Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2a6459c8-42ea-3c58-96fd-2e022c4e9e76.roa
File:                     2a6459c8-42ea-3c58-96fd-2e022c4e9e76.roa (raw, json)
Hash identifier:          RFZd9QF0SZOMA8+HBI7dCxZQBdqMidXvlPWpIMxH/Qs=
Subject key identifier:   8D:ED:07:68:A5:14:59:43:4F:7A:71:37:36:0E:96:BC:37:DC:14:EB
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F46A7E632AF78A3F4E83ECA80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2a6459c8-42ea-3c58-96fd-2e022c4e9e76.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        2001:49f0:d13a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e6:32:af:78:a3:f4:e8:3e:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=4d9612fd-8ee1-4138-b5e0-6dc223a3d5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:b7:f8:60:38:20:4b:e2:67:dc:49:62:4f:
                    f9:ce:ff:0b:a1:8d:2e:6f:6c:1e:03:7c:3a:c8:1d:
                    6a:71:54:51:f3:87:11:93:67:30:8e:33:53:c5:5c:
                    de:30:81:7e:da:f0:c8:6a:2c:07:01:94:34:45:f6:
                    24:6d:2f:9a:3e:d6:fa:2f:1f:0f:bf:e1:a4:6d:96:
                    2b:20:84:4e:3d:00:1f:9f:a0:b3:8a:32:91:a3:22:
                    ef:df:66:91:08:58:e8:bf:be:29:a2:f8:78:53:42:
                    94:dd:ca:a5:3e:57:54:7b:d4:4c:bf:98:da:68:83:
                    9b:26:b8:8a:f5:32:0a:bb:9e:7e:f5:52:66:a7:b9:
                    3d:c0:9c:c2:c1:2d:77:df:c0:7b:97:c8:98:6f:12:
                    be:db:58:65:de:1f:f7:7c:02:ed:36:84:61:b5:28:
                    60:56:c2:d4:39:ae:dd:39:41:66:b5:ba:cd:42:4a:
                    25:98:2e:17:05:a3:51:1b:79:53:34:8c:ec:12:01:
                    41:a9:25:5d:07:da:24:ff:30:5a:e1:c3:4c:85:51:
                    a6:f9:96:cc:6b:71:b0:e2:cc:83:3f:88:25:9a:fb:
                    03:f2:c9:05:a0:4f:1c:a9:bb:db:67:78:91:20:03:
                    0c:d1:4c:e2:a6:3b:a4:ee:1b:d7:8c:82:dc:25:9c:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:ED:07:68:A5:14:59:43:4F:7A:71:37:36:0E:96:BC:37:DC:14:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2a6459c8-42ea-3c58-96fd-2e022c4e9e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d13a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:68:37:8b:ad:b8:e3:11:b7:0a:f6:a3:80:20:74:dc:c0:9a:
         92:fb:df:e8:ff:3a:41:3a:e4:f2:b7:42:e7:22:59:8c:1f:cb:
         85:65:f5:00:49:43:df:11:52:ff:b0:da:43:44:72:9b:36:2f:
         53:27:d8:cf:33:4b:b9:69:87:a1:d7:ce:13:a7:b4:d5:1b:ff:
         10:31:bb:3a:bd:32:3b:a5:44:d8:7f:69:64:7b:3b:f4:9a:9d:
         30:8d:e5:34:f3:72:ac:e3:84:14:ee:07:5b:96:a0:73:bb:0a:
         d0:b2:30:37:56:8b:cc:eb:c5:19:92:d6:eb:ac:6b:95:13:9f:
         f1:86:d6:91:3a:0f:34:42:b6:6b:27:19:38:b6:04:04:1b:9d:
         64:15:b4:ca:f3:da:6f:df:2e:eb:b3:76:81:d9:bf:bc:1c:c6:
         80:77:f8:83:95:33:fe:0e:10:28:55:2a:24:99:f0:f4:58:1b:
         97:d3:b3:fd:30:4e:39:4f:1a:5b:30:20:62:eb:e3:8f:6d:53:
         63:27:be:56:b2:28:f1:a2:7c:2c:6c:34:2d:76:ad:b7:a0:c4:
         5d:7a:94:52:83:22:57:02:2d:09:d4:42:ae:4b:45:45:cb:c2:
         09:77:cd:58:d5:65:d5:02:f1:83:ee:48:a4:b0:ad:62:79:f5:
         e6:2b:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:26:53 2026 by rpki-client