Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c952cf7c-2b5b-30b6-87fe-162a4283bacd.roa
File:                     c952cf7c-2b5b-30b6-87fe-162a4283bacd.roa (raw, json)
Hash identifier:          2b9eMW07N39HaRGZkg0zt65HFToIr9GdHf0DUVf8chA=
Subject key identifier:   18:38:05:9A:01:F0:67:D1:28:6C:61:58:7D:EB:A1:77:9F:C8:6F:A0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584FA1632690CBB8F46A52F00500
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c952cf7c-2b5b-30b6-87fe-162a4283bacd.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     396982
IP address blocks:        2605:4300:3b04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:26:90:cb:b8:f4:6a:52:f0:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=55704cb6-e9e3-46b5-b203-eb79c2bffff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:57:fa:e7:8c:4d:54:a2:5c:f5:eb:6b:e1:
                    37:c5:ae:95:12:4c:10:f4:36:d8:a2:4f:7d:f3:f6:
                    94:c9:c8:bc:08:a3:69:0e:98:1e:ec:83:57:bd:73:
                    22:9b:15:1d:77:03:7b:4e:1e:8f:5f:88:91:1e:ee:
                    fc:4c:b8:b0:03:8a:5b:4f:db:2e:c6:e0:ba:53:a4:
                    c0:d5:86:f9:16:a5:67:b2:6b:69:81:c4:9c:94:a0:
                    06:68:3c:f6:5f:33:93:5b:68:b8:9b:28:53:45:78:
                    93:63:10:31:56:52:28:78:2d:9e:50:e4:a5:ba:7b:
                    a9:c9:3d:85:61:56:42:32:05:11:79:ed:3a:2b:0e:
                    4e:78:e7:7b:03:e1:c0:44:2c:63:e0:e4:b2:94:0a:
                    11:a9:62:2b:2a:7f:99:3d:11:6f:4d:60:4e:25:c2:
                    e7:e4:f9:78:fb:3d:8f:e0:d6:c9:95:56:90:0d:d3:
                    2f:4e:d5:e0:c8:bf:22:b4:d8:a1:93:2f:ff:1d:fa:
                    34:26:ca:d0:8f:ee:d2:7b:61:3c:ab:92:c1:7c:d3:
                    6e:d3:a4:7b:e4:49:ad:fd:1f:47:01:2f:ae:95:fe:
                    8c:af:4f:6c:94:e5:73:43:c0:8f:c3:53:70:41:31:
                    a4:34:9d:e4:a9:16:06:b4:4e:d1:88:8b:60:b5:03:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:38:05:9A:01:F0:67:D1:28:6C:61:58:7D:EB:A1:77:9F:C8:6F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c952cf7c-2b5b-30b6-87fe-162a4283bacd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3b04::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:88:a2:c0:66:ce:6e:d8:fa:9c:6d:54:88:ba:58:e7:cc:
         b9:db:bc:af:21:1a:d4:5a:e4:b5:9a:ca:cc:b9:f8:ac:24:2a:
         e5:88:6f:ea:3b:c6:5c:8e:bd:e0:52:30:ef:a5:17:0e:7d:b8:
         94:7f:a9:22:71:d5:3b:a2:02:fd:bb:f5:04:f5:da:fb:65:cb:
         de:a2:14:f8:5f:48:55:63:2f:cb:cf:e6:b5:d5:93:a9:9b:db:
         03:50:a8:a6:17:28:93:cb:47:b6:cf:6f:70:58:4b:cc:72:e5:
         36:66:1e:76:cc:20:63:f0:a5:c1:db:9f:9f:10:11:fc:91:a8:
         8d:cd:75:5d:c3:3b:ba:76:40:91:c7:4f:71:e0:9d:f8:2c:06:
         2d:e7:6a:06:dc:05:39:45:d7:b5:01:b9:bd:87:dd:4e:a7:48:
         ea:17:a6:91:13:26:37:32:05:05:ca:ac:ec:84:9c:b5:1f:56:
         6e:32:6f:23:9e:0b:05:5f:5c:83:fa:7b:34:04:64:f3:d8:82:
         7a:6a:bd:e7:14:4c:56:cc:0f:95:77:c1:e2:d9:fa:48:72:dd:
         2a:e6:c2:eb:7d:05:be:04:41:45:75:a5:ec:62:06:69:fb:68:
         4c:dd:42:16:ea:8f:5a:0f:0c:d4:5e:1d:8b:35:6a:c3:34:d5:
         ea:e2:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:42:44 2026 by rpki-client