Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa
File:                     a3c68675-a98f-39ec-a89f-2b77a3df4901.roa (raw, json)
Hash identifier:          nZ7vJDxp/j26OXiHJRtOvllwYtm3ZHDR7qGGg3ym0JY=
Subject key identifier:   5C:DE:1B:45:9D:66:93:97:75:80:E4:C0:17:B1:73:D4:57:CE:5A:65
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584F62930EDE1A410B7070ED3440
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     36549
IP address blocks:        2604:1780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:0e:de:1a:41:0b:70:70:ed:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=59c555f5-06cf-4f7f-b632-aed5877a83be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:d5:91:fc:82:23:f8:c4:5d:66:46:f2:6f:
                    01:5d:b9:b4:a0:f0:08:ff:44:39:69:e0:b0:a6:9a:
                    de:e4:90:69:3f:b2:2b:86:c4:48:81:87:af:01:a6:
                    79:39:13:8e:11:f9:d6:3d:56:0b:fe:f3:fb:c1:e5:
                    78:9d:cb:b5:8c:f2:a5:25:ea:ba:aa:34:83:46:7d:
                    f2:f8:e4:13:b0:05:0b:c0:72:3e:6c:1b:28:a9:e2:
                    30:94:fc:5c:93:af:96:33:39:2b:2a:56:bb:44:db:
                    df:67:d3:db:b5:78:f8:db:fa:bd:86:96:e5:1a:cb:
                    97:99:b4:c3:e3:eb:78:60:43:33:07:af:4a:a7:eb:
                    f2:a3:64:16:a4:17:66:4a:23:b9:5e:2d:26:f6:4e:
                    73:9b:62:57:78:a5:04:5d:e9:c1:95:1f:6e:2d:01:
                    99:34:7d:e2:c2:3d:ab:b5:26:d8:da:19:a2:a5:61:
                    ab:4e:20:3b:4f:00:a2:8f:4f:2f:3d:0d:e2:3c:dc:
                    6f:4d:e9:17:01:ac:ac:b6:35:91:76:2f:bd:81:e8:
                    35:82:b5:79:db:88:37:74:ac:bc:b7:af:fc:f7:5c:
                    32:4a:31:8f:f0:5a:0b:9c:2a:c5:81:f6:90:b2:c5:
                    aa:a5:44:e2:62:80:f8:25:14:6a:02:f9:3d:a6:f2:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:1B:45:9D:66:93:97:75:80:E4:C0:17:B1:73:D4:57:CE:5A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/a3c68675-a98f-39ec-a89f-2b77a3df4901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:23:d1:69:ec:5d:3e:5e:5e:11:e4:27:a4:5d:d8:af:f8:
         be:a1:d2:98:82:d8:e3:f1:4d:79:95:9d:e7:d8:a6:d4:d6:7f:
         b4:af:3e:50:f9:41:67:bf:3d:71:d7:cb:fa:cf:66:37:01:6c:
         11:aa:31:e6:8d:3f:20:57:81:37:d6:7a:34:ea:59:94:b3:16:
         6f:a6:86:92:44:96:78:b2:3c:b3:77:19:36:71:94:75:6e:80:
         b8:c3:60:91:92:5c:fa:44:fc:20:04:79:2f:7d:ff:6b:8c:23:
         60:6a:01:ed:de:ea:15:c7:34:f7:26:38:62:c7:67:d3:c7:60:
         d3:3f:03:6d:40:2b:41:7f:e3:23:c8:3b:91:57:80:ef:0a:55:
         ec:b6:e2:75:54:01:42:80:45:66:38:e3:6d:62:03:3d:8a:26:
         de:71:31:9a:82:0e:90:bd:a7:13:4c:32:09:c7:aa:ae:c7:03:
         a0:a8:9b:e0:c4:b7:e2:9f:27:c3:73:08:40:ed:23:71:e5:44:
         c6:84:86:ec:5a:59:f9:36:b3:0d:8c:73:77:83:00:d0:8b:53:
         fe:32:6e:eb:0a:1b:05:ea:c5:b6:23:f2:d1:0d:f9:fc:ea:8d:
         93:58:66:6f:fb:2f:af:14:8a:5f:de:c5:cd:80:7e:62:e7:68:
         18:cf:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:20:40 2026 by rpki-client