-c78f-48f2-ab25-7670cd1c26b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c1f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:0f:e9:51:49:fe:bd:a3:b9:81:58:1d:51:2f:ac:c4:4a:
         d7:88:cc:f2:fe:9c:c4:86:5b:a8:c6:81:07:5d:6e:de:9d:3f:
         74:24:47:74:4f:4f:ed:b0:d1:4d:2f:53:2f:c9:7f:e0:7e:5e:
         27:86:fc:ad:cc:f9:ae:ef:e5:2d:85:e8:bd:c4:64:2e:9d:fe:
         38:42:79:ba:35:87:70:2b:df:d3:b7:ab:34:67:a2:1b:ae:f0:
         c2:c7:66:c9:7d:7d:b7:77:ad:fa:55:80:bc:fb:f4:eb:7f:7b:
         da:f3:44:47:17:c8:e8:b6:bf:ba:e3:b0:ad:fb:ea:53:ef:73:
         52:f9:27:80:6e:54:cb:92:fa:58:2a:d5:c0:e8:f0:a7:3b:fc:
         70:07:92:2b:8d:78:08:a0:ba:ec:69:2a:2f:fb:43:45:e9:44:
         1f:5d:8e:06:af:7b:67:8c:60:3f:46:30:b8:f4:b9:ef:b0:0a:
         3f:bd:81:5d:8a:42:27:00:d4:cc:f0:da:a0:48:e6:11:e6:96:
         b6:88:15:2a:3f:7b:ee:99:d7:43:d3:ab:bb:57:18:16:42:61:
         8b:e4:34:cf:4b:6c:ae:bb:2a:1b:db:3f:8f:ca:45:c0:1a:fe:
         8c:20:be:9b:d0:2f:02:99:60:ca:63:0e:45:32:b3:cc:ca:f1:
         d3:1b:68:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:52:32 2026 by rpki-client