Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
File:                     a0664a04-65f3-3769-8cf8-3417add96a9b.roa (raw, json)
Hash identifier:          S3PwbhmdUkqqwaKS4RehdRVsdP5bC0TF6aG+2aUw4lM=
Subject key identifier:   C6:EA:96:D3:40:AA:77:35:2C:12:D9:6F:DB:3C:6B:6F:F0:6F:35:9A
Certificate issuer:       /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial:       010D0C9F4328584F4975E8386E5C00EEB15C8820
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14500
IP address blocks:        2607:72c0:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e8:38:6e:5c:00:ee:b1:5c:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eeeee380-ba9d-453d-9361-bb5c1bb41241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:ac:bb:85:04:e4:6f:09:96:c1:c7:79:c5:
                    39:ca:49:d8:f0:aa:21:cc:a7:54:d1:11:2d:58:66:
                    38:37:98:f2:87:e0:6f:cd:9e:f4:e7:b9:45:03:ba:
                    7c:40:8f:1d:79:16:15:78:b1:60:c1:9a:94:59:97:
                    35:a0:a9:98:85:72:7d:36:ec:18:66:03:b2:ff:49:
                    b9:85:ef:d3:77:f9:3a:da:88:e7:f9:6b:f2:73:01:
                    47:0b:78:8b:9e:b1:46:e4:f2:c4:d9:38:12:86:76:
                    ef:05:ca:46:97:a4:51:77:9d:9c:13:a8:18:3f:ad:
                    2b:0a:fb:cf:0b:cd:57:23:4c:9c:66:80:79:42:78:
                    51:c3:77:d4:f1:9f:2c:1d:55:65:f7:a2:54:0b:3e:
                    0e:ea:6b:a3:97:3d:02:a6:9e:57:95:04:a5:74:29:
                    29:d3:2c:3a:79:93:34:79:ac:14:20:25:9e:74:df:
                    21:15:de:74:a4:0a:3e:2f:a2:4e:ed:43:9a:55:ad:
                    93:3d:a3:f4:d3:6f:bc:d9:5f:60:e3:89:d7:dc:5b:
                    03:28:06:a4:af:54:a0:71:bf:0c:08:1f:de:e3:38:
                    f4:b8:01:66:b7:08:6e:58:a8:92:e5:e8:42:f3:6b:
                    d4:be:8e:0f:f2:06:fb:9a:e9:79:c9:9e:33:cd:58:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EA:96:D3:40:AA:77:35:2C:12:D9:6F:DB:3C:6B:6F:F0:6F:35:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/a0664a04-65f3-3769-8cf8-3417add96a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl

            X509v3 Authority Key Identifier:
                keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:72c0:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:92:6a:7c:c7:16:56:52:48:1f:e6:4c:9a:86:7a:e9:df:
         b2:e6:b4:e7:72:47:e9:20:6d:cd:a9:34:8d:39:13:54:7a:1b:
         66:37:eb:b2:10:c6:54:e2:04:94:87:e8:da:01:75:06:cd:08:
         fa:be:ae:f4:95:ab:a4:ba:0b:99:ee:d6:39:56:0a:9f:94:d7:
         38:27:a9:f9:6f:a5:82:24:06:3c:3e:31:17:5c:76:76:06:f9:
         1f:d8:1f:f6:10:18:c7:53:20:60:2b:c4:ca:3d:c4:5d:89:d8:
         0f:f2:69:64:57:94:94:2f:da:f6:20:63:b9:db:8a:ff:06:5e:
         12:bc:30:91:60:63:67:ce:1c:09:f4:32:6b:09:1b:93:fb:57:
         8c:0c:47:89:fd:aa:08:c1:9a:c1:4e:e5:b9:9e:98:28:21:d0:
         54:4a:28:a8:10:c3:5e:6d:0f:ad:fb:0f:d5:e2:17:f3:ce:7a:
         89:b7:9d:dd:b3:9a:60:31:78:5a:54:81:c9:73:64:5e:16:e2:
         b6:a6:34:11:81:22:09:b7:0b:69:57:99:d3:fe:f3:75:b0:c9:
         66:12:48:80:56:78:f2:93:e7:cb:ec:41:00:21:1d:9f:02:89:
         91:04:2b:99:92:cf:d6:dd:c7:19:83:e7:27:1a:6f:f4:7f:3e:
         60:9c:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:42:38 2026 by rpki-client