Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa
File:                     d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa (raw, json)
Hash identifier:          lgBbiW8vSuRDJXC33yPW+aZ2fAJht2SXaNApuMuon6Y=
Subject key identifier:   B0:40:F5:A1:20:13:B2:CA:C4:5B:E6:4C:25:9F:9B:CF:A8:E7:81:C7
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584F4973B83948B5C3E604673A00
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     57439
IP address blocks:        2605:f440:5353::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b8:39:48:b5:c3:e6:04:67:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=71d4f662-4aac-480d-849b-c1bfeecb5de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:81:f0:14:86:09:5d:b2:ef:5b:72:66:cd:
                    36:1e:9d:33:b1:e9:90:df:b0:38:08:6b:88:e5:88:
                    80:7b:44:23:3d:40:52:20:20:45:c7:02:c1:f3:47:
                    ac:e8:77:df:50:2f:af:60:ed:f8:ac:ec:d9:c8:8b:
                    98:30:3a:dc:d8:0d:d5:56:32:99:75:fb:d7:35:a2:
                    15:aa:c8:be:c2:c3:e8:1d:b9:a6:3b:f5:7f:5d:ef:
                    12:65:cd:bf:06:73:b3:aa:e9:64:9d:cf:48:4f:e9:
                    a6:a7:60:c8:55:ac:ab:05:30:e9:49:30:66:94:3f:
                    51:07:f0:43:e6:2c:cf:a5:5d:3b:cc:ce:ae:f2:62:
                    a4:0a:84:d8:a0:ec:92:6e:72:29:d3:15:7f:00:0f:
                    dc:25:ef:f3:9e:43:50:af:dd:c5:08:86:7a:b4:64:
                    a2:2c:72:50:87:02:7c:01:e7:ee:69:86:ab:47:d0:
                    66:73:d9:a3:de:03:d5:40:d3:96:4b:02:0d:f9:3a:
                    ed:d9:29:16:63:be:10:2e:30:ce:f9:86:3f:df:84:
                    27:3b:a9:5c:b5:cb:2f:f5:a9:82:6b:78:52:6b:a4:
                    26:90:a5:85:2c:b4:50:d9:93:7d:30:3b:57:77:84:
                    b4:97:92:49:42:eb:db:61:91:78:37:f5:d4:b2:83:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:F5:A1:20:13:B2:CA:C4:5B:E6:4C:25:9F:9B:CF:A8:E7:81:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:9b:75:b7:52:cf:6c:85:a1:dd:85:a1:e6:e8:eb:4e:23:
         6a:ae:da:73:6b:b5:16:fa:22:df:ce:c7:14:66:62:56:2d:8d:
         47:01:6b:68:41:b6:06:65:fa:4b:e1:4a:75:53:15:e3:1d:b8:
         c4:d2:e1:cc:d2:9e:39:03:c2:f0:a7:c3:30:da:84:81:19:45:
         78:01:51:92:7c:6a:01:37:9a:41:54:c4:3f:51:3f:6e:d5:3e:
         c4:c8:68:1f:89:40:00:3d:3c:8e:75:20:b9:65:5c:42:eb:b1:
         22:57:0b:74:14:eb:52:12:2b:35:9e:80:41:fe:5f:e4:d5:b9:
         c6:62:e0:1c:02:ca:9e:55:1b:cd:5e:d4:ad:aa:bd:dd:6d:fd:
         4d:fa:bc:58:1b:07:4d:7f:0c:a4:dc:b2:86:ba:51:52:1b:4f:
         e8:e7:0e:28:1b:b6:a1:bd:d1:65:32:a5:9b:86:d0:66:81:b3:
         d7:b9:a2:e6:ae:ec:56:ca:c1:96:e5:cd:a4:dc:81:79:20:6a:
         47:f2:d3:77:af:c3:18:8f:5d:f7:45:2c:96:f1:bf:1b:23:35:
         ca:bc:27:55:e5:c0:21:7b:1a:62:36:5a:28:9f:96:4e:d7:3c:
         06:0f:87:51:71:95:f6:21:e6:1e:32:89:b5:8f:3e:58:a6:a4:
         0c:9d:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:41:39 2026 by rpki-client