Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/165e6164-f111-3f7a-863d-553a951fa411.roa
File:                     165e6164-f111-3f7a-863d-553a951fa411.roa (raw, json)
Hash identifier:          tpnNQ/9b5C3FhondTdIYqCsmXKgzU2oGUnm4CQFw55w=
Subject key identifier:   FC:E5:15:68:E9:F5:C8:A5:E5:C9:45:5F:8F:71:43:5B:8D:45:77:73
Certificate issuer:       /CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
Certificate serial:       010D0C9F4328584F549D43940A2F832E938BAEC0
Authority key identifier: 67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/165e6164-f111-3f7a-863d-553a951fa411.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     393941
IP address blocks:        2620:11f:d000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:43:94:0a:2f:83:2e:93:8b:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=86f4adf3-9479-4e21-8a63-9c24465ccc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:84:3c:a9:da:ca:cb:81:7b:f1:9d:30:10:
                    92:e6:f2:da:46:0f:a1:8c:ac:79:bd:cb:ca:b0:b0:
                    c5:0b:b5:f7:6d:f6:16:24:fd:d3:db:2f:6e:83:1d:
                    21:e6:5a:38:6a:fc:75:8a:7a:bb:c7:c4:fd:36:58:
                    cd:53:06:09:f8:e6:1b:63:14:21:24:a9:4a:aa:db:
                    99:d1:c7:96:04:af:4e:04:cd:a9:57:54:74:33:c0:
                    65:10:e9:28:54:d9:07:10:1a:fc:ea:b5:67:84:49:
                    13:83:c7:34:f3:3f:32:07:c8:40:08:9c:ab:4d:63:
                    70:a1:3d:75:d8:e4:9f:f4:ab:00:b6:6e:d5:16:91:
                    fb:2e:76:de:9e:63:44:81:e0:47:16:56:30:09:97:
                    8b:a6:ee:03:bd:eb:13:17:98:25:c4:f2:2d:16:86:
                    bc:cd:b4:22:95:ed:e4:85:90:2e:1c:ed:2c:1c:f1:
                    ec:00:83:4c:2f:6b:bc:a5:19:69:ce:fb:af:21:55:
                    0c:63:f1:2c:b5:9a:5d:4b:ec:65:a8:dc:3a:c7:4d:
                    a5:6d:af:69:cc:27:3f:ef:05:24:69:59:59:16:f0:
                    8e:81:7f:2a:05:ff:bc:6a:33:c5:15:9a:7c:01:f4:
                    71:22:c1:ea:2e:81:de:e1:aa:bd:0a:ca:bd:e0:cc:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E5:15:68:E9:F5:C8:A5:E5:C9:45:5F:8F:71:43:5B:8D:45:77:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/165e6164-f111-3f7a-863d-553a951fa411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl

            X509v3 Authority Key Identifier:
                keyid:67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:9e:c1:67:93:ec:2d:16:f4:87:c2:04:cb:20:88:53:f7:
         b6:d5:6d:ad:9b:e2:05:76:a6:86:1b:8e:c8:8c:27:ef:88:c3:
         76:d7:52:02:b9:f8:c6:75:77:f2:cb:cd:44:04:56:c8:3d:98:
         48:62:36:17:5e:0f:0f:70:07:23:33:99:70:66:51:ae:88:95:
         2d:ed:0a:20:d7:b7:67:b2:61:8f:b5:06:c9:43:21:72:e0:b2:
         4d:cf:75:a2:56:6e:a3:8f:31:92:08:21:fa:16:a6:fd:bf:60:
         74:61:cb:35:49:d9:48:21:b0:fe:5f:33:de:a2:51:8a:3d:2a:
         69:1f:d0:25:8b:ce:69:12:96:de:99:3b:e6:50:86:b9:90:e0:
         25:31:6e:62:6d:64:a3:10:eb:bb:09:97:09:4d:97:83:1f:4e:
         48:b9:50:2e:43:76:a0:bc:ab:34:85:bb:91:aa:24:d5:57:c1:
         19:66:91:7c:d6:6f:47:41:a5:be:ff:ef:b1:45:cc:21:5a:d8:
         b7:5f:44:b7:cd:3a:40:3c:db:b1:2d:c0:1a:6a:ba:1c:ad:d2:
         04:c0:a5:bf:7e:a8:39:d5:48:18:b3:af:a7:66:23:84:ec:71:
         10:28:f2:31:1d:44:9c:be:d4:03:f9:8c:24:a8:74:4a:3c:cd:
         3c:95:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:48 2026 by rpki-client