Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/dfd570b0-89a6-3fc8-8338-42dd88bca7b9.roa
File:                     dfd570b0-89a6-3fc8-8338-42dd88bca7b9.roa (raw, json)
Hash identifier:          H549laxa2Kwxrq34F4h5p3MbzRUAYKsIPPjhFW09cnI=
Subject key identifier:   B6:56:D9:6A:50:6D:49:37:69:78:E1:0D:2F:7C:94:0C:01:81:C1:98
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584F4986E0A56E602FE3C9624D00
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/dfd570b0-89a6-3fc8-8338-42dd88bca7b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399728
IP address blocks:        2620:98:e002::/48 maxlen: 48
                          2620:98:e006::/48 maxlen: 48
                          2620:98:e009::/48 maxlen: 48
                          2620:98:e00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:e0:a5:6e:60:2f:e3:c9:62:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b88036f-408b-4ea9-90ef-c53d15cf0d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:5f:a0:52:21:fe:02:38:c8:20:19:d5:64:
                    f4:e5:1e:9a:aa:bb:b5:44:a4:0b:70:75:db:ca:76:
                    a9:e8:a7:08:3e:5d:a5:3a:3b:bf:13:2e:9b:f8:5d:
                    bd:31:08:95:57:37:62:5b:db:84:b1:3f:ff:de:b7:
                    09:52:68:72:62:63:f3:03:4f:60:39:e6:03:22:8b:
                    3c:86:7e:f6:e7:75:db:74:a9:2a:51:a4:8e:79:75:
                    54:c2:63:8f:80:2b:c6:bf:4a:7e:94:ea:15:e8:e9:
                    8c:3d:a0:e1:12:57:f0:53:42:4e:e6:fc:5d:ca:bf:
                    2e:43:c6:e2:70:4d:8c:05:44:6b:49:65:64:24:92:
                    50:38:85:03:c6:f3:90:71:1c:2a:33:84:9d:fe:b9:
                    f6:63:d3:e2:51:e8:b6:85:37:4d:01:46:09:ed:08:
                    ed:e6:2f:62:12:5d:8a:a2:35:c2:15:77:6c:48:ba:
                    69:44:3d:d6:3f:27:31:c6:26:41:87:16:43:89:5b:
                    26:d6:35:ee:db:a2:da:ba:e6:ab:79:00:46:c9:99:
                    e6:af:97:f6:60:dc:bb:7a:f2:dc:50:a9:44:25:b6:
                    90:c7:9f:a2:ae:d3:de:06:8b:bd:eb:e4:f1:81:a9:
                    e9:50:ee:d5:db:1b:36:19:b3:3b:b7:6b:13:82:fa:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:56:D9:6A:50:6D:49:37:69:78:E1:0D:2F:7C:94:0C:01:81:C1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/dfd570b0-89a6-3fc8-8338-42dd88bca7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e002::/48
                  2620:98:e006::/48
                  2620:98:e009::/48
                  2620:98:e00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:3e:41:cb:f6:69:48:ba:04:6f:e5:36:28:e1:08:8e:3f:
         73:ff:df:1f:38:37:d3:b8:07:c2:71:91:20:07:ef:b6:01:57:
         8f:2f:e1:a7:c5:5c:a8:23:a7:19:57:8e:04:d9:48:f2:9a:1d:
         7c:82:c3:fc:38:60:65:91:58:b2:8e:59:42:3b:b2:1e:0c:84:
         46:d8:c8:c2:a0:41:2c:50:da:96:6c:d6:09:0f:27:be:f5:a6:
         27:57:df:02:1b:8d:fb:94:fc:f6:e9:24:79:de:34:17:5a:bd:
         14:29:32:cb:70:fa:c5:7f:d3:d2:8a:34:e3:1b:aa:b5:25:ee:
         45:c2:44:7f:be:f8:21:72:02:c8:b1:d7:e4:80:5b:79:8c:3f:
         fe:b4:d4:13:fd:d4:0a:1b:13:07:d0:a9:ca:60:8e:6a:a6:84:
         5a:ec:98:9b:c8:91:b0:16:b3:23:97:2c:2f:b0:70:23:1f:1e:
         a5:5f:8d:fb:db:fb:26:a6:13:b9:35:1d:22:f6:ec:b4:99:d8:
         29:5e:62:9a:5b:f5:b9:7f:6d:72:1d:2f:6c:f9:38:2d:8b:e9:
         b1:2c:21:fe:bb:1b:32:5b:22:29:3e:89:f5:2c:d2:91:db:96:
         f3:9e:b5:66:b2:05:78:53:db:65:ae:f6:8d:ea:65:ad:4a:c5:
         c2:0b:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:26 2026 by rpki-client