Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/819bffa6-e9df-367b-8b22-457955267fe5.roa
File:                     819bffa6-e9df-367b-8b22-457955267fe5.roa (raw, json)
Hash identifier:          Pp7q7jLdqoKTe7Mw2Ucw+4wV3lsWdpO3OwbPMBJ98J8=
Subject key identifier:   F3:97:5D:9A:C4:59:00:3A:3D:25:FA:86:64:27:97:0C:BB:0E:DB:6C
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584F49766F08C0993AF270BADFB0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/819bffa6-e9df-367b-8b22-457955267fe5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396055
IP address blocks:        2604:fcc0:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:6f:08:c0:99:3a:f2:70:ba:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=996e42d0-146f-42dd-9124-8229886fcabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:a2:7c:fb:f0:b7:a2:1b:6b:67:ab:5c:56:
                    b9:63:2f:6a:f8:ae:4c:c4:73:ad:52:a0:df:76:30:
                    de:d6:40:5e:cc:bd:b1:6f:a3:b0:06:25:85:e2:1d:
                    b1:7e:75:00:7b:5d:00:47:9e:bc:45:f4:f5:09:4e:
                    e9:4e:77:01:30:29:e7:af:f7:e8:7c:2a:db:d7:4f:
                    74:20:22:20:5d:72:62:47:55:38:83:a4:3c:4f:12:
                    a7:40:82:7b:fa:60:48:16:ac:ed:08:c2:4c:b9:26:
                    14:1c:61:47:0c:8a:ed:e3:32:16:82:65:a1:34:ff:
                    ad:08:d3:c0:6e:73:56:16:30:a2:5b:a9:16:fc:36:
                    5b:03:2c:80:bc:87:6a:58:29:f8:eb:9b:c7:9c:c2:
                    3d:da:da:bc:2a:db:de:1c:4b:89:46:00:81:84:7d:
                    93:73:20:b2:0f:8c:7b:95:2c:c1:0b:64:a3:7b:1a:
                    7f:a9:30:58:b8:5f:ee:bc:90:53:aa:5a:c6:17:a0:
                    be:a8:24:46:2b:a9:ec:9e:22:19:2b:8c:1d:69:47:
                    b0:74:50:8b:04:3f:25:30:03:8d:73:57:9f:1c:1e:
                    f9:02:1d:2e:f5:2c:5d:62:e8:34:55:05:9c:a0:b4:
                    15:13:16:74:d6:91:99:35:08:46:2b:f8:a0:a4:c1:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:5D:9A:C4:59:00:3A:3D:25:FA:86:64:27:97:0C:BB:0E:DB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/819bffa6-e9df-367b-8b22-457955267fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fcc0:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:36:e6:36:3c:fb:f1:7a:f7:ee:b6:30:da:d5:28:ac:5d:fe:
         e4:49:9e:ab:28:ab:8d:d2:ae:62:31:6f:b6:65:fb:8f:29:96:
         d4:0b:57:67:b4:95:1e:ef:d7:da:9f:01:bf:95:b6:4c:3e:fe:
         c9:6a:d2:6c:c1:da:d8:22:04:b8:4a:47:ec:1a:c0:ba:d0:82:
         e9:ca:48:91:b3:fb:8a:b4:27:1c:10:84:3f:ac:12:40:81:93:
         82:df:a6:f9:2f:47:54:39:fa:09:9a:81:65:66:fe:fa:4f:bd:
         43:7d:67:e3:bd:94:24:93:37:6c:6c:86:cb:db:95:7e:f8:76:
         c6:86:8b:04:57:b5:7a:10:b9:75:25:7b:e9:94:d5:b7:74:c7:
         8d:d2:e6:3f:f2:c2:b1:09:16:3e:04:d9:28:89:da:ea:e2:82:
         da:ee:8f:63:5f:5a:cb:b5:77:26:c2:e8:d6:cc:f2:ef:8c:b6:
         e9:11:76:68:d8:76:30:61:90:88:c6:69:f3:87:fd:38:08:6f:
         86:e6:9e:75:b8:65:d5:62:d7:f0:93:0c:34:59:3b:fd:e8:73:
         f4:18:cb:65:dc:f2:0e:fe:3e:3b:97:b8:22:ba:21:31:bc:e3:
         96:35:34:66:50:6c:06:73:53:24:6b:ef:0a:58:b2:47:5f:b8:
         1e:21:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:07:05 2026 by rpki-client