Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa
File:                     309f777a-2676-330c-b1ac-45f416a2de90.roa (raw, json)
Hash identifier:          C8jMxYgW+Q7C6JIVFgxZyh/WfpqxVLqxifQ3KPLuTgo=
Subject key identifier:   05:49:8D:88:AC:3D:46:4F:B1:19:EB:69:C3:3F:CB:A8:51:B2:26:AF
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584EFCACC93EF40BE390CF1A8200
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        2605:ce40:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c9:3e:f4:0b:e3:90:cf:1a:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=9d2bc92d-867a-4977-9adb-b753a4221407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:5e:31:a8:00:20:94:e3:37:36:30:5d:b3:
                    68:55:dd:79:ed:36:52:3e:6e:54:25:19:28:85:a8:
                    56:cf:57:b9:fe:38:27:c4:b5:ef:52:84:39:51:02:
                    32:52:64:8e:db:ef:71:c1:ff:99:11:2b:66:be:14:
                    03:d2:87:b1:1c:49:70:79:be:ae:58:f8:ad:1a:07:
                    78:ee:20:ce:bb:7e:88:48:fe:da:46:f3:4c:2d:3c:
                    48:c9:4a:29:01:5e:9f:77:5c:76:21:0f:84:f9:6c:
                    0c:cd:a6:7f:04:33:8b:a8:8d:ac:64:34:98:16:da:
                    66:70:d1:77:1d:82:62:20:76:bc:f6:bf:21:e6:20:
                    ba:f9:67:4c:eb:96:37:32:ac:c1:5f:0c:78:3b:13:
                    e2:15:77:46:d4:3b:06:92:2f:c3:22:27:36:39:3c:
                    06:f8:ae:cb:eb:65:06:ec:f0:23:df:27:3d:e9:db:
                    79:25:4e:ff:c3:85:be:72:3a:6e:bf:fc:db:f0:d1:
                    d1:fa:10:8f:85:6f:52:ba:89:c3:29:9f:08:17:94:
                    34:4e:03:c7:d4:04:b5:77:c6:00:ee:de:72:4f:25:
                    0a:a9:e6:d5:b9:f8:f2:b4:1d:fb:c3:eb:34:36:e1:
                    2f:1d:d2:00:a6:80:a9:03:52:93:f4:2f:94:c4:77:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:8D:88:AC:3D:46:4F:B1:19:EB:69:C3:3F:CB:A8:51:B2:26:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ce40:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:7f:ad:62:02:b9:e1:96:be:08:dc:f8:97:38:6c:23:4b:
         db:8b:1d:a0:ab:69:b6:46:21:cc:41:bb:30:af:47:2b:07:58:
         17:8c:a2:ef:ac:55:2f:f1:94:82:28:5d:ba:de:78:de:e7:67:
         b5:37:46:0f:64:48:3f:57:a1:81:74:8b:3c:46:18:2c:e2:6c:
         4e:1f:e9:90:02:82:62:58:7a:3c:60:31:c4:a9:98:5e:02:95:
         94:01:4a:05:fb:cb:b9:d3:12:ec:33:95:c1:35:29:28:1a:8b:
         a5:fa:d5:8a:87:33:57:09:1f:a3:06:d1:16:af:eb:eb:eb:ff:
         e8:8f:fa:54:37:b7:07:72:6c:af:c7:f1:9d:44:79:84:d1:e5:
         a8:9a:77:38:3d:e3:f1:e8:6c:88:e3:f5:07:89:07:be:e3:20:
         fc:a5:f7:bb:a9:ec:99:77:a8:40:08:22:5f:7a:d2:f5:bd:e6:
         0c:09:7c:eb:c6:e1:b3:94:e6:f3:32:8c:eb:ae:c0:6a:39:aa:
         f1:a3:5a:99:75:ad:be:94:c8:de:bf:44:b5:40:ff:bb:f3:92:
         dd:85:ba:ad:6b:f9:56:7f:fc:2d:ec:99:72:2e:ed:71:71:6b:
         5d:98:b5:67:d1:e7:94:33:c0:97:de:08:85:a6:17:af:f8:d0:
         77:45:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:55:24 2026 by rpki-client