Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/df5bc089-dade-3d21-b218-df56e9dde606.roa
File:                     df5bc089-dade-3d21-b218-df56e9dde606.roa (raw, json)
Hash identifier:          5bAcEP7IBewu65bak2e4maY7c58+HwtDZhP9uKLxHZw=
Subject key identifier:   19:6E:9B:72:DA:5C:15:4C:37:AA:C7:10:3F:54:DD:28:D4:89:1B:1D
Certificate issuer:       /CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Certificate serial:       010D0C9F4328584F63F8155AAED5457F45025D00
Authority key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/df5bc089-dade-3d21-b218-df56e9dde606.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     57976
IP address blocks:        2620:10b:9000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:15:5a:ae:d5:45:7f:45:02:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=43cffe8a-f296-4a54-9e60-55dc46a26efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:58:06:ce:a8:6b:6f:28:7c:f5:0c:ae:f2:
                    41:85:16:60:39:87:8d:02:3c:7b:8c:0e:2a:72:f6:
                    6f:30:93:96:ef:75:46:5c:c2:bf:01:20:0a:d7:88:
                    5d:d6:5e:7e:57:d9:dd:e7:3d:cb:83:62:3e:1a:8e:
                    14:79:7f:e2:81:54:64:66:9e:ab:37:e1:d6:35:71:
                    1c:7f:02:98:67:ca:68:db:2e:4b:5b:a0:4d:d5:3d:
                    84:84:a6:0f:64:69:79:92:2d:41:d8:a7:27:0a:b3:
                    72:c6:2b:e1:21:df:c3:c6:e7:14:90:58:2b:cb:31:
                    3f:e9:61:5d:a0:ec:72:2f:fa:e3:83:9f:38:34:e9:
                    34:88:7e:e2:59:4e:87:78:5e:88:7f:bb:81:50:55:
                    14:1d:eb:49:d5:ac:e3:c9:72:e8:93:ab:63:07:7f:
                    c6:6b:43:e2:42:7f:68:ca:e0:80:c4:f0:19:8c:7b:
                    fa:24:6a:5b:d4:2b:b5:fd:a6:2e:9d:0e:73:e8:ad:
                    2f:41:3a:a8:9c:3c:d3:de:83:c1:e3:7e:48:4c:23:
                    1c:bd:fb:03:8d:75:dd:7b:08:ab:2f:4c:f1:d6:38:
                    7e:a6:7f:97:d8:be:b0:1c:89:ed:2e:f2:96:b6:d3:
                    d9:1a:83:8c:c8:08:84:f0:43:13:d0:78:1b:18:8b:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6E:9B:72:DA:5C:15:4C:37:AA:C7:10:3F:54:DD:28:D4:89:1B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/df5bc089-dade-3d21-b218-df56e9dde606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl

            X509v3 Authority Key Identifier:
                keyid:AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10b:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:42:42:b5:df:17:e3:e6:5f:42:04:0a:46:5f:87:6b:13:9b:
         62:3e:64:f9:7d:a5:5b:fe:ac:4f:18:67:de:3b:5a:78:a5:fd:
         13:18:d5:19:d9:2d:91:70:f2:c2:01:d5:a6:6e:30:c7:c2:7c:
         7c:3d:96:9a:58:57:50:53:71:ca:7f:5e:36:d7:1e:1d:a2:e5:
         16:7e:35:19:68:c1:10:d4:6d:72:1b:52:50:4b:7f:c0:e0:f2:
         7d:06:23:87:99:36:9f:11:44:55:88:2a:81:ae:bc:fb:f1:07:
         49:01:ab:a9:ce:43:52:5b:8b:77:9c:a9:d0:2a:64:3b:0b:cf:
         24:8e:f2:0e:6d:1b:99:9a:54:b8:70:cc:f4:44:68:99:40:92:
         f6:94:7d:42:ad:d7:ef:15:a9:89:9f:fa:af:64:ee:7b:23:1a:
         5d:a3:d7:f9:9f:19:5f:31:b9:48:db:56:1c:26:a7:2c:23:53:
         dc:5e:6c:03:59:7b:21:bc:18:3b:f8:0e:66:5f:0a:73:e1:11:
         20:2c:42:05:8c:e9:f6:6c:7a:77:a4:56:44:96:03:c5:8b:70:
         d7:c0:57:9e:8b:43:6f:e9:ac:9f:d4:ce:2f:46:e8:99:98:25:
         fa:61:c3:f4:d7:ff:3d:e3:84:39:08:4c:6d:4a:41:10:b6:43:
         3e:6d:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:54 2026 by rpki-client