Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c8e3bf05-d980-35f5-9c6b-2294ecdfac16.roa
File:                     c8e3bf05-d980-35f5-9c6b-2294ecdfac16.roa (raw, json)
Hash identifier:          +K962FuSpQQBK4iS+HB0cne5bOdqyMODtibDRv1wdRc=
Subject key identifier:   9D:CE:CB:6F:C7:FA:4F:62:9D:46:02:D7:25:EF:5A:50:1E:3F:4B:37
Certificate issuer:       /CN=c4aedb33-8769-4c61-812f-8b5c73c1bec9
Certificate serial:       010D0C9F4328584F802C7E71AEFF54C84E1FEA80
Authority key identifier: BC:18:42:E2:2E:90:73:4B:28:E2:21:F9:76:04:B1:87:B0:C3:1B:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c8e3bf05-d980-35f5-9c6b-2294ecdfac16.roa
Signing time:             Wed 14 Oct 2026 15:28:34 +0000
ROA not before:           Wed 14 Oct 2026 15:28:34 +0000
ROA not after:            Tue 12 Jan 2027 16:28:34 +0000
asID:                     402517
IP address blocks:        2604:2a60:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c4aedb33-8769-4c61-812f-8b5c73c1bec9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c4aedb33-8769-4c61-812f-8b5c73c1bec9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:2c:7e:71:ae:ff:54:c8:4e:1f:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4aedb33-8769-4c61-812f-8b5c73c1bec9
        Validity
            Not Before: Oct 14 15:28:34 2026 GMT
            Not After : Jan 12 16:28:34 2027 GMT
        Subject: CN=89bd5b3e-4713-4e3e-8505-597eb334a439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:6f:0c:46:fc:64:04:af:a5:30:60:a3:d9:
                    03:b0:1d:84:97:27:d8:62:79:fa:e0:69:2f:c5:7f:
                    b6:56:d1:14:d0:bb:83:cd:33:e6:51:f3:c2:15:c3:
                    1d:0f:7b:15:72:6f:a9:64:bb:d6:38:0c:03:a2:f4:
                    18:55:f1:e4:08:27:f3:53:8b:7f:0d:6d:32:1d:66:
                    2d:48:45:91:cb:d1:09:9f:a7:36:39:25:99:5b:9f:
                    ce:4d:31:f5:a4:9f:c5:d1:41:f8:dd:6f:38:f5:66:
                    c7:e5:90:25:04:1b:12:d8:35:94:13:85:15:a8:dd:
                    d9:61:c8:34:ac:d1:d4:a6:c0:72:e3:77:24:57:80:
                    0a:3f:10:c4:94:ec:ec:81:b5:aa:f6:a0:1c:a0:1b:
                    41:35:ad:23:79:aa:0f:52:07:66:b5:20:84:4b:37:
                    c7:27:d9:ea:af:2c:7e:79:21:c7:38:a6:3f:f4:fd:
                    dd:c2:34:c3:62:f2:2d:70:73:f0:5c:e3:f1:7d:99:
                    bc:9b:e4:94:00:e9:93:e7:2f:84:6a:83:7b:6a:59:
                    e8:e0:63:61:ae:e4:e8:01:d8:2f:4e:03:22:a0:a9:
                    f7:30:a2:55:d2:fe:7c:ce:c3:1d:c8:52:f0:c5:78:
                    d4:0d:5e:48:96:35:78:3e:ef:5d:b3:c5:6f:07:af:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:CB:6F:C7:FA:4F:62:9D:46:02:D7:25:EF:5A:50:1E:3F:4B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c8e3bf05-d980-35f5-9c6b-2294ecdfac16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c4aedb33-8769-4c61-812f-8b5c73c1bec9.crl

            X509v3 Authority Key Identifier:
                keyid:BC:18:42:E2:2E:90:73:4B:28:E2:21:F9:76:04:B1:87:B0:C3:1B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2a60:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:02:a8:e2:ca:5c:8f:9f:61:bf:e1:4e:06:d6:f5:6b:70:
         43:2f:4a:69:62:07:d7:0f:84:75:84:07:0f:42:8c:ec:08:3e:
         09:e9:dd:b2:87:02:dc:ea:4a:0e:4e:96:57:6a:ac:b0:66:16:
         c5:bd:52:60:4c:ae:40:29:71:dc:b4:2e:e0:fe:2c:ab:b9:ee:
         77:49:da:66:5b:37:4d:c3:ba:7f:09:87:5f:75:57:8b:bb:ca:
         eb:cf:2b:48:2b:3d:c5:e3:b7:ff:3a:7f:75:ca:f5:b5:70:53:
         8d:51:df:1c:99:e2:8c:ec:6e:8c:b0:1a:7c:14:1e:9a:02:4d:
         a2:18:53:34:e9:60:ed:d9:e0:3c:05:47:bd:ed:67:99:23:ac:
         c9:89:1e:d2:7b:b5:33:e6:9a:93:4f:8a:16:c9:40:c7:f6:5a:
         2f:b9:ac:9d:d8:e0:bd:60:7a:dc:c1:c4:aa:f2:9f:a3:f3:77:
         f6:44:62:ca:87:0b:ec:d1:0b:41:b8:e8:a1:72:82:35:d6:b3:
         d3:8f:a4:c5:ee:ce:d9:95:d7:8b:41:af:8f:19:4d:59:05:61:
         52:b7:6d:5d:28:ab:4f:88:a8:37:ca:86:fa:ee:de:e1:ac:2a:
         c4:f7:e0:1a:be:16:f7:c5:0b:12:73:44:b6:e0:88:61:d8:c2:
         52:d2:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:28:51 2026 by rpki-client