Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
File:                     fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa (raw, json)
Hash identifier:          Tsqk9IhqV40XuDeuf8eXAKazqLM+rJ8fnyx/y3TqoA8=
Subject key identifier:   52:0F:D0:92:C4:50:26:D8:AB:8D:A7:1E:86:17:45:E9:D4:32:76:0C
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F4328584F4973D641570991DC6ABAB8A0
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32484
IP address blocks:        2607:2ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d6:41:57:09:91:dc:6a:ba:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dcb290b6-3d3f-49c6-a55f-fce3d88b30e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:d0:4d:fa:e9:6f:b9:2a:48:79:2f:fd:6b:
                    bb:b3:07:a6:c0:09:a9:3b:2a:bc:3d:fe:2e:b8:d6:
                    ad:b5:eb:22:c1:c3:3e:60:2b:03:84:3c:1f:e5:61:
                    e6:0b:46:40:9d:fd:21:cd:a4:e9:a1:8d:fd:66:b1:
                    b3:bd:59:4c:60:b0:8f:67:03:a1:a0:87:ad:28:2d:
                    21:40:28:93:c7:8d:b3:99:59:ba:d0:0d:ec:db:93:
                    d3:ca:6a:55:94:b5:9d:0d:69:39:79:f5:27:b8:45:
                    de:3f:7e:5a:57:b6:ea:6c:52:71:84:d8:b5:26:22:
                    b4:9a:57:e3:e0:46:0d:42:1f:e7:ff:83:9f:38:3b:
                    46:38:0c:db:e1:73:c0:aa:ed:22:ff:e2:47:cd:14:
                    c1:15:b0:71:df:cb:27:c9:8c:30:67:29:50:2c:40:
                    f5:0b:d7:d7:14:76:d4:24:2a:95:f6:66:3d:10:e9:
                    07:18:b9:88:b2:df:02:18:95:52:0a:d0:b0:d8:a5:
                    97:fe:4f:e7:9a:9f:fe:0f:2d:ba:52:e5:67:a0:43:
                    b6:53:9d:5f:bd:13:1a:be:c2:59:b8:ca:67:02:8b:
                    c4:92:b5:93:28:76:5a:da:7c:98:5e:7d:27:61:c9:
                    b2:b2:ad:89:ee:c9:81:44:93:df:83:0c:5e:17:70:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0F:D0:92:C4:50:26:D8:AB:8D:A7:1E:86:17:45:E9:D4:32:76:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:da:a1:ba:44:52:b0:e4:e6:14:ea:e4:12:b3:69:90:b7:
         c7:66:e0:f5:c7:33:86:98:c9:44:96:f6:0e:55:26:ad:bb:41:
         34:7a:a4:bc:60:b8:a1:88:9b:35:44:4f:89:b9:71:1c:01:70:
         0c:f0:69:0d:28:c2:ff:06:20:ae:a0:a6:7a:ba:9f:f3:d2:33:
         54:55:b4:fe:6f:a4:ae:96:83:ff:f1:29:bc:20:e8:db:6a:cb:
         48:ea:ee:35:52:20:e8:cf:72:a6:08:26:97:cb:d3:24:71:68:
         2e:a6:83:d0:e1:24:c0:26:df:49:0f:35:47:b8:27:61:dc:82:
         81:d7:aa:4c:8f:20:86:ff:90:fd:57:d9:6c:f0:20:59:45:cb:
         f2:75:23:a8:49:b9:f5:55:1b:ff:16:b6:ce:87:bf:2e:20:1d:
         82:18:4e:97:a0:fc:e9:ab:84:09:91:ba:13:06:4f:dc:bf:4f:
         d2:7e:9c:b6:28:22:e9:76:6b:64:1e:6f:88:b0:2f:09:df:7e:
         f2:81:43:6a:0d:83:cb:f8:5f:2a:04:cd:99:eb:9c:3d:a1:96:
         bd:71:d8:b1:91:79:94:5b:44:ef:ef:f5:3a:2b:74:03:8e:ea:
         34:99:5b:74:d0:a8:e6:0c:39:82:fe:6e:cb:5f:23:12:3f:ba:
         9b:24:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:47:44 2026 by rpki-client