Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa
File:                     4738a0db-ee50-3a8a-9636-ac0584f52f61.roa (raw, json)
Hash identifier:          zFw8amCy7e85tmJyYfDCbGZjdD/xTiGR7Pwj1Nxq8VA=
Subject key identifier:   DA:2F:15:ED:25:08:B4:2B:BB:6B:69:D8:94:53:47:96:CA:A7:CE:82
Certificate issuer:       /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial:       010D0C9F4328584F4973D68FF47EE24945DB1740
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14325
IP address blocks:        2604:a700::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d6:8f:f4:7e:e2:49:45:db:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=64ab49bf-3aca-4321-8fa0-fa15064fd23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:02:0c:8e:b0:5a:bf:86:a8:87:d1:26:ef:
                    ed:d5:78:28:67:c8:dd:17:aa:23:cc:c8:ad:76:7f:
                    77:20:14:a0:80:0a:6a:9b:53:b0:f9:6a:4a:8d:d2:
                    1a:ca:e8:c1:4d:29:65:c3:c3:24:26:43:73:f1:7a:
                    9f:cf:9c:e9:6a:00:80:30:d9:c1:47:79:fb:de:e6:
                    49:b3:d6:f8:62:60:d4:3b:a9:57:11:23:49:85:50:
                    42:4d:40:ce:90:70:d3:3f:66:45:37:3b:dc:72:ca:
                    6d:e0:f0:ac:fe:66:53:45:f4:02:04:9b:c3:c5:c2:
                    85:94:df:4c:c6:aa:e0:d2:23:2c:69:cf:21:d3:9a:
                    cc:a1:59:03:bd:db:1c:e0:d9:4a:ce:57:a5:99:aa:
                    db:39:93:a6:34:44:a0:f0:b6:d9:13:08:c5:36:39:
                    d8:c6:87:6e:9d:8d:cf:8d:39:e1:16:f5:d5:04:ec:
                    c9:06:c7:02:24:2b:7d:16:dd:d3:93:3c:1d:00:d3:
                    7f:25:b6:b5:2b:c0:e4:d9:ac:f8:e0:d8:a6:b1:e4:
                    49:85:6d:f2:05:35:d0:b6:7d:07:a3:2c:70:72:6c:
                    cb:2d:87:11:38:45:82:b8:e8:aa:f6:e3:49:84:c9:
                    7c:0c:d8:42:c8:f6:1b:af:a0:8d:c3:5d:5d:b0:3f:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:15:ED:25:08:B4:2B:BB:6B:69:D8:94:53:47:96:CA:A7:CE:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/4738a0db-ee50-3a8a-9636-ac0584f52f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl

            X509v3 Authority Key Identifier:
                keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:6a:97:57:9c:c0:4a:b0:d3:a7:72:5e:82:2c:6f:a2:aa:cb:
         35:bb:6b:3b:54:23:e6:47:be:64:23:87:72:7d:c0:42:ac:22:
         26:c8:84:9a:27:de:f2:26:92:8c:3c:05:37:95:4b:73:2c:0e:
         2f:d6:ca:67:ed:b2:71:ec:31:04:61:03:38:80:ca:dc:2d:76:
         0b:8e:4c:3e:4b:f2:c4:20:65:d0:c7:a1:d7:d6:72:59:3d:99:
         e6:fc:87:b0:d5:67:a4:08:2b:58:63:7b:ad:5f:18:6b:1d:a2:
         b4:51:82:14:9c:29:f2:4d:cf:58:e5:0f:ff:bf:79:f4:18:eb:
         46:da:fe:42:f3:1b:d9:aa:74:58:a1:74:f7:c1:cb:37:80:52:
         47:26:6f:16:d1:66:c2:90:d6:8f:5a:cc:7c:0d:76:9a:32:34:
         cb:f6:8a:33:13:6b:5e:87:52:96:8a:a7:ae:28:ce:ed:31:f2:
         77:4c:e0:9c:b7:1f:4c:d6:19:71:6d:01:2a:02:66:46:d1:65:
         68:74:ad:51:d2:39:37:26:4b:84:06:27:ac:8a:a7:19:a2:44:
         df:b2:66:df:6d:0f:0b:b0:0b:2e:f6:c6:d7:63:ec:6d:85:df:
         b6:f1:d5:df:34:38:78:ce:63:1b:08:21:f8:1e:e5:14:3e:47:
         9b:76:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:10:02 2026 by rpki-client