Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/00223195-67e5-34f2-a04b-191b5837cd39.roa
File:                     00223195-67e5-34f2-a04b-191b5837cd39.roa (raw, json)
Hash identifier:          B2GVslq8x3F9lovYejOiestsUvyBc0zrXBQPAXs/AaY=
Subject key identifier:   5B:2A:6C:B4:13:D2:DC:9C:91:0E:5C:08:DF:1D:15:FA:44:EC:1D:1F
Certificate issuer:       /CN=d511ff26-c854-4c09-9ca9-d2090ae9af04
Certificate serial:       010D0C9F4328584F80D3751F400659C7A84CDA80
Authority key identifier: 13:71:09:6A:DD:35:11:57:DE:E1:27:3B:F6:C5:0A:29:5D:97:8F:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/00223195-67e5-34f2-a04b-191b5837cd39.roa
Signing time:             Wed 14 Oct 2026 21:04:59 +0000
ROA not before:           Wed 14 Oct 2026 21:04:59 +0000
ROA not after:            Tue 12 Jan 2027 22:04:59 +0000
asID:                     403069
IP address blocks:        2620:99:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/d511ff26-c854-4c09-9ca9-d2090ae9af04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/d511ff26-c854-4c09-9ca9-d2090ae9af04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:80:d3:75:1f:40:06:59:c7:a8:4c:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d511ff26-c854-4c09-9ca9-d2090ae9af04
        Validity
            Not Before: Oct 14 21:04:59 2026 GMT
            Not After : Jan 12 22:04:59 2027 GMT
        Subject: CN=a4e3fcc5-6fb4-4815-9cde-6f57a7bffc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:be:3b:59:19:15:26:c3:30:8e:b8:25:f2:
                    45:b6:4e:6a:0a:59:db:8c:a5:d7:8c:9d:a1:e4:f9:
                    27:76:dd:c8:7d:a6:22:1a:de:a4:17:5d:30:3b:4c:
                    9f:dc:b8:2e:98:f6:cf:ed:2e:c8:30:2f:7c:f6:06:
                    d9:a6:e8:b7:b0:27:af:9f:8d:ce:35:db:b5:03:06:
                    3f:28:7d:04:8e:b3:f7:37:dd:7b:34:b8:2b:19:83:
                    88:56:16:d2:86:7b:25:1b:54:cd:bb:66:40:10:79:
                    e5:91:4b:4e:ef:71:cd:e9:8e:c2:05:64:71:e0:71:
                    6c:3d:20:b6:f4:af:e6:2e:cb:9a:12:6b:bb:92:83:
                    d8:1a:59:07:7d:0f:fa:99:4b:2e:92:81:cc:6f:36:
                    03:79:c8:64:df:9a:69:f7:2d:69:6b:e0:17:9a:c2:
                    0e:24:b3:34:f6:73:14:94:cf:bd:51:f1:cd:6c:f2:
                    a4:16:99:f3:ae:74:0e:39:fa:36:2a:4b:d6:ae:3d:
                    80:b5:32:ad:7c:09:6e:21:c6:87:b5:9e:0d:39:ca:
                    d3:b2:f7:5e:a2:e7:17:41:44:45:c1:e7:61:02:de:
                    48:42:0e:c9:9a:4c:cc:ec:8f:f4:44:aa:b1:b9:19:
                    50:64:86:89:d3:53:0f:9f:d2:78:79:ca:0d:43:9a:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:6C:B4:13:D2:DC:9C:91:0E:5C:08:DF:1D:15:FA:44:EC:1D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/00223195-67e5-34f2-a04b-191b5837cd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04/d511ff26-c854-4c09-9ca9-d2090ae9af04.crl

            X509v3 Authority Key Identifier:
                keyid:13:71:09:6A:DD:35:11:57:DE:E1:27:3B:F6:C5:0A:29:5D:97:8F:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d511ff26-c854-4c09-9ca9-d2090ae9af04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:99:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:ee:da:21:b0:2c:c5:ef:f5:9a:77:f7:76:7d:58:80:dc:
         13:ed:55:7b:6f:12:60:20:b4:b8:30:a7:10:95:8e:01:4f:fe:
         9b:88:b5:08:76:28:4b:7a:82:25:38:98:97:99:8d:cc:be:00:
         97:43:ea:40:28:43:6a:f7:f6:ce:a3:0d:31:bb:7d:1d:4c:14:
         87:97:ac:fe:e8:f9:fe:ee:05:55:ae:90:33:49:15:2b:b6:96:
         e3:24:db:b3:89:7e:d2:08:47:e2:44:7e:9b:43:47:d9:af:1d:
         c2:2b:eb:31:8f:ae:9e:34:d1:f5:4c:77:fb:69:68:81:84:b8:
         f9:0d:98:10:2b:ef:1b:4b:ab:b0:73:a9:44:1a:9a:9c:ca:5a:
         58:4d:73:5b:57:c7:04:7a:0c:3c:cc:6a:21:8a:91:95:1b:7f:
         1b:bb:60:71:aa:f5:5a:99:fd:89:ea:c1:97:c6:de:e6:4e:24:
         1a:ec:2d:b2:eb:9e:8b:31:14:e5:83:35:4e:c6:3b:5f:87:7f:
         73:23:09:c7:b1:b0:ba:91:c6:2d:3c:fc:d8:33:92:c1:a1:46:
         e3:c6:2a:3e:34:a0:62:c1:14:65:95:1f:bd:55:3b:38:6c:4e:
         5c:d4:5c:c9:94:14:03:b5:f4:53:65:bc:07:20:64:e2:e3:45:
         5e:99:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:56:21 2026 by rpki-client