Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa
File:                     dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa (raw, json)
Hash identifier:          64UnY+ULy8FFd2kfttRgRW0mmykI3vdhKcG1WvQZ1Bk=
Subject key identifier:   45:CE:FC:AD:F1:82:66:74:88:B3:54:25:3E:BF:1D:92:58:C8:66:51
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F3CE2B1CC9FE48326D52D22C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        2605:a408:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b1:cc:9f:e4:83:26:d5:2d:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=9d532fe5-a07b-4de5-97b3-e99d3c432f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:93:79:a4:e4:95:47:73:95:ec:fc:d2:65:
                    8a:ff:21:c9:10:22:22:a6:a0:96:bb:34:04:55:fd:
                    0b:3e:62:37:2e:a3:c9:0f:44:28:ba:cb:1c:e9:c6:
                    2c:05:eb:d0:dd:d7:72:6a:08:4b:09:41:6e:64:fc:
                    a5:b7:29:2e:7e:e1:e7:f9:8c:73:3c:a3:93:52:0d:
                    60:26:15:46:28:e5:d5:7e:73:d6:7a:13:68:6b:3b:
                    2c:e9:77:51:03:4e:79:f4:82:46:3d:4b:37:59:55:
                    d9:76:b9:c7:df:b9:a5:bd:8f:a7:2a:5b:9d:73:d2:
                    ab:56:02:d8:16:a8:b9:de:03:7f:95:0c:ed:01:a6:
                    61:87:0b:e3:4b:27:f1:7f:e6:77:8c:ac:36:57:da:
                    ab:7f:61:4d:07:26:50:18:ed:fa:dc:5c:9c:ca:20:
                    9d:08:3e:c2:0d:fd:dd:52:d6:47:0d:9b:df:ab:fb:
                    e6:20:01:a2:fe:cf:f4:ca:4e:7f:46:4b:97:59:2b:
                    b7:2b:10:31:fe:f8:38:64:c3:ef:49:55:53:7b:3c:
                    93:d8:93:97:34:be:47:06:7d:d4:a4:ba:14:25:5b:
                    84:83:4f:e2:79:65:d5:23:01:c8:31:1c:67:f3:4d:
                    19:a7:90:7e:36:f6:a2:a1:09:54:78:37:71:44:26:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:FC:AD:F1:82:66:74:88:B3:54:25:3E:BF:1D:92:58:C8:66:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:08:2e:71:40:c4:35:04:88:eb:2d:ad:5a:f4:3a:81:aa:
         b2:10:f2:ee:78:0d:24:18:6b:f7:f4:e3:94:29:86:99:0e:46:
         4d:86:6e:71:32:01:b7:32:10:d9:bc:f6:0c:00:a8:b4:e3:13:
         d2:32:ed:bf:6b:18:5f:b4:b4:ed:a3:15:b4:98:c7:ad:d5:9b:
         6e:ff:d1:cc:0f:e9:e6:d3:89:3b:36:42:54:f8:1a:47:f7:65:
         52:9e:37:9d:b1:0e:74:f4:07:82:62:40:47:ef:0f:29:85:51:
         44:5b:50:42:4f:81:06:b3:51:d6:bb:3a:93:ac:df:49:28:d1:
         83:31:26:60:85:fd:6d:f3:18:a0:06:94:4c:4a:14:fc:1f:2b:
         52:e2:ca:36:7f:cb:5d:49:09:f3:c3:a4:be:c4:47:b9:36:e8:
         96:ae:93:1b:ac:37:a3:36:ae:f0:5a:66:97:19:aa:e3:f8:d6:
         04:87:42:a8:c0:98:ec:7b:1a:db:0a:37:8e:29:53:11:f4:40:
         94:37:0f:40:2f:ff:38:91:8a:89:84:66:82:04:55:2d:80:b0:
         2c:23:54:c3:a6:42:d6:60:02:74:b7:4b:c4:64:86:8e:96:e0:
         3e:08:63:73:9f:bd:7e:02:45:de:77:e6:e0:7c:48:4a:4a:2b:
         1d:a7:c2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:02:57 2026 by rpki-client