Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/c1a7b6e9-c9cd-37c6-aa4a-afbd092e80d8.roa
File:                     c1a7b6e9-c9cd-37c6-aa4a-afbd092e80d8.roa (raw, json)
Hash identifier:          cyyqdqRb/jEPPIcJTpEL8vWmgvvFm519NKAGmk1Rd/Q=
Subject key identifier:   5A:80:23:9A:24:0B:28:7A:9F:CA:93:1F:63:97:21:9F:72:45:32:96
Certificate issuer:       /CN=a327249c-db27-40a5-b04c-da03ae2d60a8
Certificate serial:       010D0C9F4328584F7E7D9431799CBA4510F1CE80
Authority key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/c1a7b6e9-c9cd-37c6-aa4a-afbd092e80d8.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     7018
IP address blocks:        2607:9440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:94:31:79:9c:ba:45:10:f1:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327249c-db27-40a5-b04c-da03ae2d60a8
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=273a544f-6105-4b7c-a424-9c59d40beec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:32:f2:20:8a:78:35:73:c2:ba:07:f7:2e:
                    d0:7e:b5:a3:fb:d5:ff:74:c0:75:e7:49:10:2d:87:
                    36:76:ea:51:4b:11:db:b6:4e:5f:2b:48:32:53:7a:
                    84:a4:db:d5:27:79:d1:64:6b:03:14:22:00:24:08:
                    31:85:32:c3:27:3d:6e:60:29:81:3b:fd:e1:46:70:
                    6b:52:bd:62:b6:e6:7b:a5:5e:7c:47:44:3c:bc:ce:
                    aa:dc:f8:dd:1a:a1:d2:17:64:c3:af:6d:3b:c4:f2:
                    c7:0f:74:71:97:80:a1:f6:62:c7:c8:29:88:36:05:
                    df:99:2c:99:64:61:70:ba:20:d9:cd:9e:06:3c:b9:
                    1a:d0:97:c2:ad:84:a9:da:78:de:94:61:5e:f9:49:
                    d1:fb:42:15:1c:ee:58:52:63:29:cf:0b:dd:16:50:
                    33:34:14:cb:2d:03:b1:df:54:14:6c:6c:f4:8f:53:
                    4c:af:83:3e:88:c3:8e:f4:57:1c:9c:26:3c:11:31:
                    48:a3:d4:5d:dd:ce:15:bf:78:2d:4f:4e:55:ae:7b:
                    30:1a:d5:34:0e:d3:2f:39:da:9d:f5:48:d9:1a:b1:
                    58:a2:20:69:f6:3e:c6:55:82:10:79:6f:fb:95:ba:
                    e4:70:9d:86:08:c7:eb:77:07:85:d4:50:0a:c5:e8:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:23:9A:24:0B:28:7A:9F:CA:93:1F:63:97:21:9F:72:45:32:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/c1a7b6e9-c9cd-37c6-aa4a-afbd092e80d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl

            X509v3 Authority Key Identifier:
                keyid:EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8d:4c:0b:97:d8:2a:ee:58:d6:80:2f:0b:b3:e7:7e:8b:f1:
         a8:45:d9:fb:11:aa:c3:23:3d:41:59:84:c2:63:8b:43:bf:44:
         34:c7:cb:74:d5:5d:00:95:00:61:98:d9:7f:13:2c:9e:62:a7:
         57:a4:d6:4d:15:e7:d2:45:ea:2d:b5:7f:76:f0:17:da:5a:89:
         8e:2a:dd:df:fe:7d:0a:a4:47:8e:6d:3d:5e:fe:4c:b9:52:ef:
         57:5e:71:23:53:a0:0d:66:67:53:6a:06:b7:8c:4b:a2:5c:6f:
         10:6e:da:f4:e1:32:c4:08:9e:2d:09:2c:00:f9:76:1f:57:29:
         b6:4a:63:75:ba:47:bc:11:b2:81:15:d2:15:36:7a:d2:0a:51:
         3d:8e:16:93:04:ab:dd:1f:c3:f3:ec:91:6b:d0:e6:f7:54:db:
         e5:d1:32:40:98:4e:c1:73:d6:91:13:14:23:56:96:08:4f:ce:
         30:e9:3d:3e:c8:3c:6d:78:37:44:6c:22:8d:a6:e4:34:45:ce:
         f4:73:f6:15:2f:f9:d0:0f:a4:c0:08:ef:53:c9:a4:11:5a:ff:
         c6:5f:46:e7:c2:cd:06:78:1c:65:3d:d4:60:37:16:59:87:5c:
         48:a3:1f:b5:17:e5:68:01:f2:ec:61:fc:98:fc:0a:16:54:14:
         41:02:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:33:57 2026 by rpki-client