Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/02594986-dc57-3549-a504-89e7acff2c20.roa
File:                     02594986-dc57-3549-a504-89e7acff2c20.roa (raw, json)
Hash identifier:          BMTGdQKNVkg7mXhCykowbnKuOONLAnUjfmTDoWoM55w=
Subject key identifier:   95:F4:62:60:53:4B:ED:21:76:F1:4B:5A:D1:90:DB:E8:4E:12:C5:35
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584F4974091BEB0490F870DA0700
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/02594986-dc57-3549-a504-89e7acff2c20.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396986
IP address blocks:        2605:340::/48 maxlen: 48
                          2605:340:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:09:1b:eb:04:90:f8:70:da:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59180370-d7a7-46a9-a199-056dd606ab74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:f4:b0:f6:a6:11:06:af:8c:bc:5d:94:0f:
                    c0:3a:b9:b0:2e:22:e0:77:4b:4f:81:09:0b:4d:3b:
                    c9:7c:2f:c0:de:f5:0f:92:2d:ae:39:f9:46:12:05:
                    d8:96:62:66:9a:7a:86:d8:b3:6c:b9:dd:ab:db:cf:
                    ab:46:91:d6:4d:6f:55:f3:91:5d:bd:88:d2:32:58:
                    37:93:c0:17:ec:e2:ba:29:2e:4c:ca:fa:96:70:23:
                    7e:3c:b4:97:12:9d:b8:34:a9:c5:3b:3b:86:f1:04:
                    45:99:43:a8:2d:ee:be:c3:ba:75:59:8c:3a:17:a0:
                    48:b9:f6:ed:d0:c2:d3:1f:85:b9:fb:04:c6:8f:24:
                    db:58:ba:95:38:9d:5f:b8:28:85:c6:5c:6b:45:a8:
                    32:02:92:5c:2b:cc:fd:ed:7e:fa:01:45:a2:52:00:
                    37:b9:1c:34:f9:eb:f2:51:96:b0:af:bc:12:a2:8a:
                    d7:6b:89:cd:9b:37:99:24:2f:2c:d3:54:50:70:ff:
                    28:d6:12:4f:d6:da:65:f3:19:12:72:d0:e0:8c:fa:
                    56:57:79:10:cf:ed:4b:9a:38:de:6e:c2:86:a6:66:
                    6c:e1:7a:fa:f9:d1:f4:0e:6b:82:47:93:34:f5:ea:
                    ed:b3:40:f4:03:0a:23:18:51:66:b9:7e:c7:f3:ad:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:62:60:53:4B:ED:21:76:F1:4B:5A:D1:90:DB:E8:4E:12:C5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/02594986-dc57-3549-a504-89e7acff2c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:340::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:98:f3:60:92:ec:62:99:b9:ff:fc:31:54:46:36:8a:64:ba:
         7b:64:5d:c1:ad:10:fb:58:2f:3a:b3:2c:0f:2b:c6:e9:f9:0f:
         ff:1f:5e:ad:5b:97:e6:b3:1c:61:78:38:8d:af:d5:b7:c8:23:
         e2:2b:2b:4e:af:07:95:1d:bd:b4:f2:1f:8d:69:66:bb:33:7b:
         86:08:64:48:3d:76:1a:5b:4c:f1:47:6a:d3:9d:2e:7f:80:51:
         0b:98:ee:da:ba:93:f7:97:f1:6c:ea:ba:f9:af:f5:4f:af:25:
         90:82:87:ad:38:2d:ef:6b:6f:52:48:0a:72:53:ec:b3:b2:68:
         1d:83:9d:12:84:0c:6f:9b:47:e7:04:40:8b:9d:96:28:27:a2:
         22:55:d1:13:a1:5a:5a:e7:3d:3e:eb:d2:e7:a8:4e:a9:04:e8:
         4b:70:43:39:99:b9:64:6e:e4:a6:5a:fa:df:da:78:bf:94:7a:
         84:a6:c7:63:f8:6f:d9:93:18:93:d6:90:72:38:4e:f6:8f:5d:
         8d:6f:8a:2b:75:e3:b3:14:ad:45:bc:18:b7:a4:52:92:1d:15:
         20:98:fa:65:97:12:74:f4:2a:c5:2c:91:e2:9d:fa:91:03:ed:
         cb:89:79:39:d5:e3:66:11:29:e0:de:6f:9a:51:1b:14:1f:be:
         d6:82:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:54:09 2026 by rpki-client