Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d/b3fef183-b494-3f77-8636-6b697adccab0.roa
File:                     b3fef183-b494-3f77-8636-6b697adccab0.roa (raw, json)
Hash identifier:          MJQgmFOPkWHXQDOUubwU+49kJE6C4WJ0O3H9uppDXPA=
Subject key identifier:   3E:7B:86:69:10:EF:D6:AC:E7:03:5A:6E:63:DD:07:76:63:46:72:4A
Certificate issuer:       /CN=4625e716-fb61-4a3e-b87e-7ae79d90564d
Certificate serial:       010D0C9F4328584F34827B2080B8506FC4ED4800
Authority key identifier: 55:4B:35:9D:BD:F6:7C:32:12:30:67:5C:E7:0F:31:D7:A6:68:08:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d/b3fef183-b494-3f77-8636-6b697adccab0.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     22644
IP address blocks:        2605:2c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d/4625e716-fb61-4a3e-b87e-7ae79d90564d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d/4625e716-fb61-4a3e-b87e-7ae79d90564d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:7b:20:80:b8:50:6f:c4:ed:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4625e716-fb61-4a3e-b87e-7ae79d90564d
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=bc84bb33-9368-41bb-b14c-4bbe6a0aaf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:77:0f:4c:65:b1:3d:31:8b:06:a8:e7:4b:
                    00:e6:b7:1f:40:61:16:c3:4d:c3:fe:9d:0f:d4:86:
                    a5:24:0d:43:7b:36:47:67:a0:f6:b7:0a:28:63:27:
                    df:71:46:fb:36:28:11:b8:ad:8f:77:be:20:1f:aa:
                    26:51:67:06:ef:54:51:09:2b:a6:c7:18:bf:99:70:
                    b2:d3:b1:1e:24:37:d9:eb:7a:1b:6a:ce:79:ee:f8:
                    20:87:76:d5:27:c9:34:1e:80:2f:b7:1f:e7:aa:1d:
                    d4:36:8c:18:86:37:e0:ab:b3:69:d0:a3:18:85:80:
                    bb:2a:7f:c2:8a:c0:37:be:00:de:68:0d:99:b6:e1:
                    2f:28:45:04:41:59:22:4f:64:9e:d1:ce:21:55:56:
                    fd:bc:f8:a2:5c:74:b9:8f:41:25:1c:f1:94:24:f0:
                    40:2f:ec:46:99:c1:08:5f:9b:75:02:a5:f4:4b:0f:
                    c1:cc:b3:7d:de:03:1f:5f:4b:01:59:32:80:3f:f9:
                    6d:6a:b3:c3:65:99:19:af:56:17:dd:d1:c3:0c:cc:
                    b3:c1:8b:20:f8:96:dd:e7:c4:49:d3:cb:0d:86:a2:
                    56:72:45:df:34:c3:42:ca:3f:34:07:74:7f:45:be:
                    17:27:3b:6e:e9:4b:56:0c:ba:2b:f4:9f:d2:7d:55:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7B:86:69:10:EF:D6:AC:E7:03:5A:6E:63:DD:07:76:63:46:72:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d/b3fef183-b494-3f77-8636-6b697adccab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d/4625e716-fb61-4a3e-b87e-7ae79d90564d.crl

            X509v3 Authority Key Identifier:
                keyid:55:4B:35:9D:BD:F6:7C:32:12:30:67:5C:E7:0F:31:D7:A6:68:08:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4625e716-fb61-4a3e-b87e-7ae79d90564d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:dc:ad:fa:ec:70:0d:85:45:ff:09:c2:77:ef:ff:1c:0b:
         53:8a:ce:62:c7:cd:d1:54:27:8a:f1:d8:0f:6c:e0:0b:6a:74:
         8e:c4:8c:8f:2c:52:0e:e3:b8:11:ee:a8:75:59:30:1c:3a:bc:
         b3:86:75:13:c1:61:21:8c:5e:5d:c9:b5:f2:9a:22:64:30:e4:
         4f:32:11:5d:c9:1e:8c:10:d0:8b:38:15:3d:2c:34:c1:de:73:
         19:3e:e8:88:22:b1:60:e5:83:a9:94:e3:4d:18:e2:13:f2:b9:
         6c:e9:98:6f:55:6a:ae:a7:01:19:8b:20:f7:3b:9c:76:4d:d9:
         03:5a:b3:41:78:7a:f9:a8:8f:ba:0c:7e:8d:0f:aa:8b:79:1a:
         d3:20:f0:bf:03:6d:ee:0e:76:11:a5:8d:5b:3d:9f:9f:48:e9:
         da:c4:80:49:4b:14:37:30:04:c0:bd:6a:8c:a5:97:29:86:cd:
         40:a7:6b:21:22:db:a9:78:30:a0:0d:2d:46:b1:15:e2:0b:d1:
         b9:c7:d2:e9:3b:ff:66:50:9f:e5:cc:c1:fa:2b:f2:cb:4c:09:
         cb:a0:6f:b4:43:e6:a0:01:ff:ee:b5:7f:86:0c:54:92:38:02:
         57:77:39:95:9c:c1:c4:fb:69:d0:84:79:0a:8d:a5:68:da:7e:
         80:cd:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:07:20 2026 by rpki-client