Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
File:                     2455ae16-e22c-38fe-8c06-719fb9bee946.roa (raw, json)
Hash identifier:          m7x+7hGHnn9AkhC/dCL24WB/cvlI11Q+ymUXl5fpRvU=
Subject key identifier:   E1:6A:2F:B2:AD:4A:D6:99:F0:B5:36:3E:80:99:57:56:92:ED:3C:BB
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584F49773D296974EB4E1112B670
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49
IP address blocks:        2610:20:6000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3d:29:69:74:eb:4e:11:12:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=07732bdf-11e8-40e6-8eef-9e6250245bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:2d:c9:e9:4f:61:f6:75:3b:27:86:57:34:
                    bc:ae:ab:07:49:8b:3b:91:22:6f:6c:71:c8:4f:3b:
                    2f:e4:ab:fd:a5:01:36:e4:30:63:18:82:48:69:dd:
                    0d:f4:cb:8a:9d:04:df:fa:c7:10:8a:b5:89:9f:d8:
                    78:dd:a3:b2:62:fd:f6:83:a6:03:bc:92:59:8b:35:
                    39:3c:a0:cf:c4:78:a9:6d:3d:7f:eb:18:d3:04:3a:
                    d1:44:98:84:d8:9c:a5:b7:47:54:04:26:1d:b7:6e:
                    d5:7a:7b:d3:ab:6d:34:8b:ce:77:fb:60:a2:fb:33:
                    c7:63:9c:c0:3a:cd:19:5f:d3:eb:76:07:85:33:c7:
                    52:12:7d:32:4f:2b:1a:96:4c:b1:be:f6:bf:5c:6f:
                    5d:55:49:39:58:1b:63:39:76:d8:7f:57:42:96:62:
                    62:3a:5e:ed:25:30:2e:87:4d:b0:a8:4d:3c:9c:2e:
                    df:16:dc:06:92:63:16:41:90:a2:13:9a:b3:6a:23:
                    74:05:82:ca:35:8c:92:96:44:d4:77:61:57:89:2b:
                    2d:a0:e3:69:d2:6b:c8:41:1c:a7:22:e1:4a:6a:25:
                    d1:64:07:95:0c:79:bb:fb:bc:30:84:9f:9a:6f:ed:
                    db:cf:0b:8b:f7:24:29:41:29:72:50:07:a9:50:f8:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6A:2F:B2:AD:4A:D6:99:F0:B5:36:3E:80:99:57:56:92:ED:3C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/2455ae16-e22c-38fe-8c06-719fb9bee946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:10:67:ca:08:d6:e8:3c:cd:4d:d5:40:00:66:f9:fc:f3:
         87:bb:36:a4:ca:0b:6b:7f:09:fb:af:c5:f3:12:26:7a:75:e3:
         de:e4:f8:60:7c:13:b6:73:b5:b9:58:fc:c5:c2:c4:0e:a5:5c:
         ea:b1:10:1f:84:80:e6:db:bb:32:2f:12:8c:a8:19:c6:28:8e:
         3a:90:dc:bd:22:22:cd:c2:c1:1d:0a:9a:f8:86:ba:61:cf:65:
         2c:79:50:61:c9:0e:29:e3:1b:a5:d8:1c:09:62:32:1b:77:df:
         8f:05:af:41:02:8d:13:41:76:f5:d0:d9:45:e5:ee:e8:ac:90:
         67:e1:09:19:fc:64:eb:a4:89:fa:61:60:8f:ee:9a:9b:6c:f0:
         5e:5e:3c:85:a9:11:6a:53:b7:ab:03:38:1f:3c:99:cc:ab:ff:
         db:f2:39:59:a0:be:d0:f1:4e:90:ea:7a:1f:a7:6c:c3:b2:47:
         74:bf:7f:94:bd:c8:85:70:83:b4:6f:15:f8:fe:cc:97:a6:a3:
         5a:93:cb:18:c1:77:a0:59:71:d2:a7:d7:29:28:bf:b8:aa:e9:
         e6:fe:19:e9:47:a4:bf:f5:cc:b3:dd:08:df:80:e0:dd:35:68:
         15:ed:1a:73:c9:f2:40:54:e4:0c:11:44:70:56:e5:54:b3:3c:
         c4:63:f1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:34:39 2026 by rpki-client