Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa
File:                     95dc919a-dcd4-36c2-b956-415e8edee518.roa (raw, json)
Hash identifier:          +kzB+ylCNG09A1cEYQGVioTmUmCfogoRrdl1gv0CKkk=
Subject key identifier:   60:2D:26:85:23:D0:11:C5:B5:7D:1B:C6:38:7F:AC:B4:92:C6:86:75
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584F63F819E238015043CEBEFFF6
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     17012
IP address blocks:        2620:110:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:19:e2:38:01:50:43:ce:be:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=217e1ffd-22b3-4de3-9793-0f8139118551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:3f:5e:5d:6c:32:41:ca:0e:42:15:52:bd:
                    b9:60:ed:d2:a3:6b:61:c4:3a:00:34:82:c4:03:cc:
                    62:86:6d:55:f9:a1:98:1e:42:b5:73:5e:c6:3e:3d:
                    fa:77:3a:69:fe:a1:86:46:10:a8:72:8a:95:3e:43:
                    2f:1f:2f:52:1c:3a:76:e1:78:6f:59:97:0f:89:db:
                    35:bb:d7:bd:07:7c:32:04:1a:3c:f6:ad:6a:ba:bd:
                    64:e1:41:51:b7:0b:73:0d:7e:07:9f:a7:0f:ec:ca:
                    1e:1d:ee:f1:40:a4:00:c4:1d:ad:31:aa:a0:2e:88:
                    a1:dc:db:d7:49:44:99:18:ee:58:66:cd:4a:38:4f:
                    ad:a6:8d:89:c4:5e:1a:57:42:03:3d:f1:43:e1:71:
                    c5:ad:be:74:39:e9:7a:c3:c5:2d:4d:ba:04:28:be:
                    5f:8d:44:2d:a4:dc:3f:dd:3e:3c:27:f9:08:ef:3c:
                    9a:8d:e7:6a:90:47:3d:4f:9b:bc:25:8f:3e:87:81:
                    3f:03:28:e7:ea:02:8d:4c:5a:17:03:2e:8b:99:83:
                    70:09:6b:9b:cb:22:08:ab:3f:80:cf:67:31:92:dd:
                    cd:0d:75:c0:67:29:4a:e5:c5:82:f3:e7:ed:79:93:
                    27:5f:6e:be:d7:d8:95:3a:b5:f5:e0:68:b4:07:8e:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:26:85:23:D0:11:C5:B5:7D:1B:C6:38:7F:AC:B4:92:C6:86:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/95dc919a-dcd4-36c2-b956-415e8edee518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:110:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:98:ea:9d:18:59:77:10:89:94:9c:c8:f1:e5:6c:a0:ae:
         37:4c:4b:82:7d:df:0f:b3:f7:54:d0:15:6d:a2:45:bf:9d:66:
         3d:03:32:ca:35:d9:f2:bc:b7:af:ec:f6:d0:35:82:b4:25:11:
         9e:6d:44:b4:6b:07:1e:b1:dd:73:82:28:26:3a:b3:c9:9d:86:
         f6:1f:3b:62:fa:4e:6a:69:6d:e6:34:6a:a8:c8:c5:6e:58:60:
         5b:48:32:52:e3:2d:b3:11:b3:03:07:d5:77:f5:a9:93:d8:3f:
         5a:d3:85:3f:db:7e:e5:69:ac:51:eb:47:ab:c8:b4:de:ee:39:
         07:40:78:21:2e:1f:8c:a3:38:78:f2:01:6d:b0:06:a7:6b:0d:
         78:1b:9c:74:b4:2f:f1:cd:59:74:f2:cc:82:87:9d:65:5a:e9:
         43:bc:f5:3f:71:5a:db:0e:d3:4a:7e:8f:7a:11:c8:97:14:00:
         19:cf:ec:21:f8:36:57:fa:36:66:15:4b:eb:93:3c:46:85:78:
         1a:2a:a9:9b:b7:31:bf:98:ed:9d:2f:5d:a7:6c:ad:3f:3a:3e:
         38:3b:76:58:c3:06:7b:9f:e3:ab:67:92:17:7b:b4:e3:9a:66:
         b5:c7:7e:cb:2f:44:17:e4:f4:4b:e3:dc:64:d6:1b:d4:fd:3a:
         6e:a3:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:37:59 2026 by rpki-client