Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/9148427e-d11a-3039-9736-9244cd5305ab.roa
File:                     9148427e-d11a-3039-9736-9244cd5305ab.roa (raw, json)
Hash identifier:          CfuRQDq6zVlJWeSPjwP/bDGqaqlN+BQyyCq9iqZiYdQ=
Subject key identifier:   28:F4:1C:4B:BB:0C:ED:A9:9E:CB:53:BE:A6:0B:6F:6E:80:9B:95:EA
Certificate issuer:       /CN=55198723-cd37-42d0-b009-27a78b15a8f1
Certificate serial:       010D0C9F4328584F49743B5572CBFF4A15A487A0
Authority key identifier: 9E:36:D2:CB:2B:D8:98:87:CE:D7:62:5B:48:E8:9A:5F:DD:E6:43:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/9148427e-d11a-3039-9736-9244cd5305ab.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     24940
IP address blocks:        2620:dd:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/55198723-cd37-42d0-b009-27a78b15a8f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/55198723-cd37-42d0-b009-27a78b15a8f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:3b:55:72:cb:ff:4a:15:a4:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55198723-cd37-42d0-b009-27a78b15a8f1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a5180005-49e2-4c46-b658-f439fe41bdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:5f:f5:07:77:1d:e9:31:54:d7:b2:f6:63:
                    93:2d:db:30:b8:1b:74:8d:4f:e1:72:7a:39:67:7c:
                    bb:11:2d:54:9b:9d:f8:51:d4:50:d4:65:c2:cd:b8:
                    70:64:bc:aa:af:c2:fd:48:9b:25:21:77:79:85:91:
                    26:16:19:c0:db:a0:6c:bb:8b:cd:0a:3d:2b:e4:c4:
                    2e:f1:ed:c2:a1:78:e4:a2:0e:9e:2f:aa:13:d8:37:
                    10:b0:5e:2d:58:4f:3e:58:f1:80:54:e1:f1:82:b2:
                    94:c5:ec:88:27:cc:ff:f0:b9:41:d9:75:c3:e6:0a:
                    09:85:fc:b1:b3:ec:f0:30:85:8b:a3:dd:eb:9f:7c:
                    c8:4d:e2:82:0f:aa:81:6d:62:97:33:86:82:d2:eb:
                    31:57:eb:88:82:21:9b:ab:89:e7:15:88:58:24:9a:
                    06:1f:f1:9b:02:d8:c7:37:62:9f:40:61:38:2c:7a:
                    6f:58:f0:93:99:66:42:be:db:2c:6e:66:8d:36:c3:
                    09:79:d2:b3:fa:34:19:7d:92:ee:61:cf:4f:36:0f:
                    fa:f7:cf:7f:df:9d:38:ed:8d:91:ec:1f:93:7f:a8:
                    51:2b:7f:90:64:cd:7b:ff:5a:b7:c5:0e:4e:28:46:
                    b9:7c:e1:8f:0d:e5:b7:cc:66:e9:bb:3b:33:f0:96:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:1C:4B:BB:0C:ED:A9:9E:CB:53:BE:A6:0B:6F:6E:80:9B:95:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/9148427e-d11a-3039-9736-9244cd5305ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/55198723-cd37-42d0-b009-27a78b15a8f1.crl

            X509v3 Authority Key Identifier:
                keyid:9E:36:D2:CB:2B:D8:98:87:CE:D7:62:5B:48:E8:9A:5F:DD:E6:43:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:dd:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:2b:21:5c:5a:8f:37:cd:cd:c5:b4:81:4f:cb:b5:f4:ed:
         77:bf:5f:e9:03:8b:2a:ac:f9:9b:37:3c:6b:37:f0:0b:7f:c7:
         aa:7b:23:8d:fc:74:8a:27:45:eb:b6:e5:9d:9d:52:d5:48:dc:
         43:f8:a3:40:93:55:54:55:05:5b:3d:fe:6b:de:9f:a3:84:28:
         03:5f:23:a8:65:36:3e:49:14:22:14:6f:1c:5d:e5:2a:76:c2:
         7d:96:87:b8:e5:8e:1e:d7:d7:92:24:da:b8:22:5f:53:b0:72:
         f5:2a:45:92:33:f4:19:d7:d3:a1:30:3f:05:67:4a:a4:8e:b5:
         77:b5:72:6f:24:9d:37:36:89:a3:00:91:60:f7:0a:d6:c2:99:
         e3:f4:0d:eb:7b:79:e9:76:fc:a6:a2:c5:77:d9:4c:69:24:b5:
         a0:07:33:6d:b4:2c:a3:48:67:b3:5d:ec:16:f3:f4:16:9e:c6:
         2e:d6:3b:4f:3b:d8:b8:f6:02:89:bc:1d:16:3a:47:47:a0:2a:
         43:92:2d:da:37:89:dc:79:f8:bb:a6:65:66:ef:2c:f0:f4:b2:
         ba:9c:f0:98:8b:dd:62:25:10:4e:b1:0c:e3:9c:f3:e8:f0:3a:
         eb:7e:1f:d8:27:b6:7c:85:09:c5:e3:2d:13:38:62:4e:53:88:
         77:dd:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:17:38 2026 by rpki-client