Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
File:                     13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa (raw, json)
Hash identifier:          d/BY/BHNxomk44NPsbLVthU3twl0uQSWvhueoTcTHNE=
Subject key identifier:   01:10:39:FB:25:15:1D:23:77:C0:C0:0C:C7:F9:83:F6:BE:A5:38:55
Certificate issuer:       /CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
Certificate serial:       010D0C9F4328584F63F81CE62EE74A57DBD4A8C0
Authority key identifier: 00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     395460
IP address blocks:        2620:6:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1c:e6:2e:e7:4a:57:db:d4:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=f277d648-c8f5-4df2-9f2c-b1a7510cd8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:2b:03:69:26:ac:8f:dc:cf:3d:f2:d4:cb:
                    bf:95:b6:28:3f:d1:b5:b9:2c:aa:17:98:f0:05:f1:
                    17:5e:79:48:03:48:4b:63:5b:ea:a9:8a:e8:fd:5b:
                    55:37:f9:2b:a7:81:16:f0:10:a5:84:0e:f6:13:61:
                    a9:93:37:2a:3e:d0:25:f9:50:a1:94:57:5b:09:6e:
                    24:2d:d3:15:62:69:f2:38:e2:94:5d:35:0e:1e:38:
                    31:fb:29:90:c5:b7:13:72:0c:b5:92:3b:7c:a7:81:
                    56:93:19:86:a1:a0:be:e3:7d:e4:cf:e7:00:97:6c:
                    2d:ed:2a:da:f1:e0:a8:8c:45:23:b6:b3:93:97:c7:
                    22:00:0a:0c:28:8e:d3:55:60:54:b8:89:bb:0c:0d:
                    46:8e:80:20:94:a0:41:48:3e:22:49:c9:c8:fb:93:
                    c2:30:1d:f1:d5:24:22:71:57:76:79:8a:2b:b5:4c:
                    1f:ac:28:22:a4:ac:18:94:52:75:0a:8b:4f:bf:bd:
                    99:c5:1b:6a:4a:47:39:ed:a0:60:72:43:63:2a:c6:
                    90:21:87:a9:e0:28:ff:37:71:19:9e:8e:39:1c:bc:
                    89:87:4e:bd:fc:74:80:09:6c:3c:bd:ef:d0:06:ec:
                    01:8b:f0:bd:44:a2:c6:29:46:a2:72:36:83:5e:99:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:10:39:FB:25:15:1D:23:77:C0:C0:0C:C7:F9:83:F6:BE:A5:38:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:94:78:c6:4b:be:0a:d7:c3:b7:2a:ca:a7:c1:a8:02:df:
         16:0b:4c:19:12:4a:24:80:20:b8:d3:14:dc:25:6a:a0:7d:d7:
         5d:eb:0c:34:bb:8a:65:3e:c9:ec:c7:ec:46:d4:fd:3e:1f:03:
         0c:7a:45:97:09:52:84:21:6d:70:ab:7c:18:02:ba:9f:74:ea:
         08:25:e2:b4:aa:1a:08:c1:78:02:41:cd:f5:a2:9a:d9:0b:d9:
         9a:ae:5e:58:5b:bf:f2:0f:d2:97:88:20:1f:cb:e3:c3:b6:a7:
         b9:9e:53:c0:6b:ea:4a:c7:02:5c:06:c6:73:42:aa:b9:28:32:
         c7:94:3f:e6:82:69:61:87:2e:da:cc:90:cd:d2:b7:b8:02:3b:
         f5:dd:36:6a:5e:ea:e4:2d:16:d2:ba:c9:03:de:b8:a4:96:3f:
         54:d3:00:df:47:9a:1d:7a:f8:c6:1f:81:69:26:78:67:b1:1c:
         f5:ae:71:f4:47:b5:06:83:d5:49:7e:50:29:4f:89:0f:2c:27:
         2a:c3:f4:7c:d1:98:23:4d:f8:99:22:f6:65:34:f8:4f:c6:95:
         11:2a:fd:d4:52:5b:bb:50:14:c6:56:57:f3:ef:de:c5:3d:cb:
         ee:f3:36:70:0b:48:76:1a:db:47:bc:eb:57:ff:42:75:b5:f4:
         75:d2:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:58 2026 by rpki-client