Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/43de6187-cf9e-3aae-b80f-b989c4c0c674.roa
File:                     43de6187-cf9e-3aae-b80f-b989c4c0c674.roa (raw, json)
Hash identifier:          X0d4cvYFewwRq5TjBzJC8UhF5GvFhpgA+Uq4x7SQEEw=
Subject key identifier:   3F:DB:1F:6B:7D:11:4A:ED:6F:62:56:0D:58:E9:B0:AD:18:E1:67:0F
Certificate issuer:       /CN=4875c324-edea-4433-b1d5-4567eb78fa1f
Certificate serial:       010D0C9F4328584F6DBD6CA3D3269976F08EC040
Authority key identifier: B7:BF:5C:E9:F6:DC:CA:D1:FF:D6:E6:D6:E9:94:84:82:7D:F5:98:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/43de6187-cf9e-3aae-b80f-b989c4c0c674.roa
Signing time:             Thu 08 Oct 2026 01:00:11 +0000
ROA not before:           Thu 08 Oct 2026 01:00:11 +0000
ROA not after:            Wed 06 Jan 2027 02:00:11 +0000
asID:                     397449
IP address blocks:        2605:34c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:bd:6c:a3:d3:26:99:76:f0:8e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4875c324-edea-4433-b1d5-4567eb78fa1f
        Validity
            Not Before: Oct  8 01:00:11 2026 GMT
            Not After : Jan  6 02:00:11 2027 GMT
        Subject: CN=d1703647-2273-4632-9752-52b32beb7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:e0:0a:89:c8:1f:6e:07:2a:77:1b:1d:b9:
                    58:01:c3:26:9c:67:2e:d0:93:ba:1c:62:26:b2:1b:
                    ba:33:59:87:08:da:a2:65:32:a9:b7:e1:ec:11:9a:
                    88:5e:75:38:8a:5d:39:00:83:a5:24:8b:fa:fb:c1:
                    86:10:b2:f4:53:a3:20:95:5b:da:30:2b:c2:4a:25:
                    89:39:d8:d8:e4:6a:9f:af:75:42:74:94:a8:1a:a3:
                    92:4e:e3:39:04:f1:bc:9c:ea:fb:7f:b1:ec:cd:29:
                    60:7a:a6:b9:f4:cc:8a:21:8a:74:90:50:21:d7:36:
                    3f:ba:ae:ca:db:ca:5b:ee:12:ae:0b:6e:8b:f9:9b:
                    5e:0b:7a:0d:d8:92:03:75:bf:7d:b9:19:4b:0d:d6:
                    cb:f0:dd:ae:7f:18:50:5a:95:4b:9f:16:55:ec:39:
                    31:9b:17:56:0e:bf:bc:14:69:9d:2c:9a:b2:11:7c:
                    fc:31:cd:66:2c:3f:c7:e0:50:14:13:09:7f:59:3c:
                    28:e3:f4:dc:8c:29:4f:ca:d5:33:dd:84:e7:52:56:
                    e1:cd:5f:c4:38:c8:75:f2:e1:75:43:2e:0d:b8:e1:
                    73:f5:79:86:78:2e:2c:9b:0c:ab:1f:0f:d7:92:be:
                    0f:13:35:89:3f:80:06:63:f2:4d:5f:c4:73:c9:08:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:1F:6B:7D:11:4A:ED:6F:62:56:0D:58:E9:B0:AD:18:E1:67:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/43de6187-cf9e-3aae-b80f-b989c4c0c674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f/4875c324-edea-4433-b1d5-4567eb78fa1f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BF:5C:E9:F6:DC:CA:D1:FF:D6:E6:D6:E9:94:84:82:7D:F5:98:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4875c324-edea-4433-b1d5-4567eb78fa1f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:34c0:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:72:79:62:8d:c4:10:94:29:4f:12:c4:4e:18:ac:5f:1a:
         08:e1:19:3c:02:e8:cf:52:f4:8e:19:86:fd:2c:79:f6:8b:26:
         44:30:d0:3f:97:4e:0b:af:2e:87:a5:b3:a9:87:9c:7f:1d:fc:
         21:ec:03:de:d5:6e:6d:04:be:24:9d:b6:73:4e:a8:17:0e:9f:
         28:98:94:54:4f:26:aa:44:05:77:f9:ce:fd:07:c4:26:77:24:
         dd:2b:78:31:5c:a0:17:b4:66:10:22:ca:1c:ec:2b:b0:2c:f9:
         bd:60:38:c1:6b:16:77:9b:ee:4b:ed:3e:c9:db:f3:27:ba:85:
         91:2c:75:9d:60:9f:b1:28:24:4c:5f:7c:5d:51:13:44:66:49:
         bd:8d:f3:02:d6:35:73:41:c6:8b:f6:33:25:0f:c9:95:fc:a5:
         a8:6d:03:2b:ad:89:0d:cd:67:c4:2f:79:6e:ab:0c:64:c9:d3:
         58:38:78:86:e0:f7:87:e2:34:1f:c4:bc:7a:1f:96:1d:ea:9e:
         10:79:bf:c8:23:7c:4d:05:7a:b1:6c:00:55:0b:64:ea:cc:07:
         b0:cc:4b:59:18:5b:af:f0:ff:e0:80:ed:0c:3a:da:58:56:b6:
         0e:7b:45:7c:48:63:53:8d:65:4b:d2:b9:c2:1c:66:12:65:12:
         36:73:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:07:42 2026 by rpki-client