Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/dde2ccc3-3cf5-3bfc-9321-081c5e4f28c0.roa
File:                     dde2ccc3-3cf5-3bfc-9321-081c5e4f28c0.roa (raw, json)
Hash identifier:          n1ULEpgCs0YUcXCYGEbt6ntQo8nRwxVBrSKiZ02x0wM=
Subject key identifier:   2F:85:73:0C:0E:B5:97:E3:DC:71:A9:F0:1B:6C:F6:19:22:9A:34:84
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328584F4973E9AA45C04AF269673F80
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/dde2ccc3-3cf5-3bfc-9321-081c5e4f28c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27364
IP address blocks:        2604:9f0f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e9:aa:45:c0:4a:f2:69:67:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02d55df0-d66f-4efe-b8d3-44561806b3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:75:7e:23:6a:40:4f:6d:1b:c9:17:7e:0b:
                    21:98:c2:0c:a2:5e:1c:cf:fa:2f:bc:9a:da:3e:8d:
                    51:31:95:ec:c8:34:c8:85:4d:92:60:56:0f:19:68:
                    0c:c8:30:18:53:44:50:b0:75:9f:b7:3e:87:56:5f:
                    d1:4b:67:5f:9a:60:9e:48:3e:8d:8f:1e:86:9e:a2:
                    db:12:91:30:2b:f9:18:60:91:48:ef:13:d7:90:bb:
                    2d:89:b2:52:b9:64:6e:b2:68:8c:92:89:d4:d1:ab:
                    8a:f6:33:8b:52:82:7e:37:f0:80:92:7f:71:7d:7e:
                    15:bb:c9:d0:7f:c7:14:a4:62:fb:a0:26:7b:1b:c1:
                    c8:58:26:ef:09:9e:11:01:26:a1:ab:ae:20:2f:d0:
                    e6:e7:af:fd:e0:17:81:e1:f7:8a:71:20:44:25:82:
                    41:7b:f3:17:9e:5c:00:0b:0a:3f:4b:72:fd:d7:ef:
                    6c:b7:31:97:bb:6c:9b:d1:77:90:36:4f:d6:16:3e:
                    fe:07:0f:e1:7b:f0:af:31:b6:de:2a:f9:aa:74:aa:
                    48:ff:09:cf:bf:de:5a:37:07:f4:09:b8:30:5e:33:
                    c9:f4:84:64:85:87:a0:db:62:ef:87:2d:55:01:4d:
                    2a:20:3a:3a:88:2c:e0:3f:8c:68:1d:fc:37:4f:c4:
                    0d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:85:73:0C:0E:B5:97:E3:DC:71:A9:F0:1B:6C:F6:19:22:9A:34:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/dde2ccc3-3cf5-3bfc-9321-081c5e4f28c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9f0f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:52:4f:94:f9:16:a3:ec:8e:ca:5c:da:ff:28:7c:cc:49:25:
         38:76:b6:27:6b:ae:92:23:1b:9b:7e:5a:b5:11:45:fc:ef:eb:
         53:30:7c:f0:40:12:68:ce:89:68:a1:00:e5:fc:e7:d7:3f:61:
         6a:74:9e:bf:1d:f6:7e:71:0c:40:32:b9:0b:e5:0e:85:7b:98:
         57:c7:e4:7e:cd:f4:8e:d8:86:0b:be:61:54:e5:69:91:1e:a1:
         52:ba:19:55:fa:34:87:e9:50:8b:ea:4e:19:ec:ca:1c:7c:d6:
         c7:6a:6a:c7:71:be:00:65:28:af:18:34:f2:33:17:41:29:ff:
         fb:19:c5:f1:e4:5f:32:ae:15:ef:fe:31:77:fd:63:01:9b:52:
         26:c9:01:67:28:d1:b8:2e:65:fc:f2:11:39:6a:b9:64:59:58:
         94:7a:30:7d:95:79:b0:29:4d:a7:89:3b:3a:7a:9b:48:56:8e:
         65:48:ae:f7:9e:58:10:52:a0:3e:0f:52:ac:0b:2b:e6:f0:fc:
         f1:2c:7b:d6:dc:98:66:e4:9b:fd:af:14:7e:79:51:bc:d1:aa:
         08:03:59:b7:68:88:40:8d:29:85:8f:36:66:9c:56:f4:3b:07:
         b5:24:64:9c:40:b7:1d:45:80:73:ee:f7:dc:c7:97:03:48:fd:
         ea:da:6c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:48:52 2026 by rpki-client