Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa
File:                     7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa (raw, json)
Hash identifier:          QjmdTd3MK04sUDWvUUb1RwzngpwfKkN9f8xGz8jfPEo=
Subject key identifier:   D5:52:23:03:9B:8E:32:9B:06:ED:BE:46:70:FA:77:A7:4B:F4:05:25
Certificate issuer:       /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial:       010D0C9F4328584F497406B1EA6ED4372DAD7900
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32274
IP address blocks:        2620:11b:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:06:b1:ea:6e:d4:37:2d:ad:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=831c1fcd-0a7a-49e8-b5f9-c61c8bdee433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:37:87:dc:69:55:33:fe:73:2b:1e:de:98:
                    29:74:25:6e:26:dd:a5:b7:17:d2:ff:e1:27:59:ff:
                    ff:2f:d5:98:c0:76:60:54:c9:56:31:1c:87:fd:5d:
                    a9:d7:fc:85:b8:2b:5a:b2:4e:81:69:0c:23:d5:d0:
                    98:b9:67:f9:ce:36:21:67:ae:c7:24:c3:13:34:46:
                    8d:f4:08:1c:ee:6d:9d:36:e8:4e:d4:df:a9:40:7a:
                    83:e0:f4:84:3b:5b:ab:3a:8f:6d:be:5d:83:33:22:
                    d4:3c:88:20:c4:af:99:b2:ae:3f:05:99:8e:d5:d6:
                    32:06:c6:95:f2:de:d8:ae:f2:36:d6:84:bb:7f:b9:
                    98:ea:ad:33:f0:dd:72:e7:4f:1a:f5:67:31:3c:9e:
                    94:05:af:88:3a:cc:33:f0:ad:9d:40:5d:bc:88:ce:
                    ad:96:7e:a4:b9:9c:cf:5c:0b:24:26:ea:1b:ed:9c:
                    cf:eb:81:58:95:63:ad:71:b6:9f:07:b1:d1:a0:20:
                    ca:1d:f2:3b:12:8b:fb:f3:76:6b:25:17:25:68:51:
                    ec:9d:f2:73:56:e0:64:71:62:1d:61:f3:b4:64:10:
                    cb:d9:a6:83:a1:59:37:f9:b1:99:f4:c6:82:68:25:
                    63:12:e8:79:7a:e9:d5:b6:47:e7:6a:8d:6c:ba:45:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:52:23:03:9B:8E:32:9B:06:ED:BE:46:70:FA:77:A7:4B:F4:05:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/7c3c1da1-21fd-390c-8ec1-7380c91429e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11b:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e8:13:4a:44:2e:72:a6:12:f2:67:47:4b:d2:f3:73:0f:97:
         38:46:49:f5:3c:40:f0:68:f3:df:12:30:11:6d:f4:fa:ca:10:
         89:68:7c:ac:6a:1d:83:50:8d:3d:9b:96:bf:e1:4e:93:78:8d:
         30:69:da:17:fa:e9:bb:9e:ec:b9:e2:7b:d3:e7:45:87:ac:a6:
         82:42:20:87:27:99:75:9d:b7:48:ed:b7:be:90:94:bf:d0:09:
         06:d1:d5:c1:33:d2:df:d9:c2:be:7b:d0:94:16:fd:e0:2a:e9:
         9d:dd:aa:81:13:54:28:1d:da:00:b1:95:17:2a:f8:f3:6e:9f:
         5c:85:0b:1f:10:14:a4:db:ab:e9:61:e1:b9:92:f6:f4:32:7d:
         fb:ac:02:47:e5:45:d4:4c:90:ec:90:58:67:c9:d3:bd:7f:81:
         08:f9:6a:50:fb:e1:09:66:48:00:07:2d:07:e2:8b:e1:58:52:
         16:a9:1d:3d:75:bf:da:5a:b3:5a:73:b6:10:2f:42:72:95:92:
         36:3e:60:de:64:6d:28:77:ef:e4:80:e7:91:2c:7e:a6:a1:02:
         31:5c:b7:3f:e1:6a:32:1b:43:20:6d:ee:79:80:0a:c6:0a:46:
         c0:c1:1b:10:76:90:72:20:6b:d2:98:7e:4f:1b:1b:24:b2:de:
         d7:36:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:36:13 2026 by rpki-client