Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa
File:                     1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa (raw, json)
Hash identifier:          3E6RytHwIrMuOHpRtKMoAHpHz04yVAj6UMOIazbrAvg=
Subject key identifier:   6A:E0:88:0E:5F:49:51:8E:9E:76:B5:D1:84:5C:15:3B:8C:09:47:23
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F374D1870F25A325BBA68F080
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        2604:86c0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:18:70:f2:5a:32:5b:ba:68:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=61ba6523-5d62-4985-8b2b-a2527000aace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:be:ba:04:8c:45:93:85:92:ad:16:83:76:
                    b8:7a:3f:4f:61:f0:3c:a0:bf:f3:e8:74:a5:96:04:
                    39:e7:67:8f:2c:da:2f:1b:f6:ea:f3:1d:64:ff:f2:
                    3e:35:fa:6a:85:89:e7:4e:b5:6a:8a:78:c0:35:dd:
                    b3:35:cc:ff:dc:08:57:5d:e1:23:2c:9f:26:bd:71:
                    3f:f2:8f:46:36:bd:90:29:57:30:2f:99:ea:49:c5:
                    9b:f2:6d:cc:29:4b:b7:08:6c:7b:1f:97:5d:e4:12:
                    cb:94:09:e5:11:4e:2f:fb:90:a5:da:9e:6d:46:83:
                    5a:1a:a2:b8:66:6b:98:67:dc:4e:9f:84:9b:3a:40:
                    58:f7:53:d3:38:7c:28:11:1c:1b:2c:6a:77:9a:86:
                    77:63:53:9f:32:5d:54:84:e5:61:94:9e:9d:84:21:
                    90:af:bb:62:b3:ce:3d:b5:4f:0b:c0:9e:61:ab:eb:
                    ea:eb:23:95:7b:5c:40:41:b6:51:0f:2c:f9:01:96:
                    fe:d3:4a:89:37:b2:9e:ce:df:94:90:5c:d8:8a:49:
                    d6:5e:cc:40:8a:14:7b:36:42:ef:08:ff:68:cc:67:
                    c9:56:11:94:b9:f8:70:26:09:c7:f4:f6:70:d6:ae:
                    aa:57:99:f9:db:c0:53:31:a2:d8:af:d6:64:f4:75:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:88:0E:5F:49:51:8E:9E:76:B5:D1:84:5C:15:3B:8C:09:47:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:89:65:e3:b8:de:4c:dc:c5:40:8a:98:bc:08:57:b2:63:
         bf:a9:1e:a9:8e:91:1b:b8:f0:c9:90:8d:9f:e8:33:7a:c9:8d:
         9e:f3:dd:6c:f1:f4:b8:4f:39:fa:f8:07:ba:a7:9c:b1:20:c5:
         d2:1e:19:ee:73:a5:46:03:18:f4:24:27:63:a7:e7:1e:54:1e:
         5c:9e:78:ac:4c:04:32:7e:cc:46:4f:ff:dc:e0:ac:6a:57:4e:
         d0:74:cf:62:c1:d1:4d:6e:b7:96:08:a5:d3:d3:eb:97:cd:10:
         97:8b:78:3a:32:e5:d8:a7:36:92:9b:d7:2e:47:a9:35:68:46:
         00:c9:89:f3:f8:75:ce:40:22:87:f2:5c:15:06:be:d4:c7:b0:
         1b:79:f7:3a:5f:b6:2b:4e:66:79:93:51:2e:ee:1a:39:a7:04:
         a8:de:a7:1f:96:a2:df:13:a4:7e:f5:a6:ef:bc:9e:cf:fa:01:
         30:59:75:b8:88:6f:13:95:e3:c7:1c:cd:a1:20:4b:65:ef:f9:
         4b:32:64:58:56:d7:8f:4f:9d:26:1d:e1:01:72:4c:d6:a3:4b:
         ad:bd:71:e5:90:e5:96:ed:30:b8:50:73:65:6a:b4:61:97:45:
         4f:dd:8c:69:69:32:9f:2a:02:fa:b5:60:69:d5:af:47:65:99:
         18:a7:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:23:33 2026 by rpki-client