Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
File:                     854c42fa-3e10-360c-b939-919df3fc02c0.roa (raw, json)
Hash identifier:          uno0lbC97adv8GkZAelby1hxw72DQSE5RrN7IYPA7Ts=
Subject key identifier:   FC:12:BB:12:AA:26:B1:5C:20:F7:66:65:31:41:3A:40:12:CA:6F:64
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584F85786EF42267EB57E5DA9C80
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     399077
IP address blocks:        2606:4dc0:ffff::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:6e:f4:22:67:eb:57:e5:da:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=fc8bc056-01f2-4d40-b6ad-90a236f0d810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:ca:47:bf:d4:5f:be:33:96:55:33:5e:eb:
                    7b:6d:b6:9d:d7:bc:88:01:e8:08:3a:ec:14:38:6e:
                    c1:43:51:db:83:ea:21:e3:2e:42:bd:fa:b2:ec:dd:
                    a7:a2:38:da:5b:e8:eb:43:2e:c8:3c:bf:53:2d:cf:
                    c5:98:7f:68:4b:63:07:6d:3b:e5:31:60:96:6e:da:
                    d3:78:d0:d3:fb:10:66:f0:ad:9e:27:73:54:09:ce:
                    f5:c7:de:cd:73:bb:fd:c1:b0:68:75:0c:d8:70:73:
                    26:e7:7f:4f:4d:a0:ef:a0:7b:a1:7a:42:1e:8f:e5:
                    39:d6:d5:a8:f8:ca:48:3b:94:59:4c:7f:80:08:4a:
                    8f:cb:65:75:5f:4a:8d:7f:cb:6b:1f:2e:ef:e2:7b:
                    f4:b4:b1:61:f3:3a:fb:1e:08:b1:33:be:f1:8b:1a:
                    89:59:e0:db:be:9e:fb:8a:3e:4a:f0:75:3e:dd:c6:
                    2e:1d:3d:a4:36:ad:9c:a3:3d:4c:47:1d:5f:61:60:
                    fc:b5:c3:91:49:dd:d7:36:82:a5:de:b0:e5:e7:5e:
                    b3:9f:82:b4:35:0c:14:43:96:7c:c1:ac:26:b0:2d:
                    ca:43:26:ba:3d:70:4b:53:8b:bd:63:52:1d:1e:c8:
                    34:11:ee:76:15:3f:b3:d1:2f:f8:a2:24:83:e1:a9:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:BB:12:AA:26:B1:5C:20:F7:66:65:31:41:3A:40:12:CA:6F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:9b:44:d7:62:11:8e:26:98:55:2b:fe:12:09:b2:0a:49:
         3f:ca:ec:ff:85:92:30:c2:05:9d:e6:9d:c6:b1:75:9d:ee:26:
         73:f8:71:e5:4a:ab:6e:b6:4d:32:af:d8:04:a1:a6:ff:4c:21:
         2c:ff:c5:5c:72:75:71:4b:7f:21:67:98:db:54:12:19:e5:71:
         66:aa:37:86:c7:7f:c2:da:15:7d:64:2e:aa:96:c9:ab:82:0f:
         c6:4d:14:8f:fd:3e:ff:30:fa:ac:58:94:62:11:16:ba:d5:99:
         44:61:29:5d:11:3e:3c:25:5c:52:b8:6c:6c:fe:e4:a6:47:9f:
         33:9f:15:fb:60:35:89:16:4f:be:4b:a1:9c:8a:0d:4d:5b:61:
         61:f4:4f:74:87:51:aa:04:14:ba:66:85:79:62:cf:ce:b3:7f:
         d3:2a:c6:6f:6a:16:29:59:69:8b:69:07:f1:e1:73:db:65:7f:
         ed:e4:1c:b2:6c:02:41:33:81:f4:03:96:47:12:48:e1:10:95:
         90:02:49:4a:9d:3a:aa:1a:29:cf:e9:3a:86:64:23:d6:69:bc:
         c1:78:3b:d3:dc:9f:d0:b5:5c:3e:a9:ad:c6:11:f4:0e:0b:19:
         09:5a:a4:1a:cb:05:72:87:36:99:d5:cb:bf:ce:45:f4:ea:4a:
         d7:4e:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:54:50 2026 by rpki-client