Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
File:                     c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa (raw, json)
Hash identifier:          ccKH56YGoC3Mq3Escv27Vi4vl0iuAPpTz6bacEkgvBY=
Subject key identifier:   60:2D:B6:38:3B:CA:94:27:EA:A6:E0:66:9C:17:D4:28:2E:BD:40:59
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584F57682A8E8BFFD3ED67821800
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
                          2607:9bc0:1020::/44 maxlen: 44
                          2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2a:8e:8b:ff:d3:ed:67:82:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=44b3b7d9-486f-47d3-b2c8-7f2d39880ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:c3:1d:d7:69:79:e8:cc:af:52:da:bb:21:
                    d7:0d:e8:dc:d9:5f:0c:4a:d1:ed:21:59:b6:6b:85:
                    5e:b7:67:00:6e:bd:9e:15:6b:24:c6:58:b3:2d:ff:
                    27:89:ab:05:5b:70:73:37:35:cc:12:e5:5a:a3:0f:
                    2f:e0:35:16:47:9d:f6:40:dd:27:f7:26:b9:dc:6d:
                    64:28:94:19:6a:4b:55:38:7b:f2:44:7c:65:62:4a:
                    a1:2f:d2:d2:18:99:9e:d6:83:cc:e9:94:9b:93:cf:
                    81:9f:ff:bf:66:79:7d:4d:96:5a:49:b8:20:86:e1:
                    4d:0a:39:3d:78:24:d0:7c:98:60:96:1f:8f:82:99:
                    a3:a7:1a:4b:34:de:cf:2a:74:26:87:85:68:fb:94:
                    d8:86:c7:9e:1f:5c:83:2e:dd:fa:41:63:f0:4d:e5:
                    7d:8a:2b:3e:00:e6:61:d0:aa:31:10:f1:77:a1:e9:
                    9d:51:3d:62:b8:30:9e:2f:6e:c2:ea:fd:b0:47:b4:
                    6e:e0:b3:66:4f:29:d2:d1:dd:ba:6a:7d:56:7e:7c:
                    8d:b6:60:51:96:5f:83:a4:58:97:1b:3d:3f:c4:23:
                    87:16:80:b8:2c:c8:6f:24:4f:dd:80:fd:c2:61:e2:
                    5b:33:e4:df:7b:fe:58:38:56:62:70:d2:5c:a0:2a:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:B6:38:3B:CA:94:27:EA:A6:E0:66:9C:17:D4:28:2E:BD:40:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::-2607:9bc0:103f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:9c:82:1f:30:03:f1:06:56:d5:58:67:f9:d8:af:91:72:
         ce:d4:04:2b:2d:e8:95:4a:b1:bb:f0:a4:43:e2:ae:74:d3:2e:
         7c:b5:c0:e4:fb:55:59:6a:37:a0:f0:f2:a6:b4:6b:a9:87:b7:
         7a:c5:93:ea:29:4c:42:41:e9:b8:d9:9f:5e:93:22:ca:23:ab:
         a7:b6:75:13:28:41:66:4f:0f:50:e3:a0:f2:e5:46:2c:04:37:
         3d:4c:a2:d4:c1:ee:f8:2d:03:aa:d2:34:9f:0e:2a:24:f7:a5:
         db:86:41:81:16:07:73:43:1d:a1:b3:93:02:fe:aa:40:62:fe:
         7f:f7:99:40:a2:d6:58:fe:14:c8:d4:de:df:22:60:ff:23:74:
         3f:51:e1:e9:66:68:30:33:dc:18:f5:2a:15:4e:1e:38:2c:ce:
         c7:9b:1d:38:60:64:36:d4:8f:4a:29:f9:f9:a4:bb:0a:66:45:
         1e:8f:06:30:a8:e3:9f:40:eb:9f:64:0e:ca:a5:c6:6a:fc:d1:
         a3:11:cc:2c:96:8d:63:f9:57:86:81:9d:f1:9a:78:10:2b:0d:
         d2:bd:9c:e7:fe:c9:26:a8:46:af:8b:17:ac:b6:ba:1c:2c:09:
         b5:9d:e0:95:61:d6:4c:01:0b:2b:76:fd:62:9b:ca:f7:34:7a:
         4c:dc:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:46:47 2026 by rpki-client