Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36fda7e8-300e-3ab5-960c-26c25d0131e3.roa
File:                     36fda7e8-300e-3ab5-960c-26c25d0131e3.roa (raw, json)
Hash identifier:          Qt/wE6/j/3H+fhMIB5yXSMpSSBIORgnjKJysEJh2WU4=
Subject key identifier:   C2:9B:E7:91:07:97:A9:CC:EB:0D:23:02:6C:FD:1B:3A:C7:F1:5D:FD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F1F924AA999ECBD0633780010
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36fda7e8-300e-3ab5-960c-26c25d0131e3.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     23200
IP address blocks:        2603:900c::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:4a:a9:99:ec:bd:06:33:78:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=107ae2d3-29b9-42bb-8f21-ebe1b29a7490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:56:c5:99:77:d1:70:c5:81:a0:94:ff:d1:
                    f7:96:08:d4:a4:5c:71:db:26:df:a2:73:6e:da:62:
                    b2:d1:8d:ea:e7:09:ee:7c:b9:53:e0:db:8d:28:b6:
                    2d:70:9c:f0:0b:87:6e:3a:83:6a:93:43:d3:c2:d1:
                    b4:d0:10:26:02:7f:6b:14:fb:e8:2b:25:ec:de:44:
                    ff:43:36:f7:67:90:9d:31:2c:23:15:00:74:01:eb:
                    f6:71:45:09:42:43:5e:16:02:cc:97:55:ce:04:d1:
                    e1:03:2a:90:41:95:63:b4:8d:1a:e2:9f:8a:8d:21:
                    09:49:f7:3a:25:6e:d7:69:0f:bf:13:fd:7d:b7:de:
                    1b:dd:02:7f:30:f1:f3:65:95:69:6f:f9:fd:ee:af:
                    2c:74:0c:96:f3:e4:ca:0a:c9:65:f7:dc:e2:b7:e9:
                    7e:a6:fe:99:76:2f:0d:ef:6c:7b:1a:64:38:a1:a3:
                    d8:76:14:3a:53:09:c3:60:8e:f8:5f:1e:eb:7f:c5:
                    af:72:2e:d4:b0:e9:3c:a3:32:86:1c:22:78:29:d7:
                    df:78:93:91:df:f0:a8:68:00:2d:eb:80:5e:14:fc:
                    de:22:69:9a:79:95:49:6c:a1:04:08:bb:5d:25:04:
                    7a:80:e2:23:fb:9a:d1:3b:4a:c5:69:5b:9d:cc:ce:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:E7:91:07:97:A9:CC:EB:0D:23:02:6C:FD:1B:3A:C7:F1:5D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36fda7e8-300e-3ab5-960c-26c25d0131e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900c::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:a8:c1:02:75:b0:7e:7d:e0:86:ad:cd:72:54:4f:87:bc:
         d8:c6:8b:51:aa:8e:cc:0b:88:81:80:da:ba:26:b6:97:54:be:
         05:91:7d:82:14:a7:de:84:18:25:43:f4:9d:df:40:21:48:44:
         b9:3e:b8:18:92:6d:1d:7c:18:4c:16:a1:83:3b:5f:17:c5:a8:
         ce:29:e7:a2:4e:89:d5:c2:2b:b4:37:a8:50:bc:0a:c8:3e:ad:
         10:24:4e:a2:56:aa:01:6c:84:be:fc:43:54:43:f8:e3:94:bd:
         c4:7c:0d:85:d3:bb:63:cd:4a:91:96:4d:2b:ff:d0:b9:80:54:
         2e:01:a7:38:6f:a2:f0:e4:41:54:55:7f:65:bf:6f:fc:d9:8a:
         df:ec:f3:f7:8f:c9:58:9e:c5:9a:51:e0:56:a3:35:76:e6:e9:
         9c:20:64:57:5e:f0:22:cf:84:dd:75:84:89:9a:6b:3c:c9:fb:
         85:9d:c3:24:7c:6c:1e:1d:ba:f4:52:2b:df:ea:10:f1:24:b8:
         3d:71:08:be:5e:cc:51:a8:47:a4:d5:e0:9b:64:89:1f:72:56:
         c6:e7:65:fb:ba:99:c9:21:1f:2d:a9:cd:a1:fb:36:86:7d:10:
         88:5b:2d:4c:88:f4:3a:b4:53:28:19:56:d0:73:c3:4d:43:67:
         cb:87:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:19:49 2026 by rpki-client