Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa
File:                     4277c435-28c3-3fa2-862e-346dc42fa1d7.roa (raw, json)
Hash identifier:          kxG5kH88d4maJV61faLDV5khVRO4nZqsmZGCJWqytnc=
Subject key identifier:   A7:14:13:8E:8B:3F:52:69:A1:13:3F:DA:33:C6:7F:6D:BD:4C:E4:AC
Certificate issuer:       /CN=c24d54f2-22ea-4242-9583-989286d76aac
Certificate serial:       010D0C9F4328584F374D24F323BF4D5D8C8AAA80
Authority key identifier: 6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     19382
IP address blocks:        2605:7c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:24:f3:23:bf:4d:5d:8c:8a:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d54f2-22ea-4242-9583-989286d76aac
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=c949b19f-5ad7-4884-aeb9-67056f151fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:25:05:0d:40:d1:8e:e1:fd:9e:ab:7e:62:
                    b9:11:1e:90:d7:ac:40:65:0e:ee:23:49:89:83:2b:
                    c3:c9:4b:5e:a1:e4:94:64:aa:b6:53:92:2d:95:4c:
                    2e:a1:be:70:ea:d5:94:85:63:2d:dc:29:2b:99:77:
                    60:9e:3f:24:df:c9:98:1b:29:30:30:5f:93:44:e7:
                    6b:ce:51:db:ad:57:10:3d:69:ca:bf:eb:2b:5e:08:
                    fb:d7:72:d3:64:8b:68:34:e0:ee:c2:04:a5:cc:75:
                    19:2a:bb:fa:e9:4b:7a:05:bc:4b:22:25:b1:80:3a:
                    49:36:68:9f:53:55:77:0b:47:07:8f:93:73:ad:33:
                    02:80:97:9f:81:69:03:60:c4:47:45:14:ad:87:c5:
                    f8:a5:4d:f9:8a:0f:2f:a8:ba:d0:4b:d5:16:55:0c:
                    18:db:d6:f8:68:d8:7f:0c:09:06:62:f3:21:18:38:
                    4d:ca:51:2b:52:8b:27:61:32:24:ab:c4:d1:3c:07:
                    e8:32:bf:2a:c0:ba:e4:97:98:f7:1e:41:ed:f9:56:
                    6c:9f:3c:1d:b2:c2:14:f9:47:5e:44:9e:87:c3:2f:
                    f4:8c:60:eb:4f:47:a1:2b:b6:8c:5e:48:40:db:bb:
                    57:97:c9:77:10:4f:17:43:e5:58:85:98:c7:d7:37:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:13:8E:8B:3F:52:69:A1:13:3F:DA:33:C6:7F:6D:BD:4C:E4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl

            X509v3 Authority Key Identifier:
                keyid:6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:b7:76:bc:f6:8c:ad:c6:5a:15:36:19:85:1d:bc:e9:10:5b:
         71:76:36:f7:c6:91:e0:4d:6a:83:1e:82:d2:04:8f:83:d2:3d:
         57:36:2d:85:c6:5b:6e:1b:7f:c1:05:f5:97:df:e7:ad:76:cb:
         07:36:67:0a:15:f4:e8:bc:41:77:c9:81:7e:f7:4a:40:e1:42:
         49:cd:f5:e3:ab:2a:b2:63:da:98:82:ea:79:a1:5b:66:09:03:
         35:b1:25:03:6e:5c:27:0c:b2:6f:04:95:3b:16:6a:0c:9a:5f:
         01:8e:93:fb:73:d5:eb:b3:b6:29:0d:aa:72:1b:28:7b:ca:95:
         36:5e:b1:b9:cc:cf:af:ae:19:09:8d:9e:43:ad:82:08:07:bf:
         de:dd:93:5f:e8:90:8c:e1:8e:78:6f:08:ed:39:6b:c7:c0:cf:
         bf:17:c0:26:7a:be:5d:fe:b9:34:fd:44:53:5f:ac:54:ad:dd:
         fd:b8:a8:b6:ad:8c:a7:e3:47:ac:cf:83:8c:f8:c2:f6:36:b7:
         f4:e4:9e:cc:15:09:2b:3c:13:f8:16:bf:1d:5c:f3:9d:ce:b0:
         ef:df:42:32:bb:e9:be:4d:99:46:ab:2f:10:7c:a8:eb:2a:8c:
         34:6c:cb:cd:aa:c6:a9:f8:90:05:16:2a:10:7b:0f:2f:9c:7a:
         0c:d6:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:13:53 2026 by rpki-client