Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
File:                     6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa (raw, json)
Hash identifier:          /JlRsKUc/FSqupMYlJI/Yc+XbtWg92IGWUOJOOZNtDE=
Subject key identifier:   25:25:A5:31:DA:E5:6D:C2:1C:FB:50:AA:80:96:94:A6:87:5C:A6:46
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584F49750AC638869B7F6762ECC0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     25697
IP address blocks:        2604:ed40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:0a:c6:38:86:9b:7f:67:62:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9a5968f2-f205-4257-b109-f30ee1cc2cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:df:11:ce:ae:d2:f5:77:3f:48:31:67:25:
                    9f:13:a5:89:c5:d7:a1:c4:24:13:78:c7:fd:43:c3:
                    81:aa:ef:2f:5c:58:3a:73:36:c2:6a:55:85:14:72:
                    82:e8:01:91:19:de:62:f7:da:50:35:be:b9:da:6e:
                    16:a9:68:83:69:7b:17:c6:44:0e:72:94:b1:e5:2e:
                    39:c8:4e:e8:ae:4a:5e:0a:53:69:68:b1:11:1e:6d:
                    a3:83:6a:2e:77:d7:7c:d4:a9:a2:af:6c:ba:ff:eb:
                    39:e3:9d:1e:31:4f:f7:81:37:77:ca:56:74:98:39:
                    07:44:9a:03:08:44:c3:e1:ea:a3:a8:57:88:e1:4b:
                    6b:73:d2:3c:93:18:60:4f:b5:33:f6:c5:37:a4:45:
                    46:84:5f:66:d6:2c:c0:7f:6a:7d:0e:ff:6a:44:aa:
                    2f:a1:6d:97:ee:f1:d4:4b:42:81:b7:aa:4d:cd:c5:
                    2c:53:3f:02:a5:7e:e5:20:57:5e:8e:83:3a:b1:a9:
                    3d:a3:19:f1:a5:6e:20:88:37:49:5a:f2:53:04:42:
                    4d:a4:44:f4:1a:aa:45:c5:c5:ec:61:fe:41:1a:69:
                    4c:cb:c8:bd:bc:2e:e5:b9:95:a0:06:39:93:c0:55:
                    2e:81:6e:88:49:a3:d7:93:2b:37:66:cc:39:21:6c:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:25:A5:31:DA:E5:6D:C2:1C:FB:50:AA:80:96:94:A6:87:5C:A6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/6ccdf820-69dc-3ad4-8e96-6aec7ff0c4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:0f:b8:e6:d5:56:5b:1e:6d:5b:d4:22:00:23:96:e6:60:
         63:00:24:57:ad:1e:a4:27:be:74:57:3f:0f:d8:0d:2e:f4:f0:
         c8:50:1f:f3:82:19:8f:6c:ff:55:0e:73:a5:d7:e9:9d:27:3e:
         6a:20:8e:62:cc:e8:c2:0f:6c:90:b4:69:1c:dc:d8:fa:38:3b:
         c2:b7:4f:d2:af:03:94:ac:56:84:ca:ea:c8:36:d5:f8:6d:89:
         61:cc:f6:9d:53:bf:e4:7f:04:53:e2:22:d7:c0:60:2c:9b:9d:
         e2:e3:91:da:e0:e3:7e:98:56:bc:b4:5e:3a:32:aa:68:f3:db:
         a1:69:94:26:07:ff:3d:6e:ea:1e:f8:77:b4:ca:cc:2c:72:d4:
         e0:a7:49:51:f3:31:7c:34:84:71:41:d4:99:c7:7a:36:c0:22:
         a9:3a:73:59:9e:48:00:02:9f:e1:d0:69:6f:d4:ec:84:4c:99:
         6e:65:75:44:73:4f:df:6c:80:55:90:4e:75:63:cc:fc:8e:d2:
         14:34:36:86:d3:3a:bf:90:a6:1d:44:0e:d8:be:7e:e0:ed:b2:
         24:e7:96:2d:34:51:ae:a2:8f:aa:4b:90:a8:d0:11:90:58:8e:
         45:0b:61:ab:45:00:b2:db:e7:68:df:17:ab:7b:69:cb:62:80:
         a7:0f:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:59:13 2026 by rpki-client