Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa
File:                     d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa (raw, json)
Hash identifier:          JJ6ylWOIeW/SIUXP1EkwffIH1uoHWleWBrCo5NpS308=
Subject key identifier:   A6:C6:20:55:C0:99:1E:6F:EA:33:EF:92:7E:FA:5E:31:27:AE:13:9A
Certificate issuer:       /CN=a327249c-db27-40a5-b04c-da03ae2d60a8
Certificate serial:       010D0C9F4328584F7E7D9A5C134A002B47FA9560
Authority key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     402647
IP address blocks:        2607:9440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:9a:5c:13:4a:00:2b:47:fa:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327249c-db27-40a5-b04c-da03ae2d60a8
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=c95bf5ce-9934-4727-959d-6ab560780abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:62:98:f3:9c:b7:22:20:46:db:f0:fa:72:
                    a8:40:06:d3:de:90:80:d5:ba:96:df:8e:e2:71:05:
                    5a:2c:55:27:c4:16:a5:57:51:1f:09:fe:cc:f7:85:
                    8d:b6:76:8f:d3:d1:f8:c0:f4:98:7b:b1:e5:6b:98:
                    0d:b2:93:a2:d1:18:ee:2c:f1:0a:f1:d7:30:d7:66:
                    3b:43:9f:64:02:b9:42:63:c2:0e:cd:f3:26:0a:90:
                    26:c3:84:b2:25:01:27:9b:1b:d0:9d:45:ae:c6:ea:
                    bc:f4:1a:e6:6f:a0:d7:05:fb:4e:20:51:07:3a:11:
                    b2:ad:9a:73:92:88:3e:af:8f:25:4b:82:40:3d:ee:
                    df:21:ee:2a:f5:ec:19:d9:64:b3:76:1c:d2:1c:2c:
                    82:99:60:77:e1:e4:7d:8b:98:b7:59:7e:f3:8c:a2:
                    59:2b:81:5a:0c:43:c4:a5:53:4b:98:e7:7a:b3:f7:
                    cb:72:d6:0b:87:d9:54:41:44:39:59:cf:c0:8b:3b:
                    69:4e:b0:7e:e0:02:4e:60:7c:3f:45:7e:c9:6b:e0:
                    3a:60:5f:bb:20:26:8b:fc:f9:e1:0e:b5:f0:b3:f9:
                    f0:d1:ca:86:e0:ef:de:38:dd:75:f3:c4:96:35:e9:
                    1e:2b:26:06:69:94:fe:b3:45:02:f3:74:e2:db:bc:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:20:55:C0:99:1E:6F:EA:33:EF:92:7E:FA:5E:31:27:AE:13:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/d7e681bb-a419-3e52-b71d-ff5e7addbfce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl

            X509v3 Authority Key Identifier:
                keyid:EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:ab:ac:dd:4c:6e:1a:c0:cc:42:f7:45:a8:85:a7:3f:94:
         ed:23:ba:28:33:3b:61:4f:56:45:b9:66:b5:cd:c0:40:d5:81:
         d6:24:32:ca:20:8c:3d:93:5a:40:01:a1:5b:8f:67:86:e1:fe:
         bb:33:9a:76:c7:e2:18:75:01:72:5f:29:b0:bf:f4:b4:c9:75:
         cb:0a:4e:c0:00:37:ae:b9:87:7b:c9:ad:93:d0:04:e2:ed:6d:
         ec:ed:4e:b4:ec:be:97:00:ab:5e:a6:ac:f0:7d:41:20:76:fa:
         0b:ab:c5:bf:2d:da:c6:77:ac:c7:d5:06:0f:6f:81:bb:47:11:
         0e:60:30:ec:ad:fb:87:2a:87:c4:1a:3a:7d:5a:e3:de:68:85:
         03:94:1b:f3:f7:28:88:03:c9:01:75:0a:7c:ff:72:8d:e0:8a:
         8f:6b:ae:3f:45:8b:24:c8:ff:b9:6a:50:ae:3c:8b:4f:fd:58:
         1a:61:a8:cd:fb:74:28:21:2b:af:43:85:99:f3:f2:bb:97:c2:
         96:ef:bb:26:17:1d:7b:82:0f:df:f9:a7:4c:8d:4c:0e:f3:e6:
         80:10:c9:db:a3:b6:d2:58:3f:e6:8c:b4:73:ee:9a:db:ff:c6:
         b9:0f:ac:07:14:01:fb:6b:23:bc:18:22:ac:2d:88:56:33:5c:
         9d:cc:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:17:42 2026 by rpki-client