Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/c17b0e94-5763-3d53-8170-679c1c6c1d7e.roa
File:                     c17b0e94-5763-3d53-8170-679c1c6c1d7e.roa (raw, json)
Hash identifier:          zwkLD1aVHPnuQt6lIbAmE1bkry9JZGvgThdmPLBNFQo=
Subject key identifier:   9F:C1:6D:BC:E3:0F:09:4E:27:94:33:96:F9:58:EA:7E:AA:77:3B:18
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584F498A2B5719C3FED43E6DF480
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/c17b0e94-5763-3d53-8170-679c1c6c1d7e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395403
IP address blocks:        2620:4d:4022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:2b:57:19:c3:fe:d4:3e:6d:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b34f4d33-e082-4ab6-bdf2-39d76f1a4c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:4b:3a:6b:27:78:a2:a4:38:e5:bf:d4:3b:
                    20:d2:bf:53:11:ec:59:2c:36:ed:b2:53:7a:95:28:
                    18:b5:fd:f0:5d:e6:b2:c0:80:6f:fa:38:23:0d:c2:
                    c1:54:20:08:7e:0b:14:55:45:b1:2f:ca:c5:00:03:
                    20:19:c8:5c:e7:91:3b:26:69:8e:7a:26:6c:82:34:
                    d0:3e:fe:0f:23:57:8c:18:56:c0:1b:05:16:08:30:
                    03:22:b9:d3:8b:a3:69:e1:b8:02:1c:86:9f:c6:79:
                    60:80:08:df:1e:f8:14:76:21:37:ac:ca:55:64:e2:
                    b2:6a:16:ea:2b:61:5b:0e:fc:3b:9e:cb:d0:52:7f:
                    db:3f:e9:87:a3:68:c0:dd:37:d6:8f:16:60:c4:d5:
                    30:ba:81:a0:bf:ed:43:b8:eb:61:c2:d2:57:be:cf:
                    5d:81:c6:91:10:c1:da:d3:19:fa:ae:53:5f:70:a1:
                    52:13:f7:e3:c9:81:71:cf:cc:19:3c:6d:b1:6a:38:
                    14:b4:cf:c1:67:7c:a2:4b:85:f0:52:97:f4:19:58:
                    7a:c0:86:1d:fb:d8:ff:65:d9:ef:5b:55:93:ee:8c:
                    12:81:e5:d9:c0:c0:0f:a0:a5:df:d0:e9:b0:02:67:
                    8b:9e:18:d9:07:17:2c:1b:49:e8:61:59:56:cf:0d:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:6D:BC:E3:0F:09:4E:27:94:33:96:F9:58:EA:7E:AA:77:3B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/c17b0e94-5763-3d53-8170-679c1c6c1d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:4022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:12:ad:44:39:72:5f:7c:6f:51:f9:9e:ec:d1:d1:28:13:16:
         1e:9b:28:ff:94:b3:12:08:c1:5c:cc:20:95:45:61:a0:dc:86:
         02:16:21:86:b9:e8:be:b2:24:a7:90:71:d4:47:4e:38:20:02:
         8a:77:97:03:cc:dd:d6:27:ec:d3:cd:0e:87:0f:41:dc:a2:1f:
         7b:8c:b0:9d:5d:42:e2:44:28:3f:a6:1f:f3:bb:a1:c7:00:2c:
         26:a0:52:da:c1:df:4e:3d:88:8b:a5:be:27:82:08:2f:d8:7c:
         f4:6d:fc:ff:6b:4d:af:cc:28:0a:76:ca:89:69:b7:a9:26:1f:
         fa:98:fa:27:08:70:b0:14:c2:12:e6:f2:59:e5:4c:6c:f2:9c:
         a0:46:77:d8:c9:90:8b:f4:43:94:8e:aa:2f:0f:37:6d:44:2d:
         3e:53:21:7d:22:74:6d:44:26:78:d7:e4:01:25:e4:6d:85:65:
         39:a0:98:5e:a7:16:8b:57:51:a7:ee:71:fc:5c:d8:29:fe:35:
         44:e8:d9:44:db:77:bf:df:1d:47:bf:48:e5:2d:9c:9e:bd:6d:
         d2:eb:d8:93:44:38:46:b6:de:d2:b3:0d:e4:99:7f:1e:d7:02:
         3d:f2:1c:4e:26:ea:2d:84:3f:dc:ea:1c:8a:f9:a8:80:37:38:
         86:a6:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:10:49 2026 by rpki-client