Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202/d0db63e2-6e6b-30a6-b22d-0029ab69f03e.roa
File:                     d0db63e2-6e6b-30a6-b22d-0029ab69f03e.roa (raw, json)
Hash identifier:          957GJe5iG5xUTwFO+j2V7Z6ZqyODsJRbg0aJ0ooAgGs=
Subject key identifier:   64:17:24:9B:AF:25:7A:51:A4:A1:DF:96:1F:41:27:07:D7:16:7D:77
Certificate issuer:       /CN=6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202
Certificate serial:       010D0C9F4328584F5417CFAC57E601A5598221E0
Authority key identifier: 5C:6D:04:D0:82:E0:F1:F7:96:70:62:59:4C:78:69:B5:8C:F2:B5:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202/d0db63e2-6e6b-30a6-b22d-0029ab69f03e.roa
Signing time:             Mon 28 Sep 2026 20:31:20 +0000
ROA not before:           Mon 28 Sep 2026 20:31:20 +0000
ROA not after:            Sun 27 Dec 2026 21:31:20 +0000
asID:                     54706
IP address blocks:        104.36.24.0/21 maxlen: 24
                          209.94.66.0/24 maxlen: 24
                          2605:4980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:17:cf:ac:57:e6:01:a5:59:82:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202
        Validity
            Not Before: Sep 28 20:31:20 2026 GMT
            Not After : Dec 27 21:31:20 2026 GMT
        Subject: CN=c3de9133-05c2-4bcd-88a5-404d770f056f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:a9:e6:d5:45:19:14:07:19:99:c6:40:5c:
                    22:ad:10:8a:77:39:cd:cb:26:dc:68:3b:dc:92:f4:
                    b6:a0:7d:01:d5:09:1a:42:55:0a:f1:41:95:f4:9a:
                    5a:cb:14:c7:01:bb:d9:3e:c3:4f:ef:18:a8:99:c5:
                    94:7a:e4:f9:a1:f2:36:07:84:97:3f:85:8c:77:eb:
                    c0:c8:61:3e:50:03:57:df:67:61:5b:55:8f:9c:75:
                    e9:9c:4c:17:c6:2a:5c:c1:bb:22:1f:dc:7c:8c:aa:
                    44:55:60:be:cb:f8:c4:c8:28:33:48:4f:60:74:c8:
                    04:8e:9f:c9:b7:9f:ed:fc:04:a3:27:2c:c1:f1:0d:
                    18:40:38:bb:57:78:20:7a:0f:79:0c:04:5d:bc:1e:
                    cd:b7:2b:15:82:49:b4:7a:f8:70:2c:59:0a:a9:20:
                    25:3e:04:15:f2:2b:4a:b1:38:99:1c:47:aa:ff:29:
                    3b:3d:fe:e1:92:b8:18:25:91:1b:fa:66:18:a6:81:
                    28:a0:7d:48:a7:0b:f2:73:b1:6d:16:be:4b:af:f4:
                    00:96:60:82:8c:40:40:73:69:17:8c:1d:5f:4c:22:
                    ef:1e:f1:5b:bf:9f:e3:98:1c:2f:12:98:b6:35:20:
                    6d:c1:bd:d5:7f:c1:17:c2:30:e5:7d:0f:bd:4d:50:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:24:9B:AF:25:7A:51:A4:A1:DF:96:1F:41:27:07:D7:16:7D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202/d0db63e2-6e6b-30a6-b22d-0029ab69f03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202.crl

            X509v3 Authority Key Identifier:
                keyid:5C:6D:04:D0:82:E0:F1:F7:96:70:62:59:4C:78:69:B5:8C:F2:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6c1e4b5b-ee1e-450c-92e9-1a5fbe44d202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.24.0/21
                  209.94.66.0/24
                IPv6:
                  2605:4980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:0b:cd:5d:5c:13:47:a7:74:2c:7b:32:e9:86:8e:28:27:
         88:1b:75:23:d7:7b:0a:f4:92:34:f4:91:ae:ab:89:bf:5c:44:
         0e:af:36:73:07:4d:8d:07:e7:6c:b0:37:2c:77:dd:40:9f:55:
         0f:ce:b9:ac:cd:f6:d8:2d:a6:26:c8:a7:e0:2d:3d:3e:ac:b2:
         6e:cf:d8:d7:99:3b:05:a9:c2:93:9b:33:4e:b4:68:07:50:c6:
         b6:04:34:f3:bd:78:9f:3e:ae:a2:7e:8f:49:3c:79:e0:c0:c1:
         4f:2d:5c:73:62:0c:64:e3:32:79:af:5f:b0:c5:25:c5:21:f2:
         86:73:35:b8:29:2a:f7:a2:ec:ad:f6:e4:94:c2:55:d1:f0:be:
         8d:08:a2:16:4d:8b:9d:c1:2f:5d:50:e5:27:79:36:c6:d7:d8:
         83:87:b4:a8:31:ac:99:00:5c:1d:57:2e:62:99:81:36:2b:09:
         65:af:3e:47:fa:ec:1b:ce:fb:43:67:db:df:4c:c0:b8:90:f5:
         ae:18:f2:ac:92:f8:ce:31:5a:0a:cb:2b:d5:7b:d4:5a:0d:bb:
         dd:05:f9:72:6e:fe:96:65:14:2d:a5:5a:40:99:81:a1:53:03:
         c7:06:21:ca:68:c8:91:c9:75:c6:ae:cb:36:8b:26:bf:fa:77:
         87:35:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:09:54 2026 by rpki-client