Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/c26ecb5c-14d6-3b48-8786-04e77660f150.roa
File:                     c26ecb5c-14d6-3b48-8786-04e77660f150.roa (raw, json)
Hash identifier:          VFaOT3GBTB/K3x48ccYxLD9nTCxzZpNSE26npI5ERIc=
Subject key identifier:   CF:D4:7D:E1:8E:DD:BE:4A:4C:B3:1D:76:C3:82:92:1A:D4:3D:03:FA
Certificate issuer:       /CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
Certificate serial:       010D0C9F4328584EF7176B4FAC3A9D8A22C65480
Authority key identifier: 26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/c26ecb5c-14d6-3b48-8786-04e77660f150.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     36309
IP address blocks:        2620:9d:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6b:4f:ac:3a:9d:8a:22:c6:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e8792a8e-d2ee-42f0-bb7c-090fb88b7179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:e9:5c:fa:0c:ca:65:f4:a6:e9:2a:1f:2f:
                    b0:99:ed:40:a5:34:c2:14:09:a7:ae:f1:17:d4:55:
                    48:43:7b:31:23:ae:90:34:8c:18:58:60:c1:ae:f2:
                    c3:9f:f3:fb:17:f8:a0:83:5a:bb:b9:36:6f:e2:31:
                    80:08:a1:a7:59:19:2e:37:3f:cf:65:97:6f:8a:31:
                    50:f9:84:95:b2:17:0f:c6:6f:14:67:67:64:78:c9:
                    c7:fc:34:0d:d0:cc:6e:67:a5:46:0b:fd:21:9a:94:
                    85:ac:37:a2:ac:ef:4c:0f:f6:b6:f3:f9:c3:4c:b9:
                    5b:23:6f:6f:b0:05:a2:04:43:8c:55:fc:c1:c3:37:
                    a0:04:ea:4a:b2:a4:62:b6:1f:c2:27:b5:2e:ac:ad:
                    27:f7:15:52:84:16:ca:e6:75:2e:50:f8:6f:ed:7d:
                    c5:51:7d:29:1c:78:41:01:0c:c2:6f:02:ab:9c:77:
                    01:68:62:1f:ce:ce:8b:82:9e:1e:ad:37:1b:d8:7e:
                    71:8d:35:b4:e1:0b:2d:2c:74:9f:c4:3c:27:d4:4f:
                    0d:99:a4:a5:a2:74:50:ab:e8:21:73:57:78:09:e6:
                    78:5e:90:f6:95:59:b7:e7:13:73:6d:c5:63:84:ba:
                    27:0a:6e:f8:b1:74:0e:6c:69:96:cc:c6:8a:d0:eb:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:7D:E1:8E:DD:BE:4A:4C:B3:1D:76:C3:82:92:1A:D4:3D:03:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/c26ecb5c-14d6-3b48-8786-04e77660f150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.crl

            X509v3 Authority Key Identifier:
                keyid:26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9d:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:82:ad:40:e7:e8:ce:e8:0e:93:c3:c8:38:d3:53:b2:88:
         a8:19:aa:60:54:88:7c:86:02:27:8b:4b:72:48:4a:bf:c5:f0:
         7b:7d:aa:41:f0:da:9d:be:5e:09:fa:91:d1:75:a2:6d:89:42:
         03:ac:f9:c1:01:4b:cb:6d:7e:b3:aa:9d:42:4b:9e:b4:ef:de:
         e8:67:70:6d:6c:60:9c:11:4e:de:c5:24:06:ec:31:82:a4:8d:
         5d:c7:14:39:ad:af:ba:14:d1:ae:e8:0f:25:34:12:5d:56:da:
         e4:d4:bd:83:9b:84:0f:41:3e:7e:27:37:81:1f:e7:31:63:ce:
         d6:9b:f8:39:6a:87:02:a3:aa:2e:2a:08:d1:98:44:f8:d8:ce:
         f1:05:45:8d:42:d1:22:21:1e:f3:2c:52:0c:62:46:27:cd:23:
         15:cb:70:aa:53:88:5e:e7:6c:0b:d4:eb:bd:89:05:89:f4:4f:
         b5:16:f1:2b:8a:87:95:c8:16:6e:a3:7a:ff:c1:64:6a:35:c1:
         1e:5b:db:0a:67:d8:35:d0:02:b9:0f:64:b5:a2:c6:0e:9a:de:
         ff:08:14:60:38:33:bc:1c:b0:37:81:0c:aa:62:b1:fc:9d:9e:
         89:ea:05:0d:c3:36:95:4b:e1:e3:ad:b1:32:63:c5:f0:c6:9c:
         6a:c8:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:34:12 2026 by rpki-client