Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
File:                     4a42fb5f-b644-37be-b039-55b5dbcabadb.roa (raw, json)
Hash identifier:          6KR8p+rJd7/Ya0Uy4ckdPhK/J1pMy6w50GQwY3492z4=
Subject key identifier:   27:B0:12:AE:B6:45:F4:B7:02:10:31:48:C5:21:48:6C:EF:89:2A:36
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584F49773D48590528BEFE12DE00
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2648
IP address blocks:        2610:20:6b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3d:48:59:05:28:be:fe:12:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e2ac6e87-16a4-4bfc-8e05-f8fa4ede5b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:d7:f1:f0:95:32:ae:c2:4b:0a:f0:3f:59:
                    cb:cf:f6:19:e4:97:48:d1:3d:a8:05:66:c5:fd:ef:
                    bd:6f:77:44:32:ed:5a:95:b4:bf:5b:75:ce:fc:ac:
                    db:b4:6d:79:e4:a5:fe:4e:36:1f:99:f2:1e:1a:a7:
                    6b:7d:30:49:38:39:30:3b:49:01:50:87:2a:dd:81:
                    f7:98:65:db:dd:0b:3f:d4:cd:bf:c1:76:36:b1:aa:
                    46:4b:12:4e:b6:db:87:20:09:37:8a:fa:87:59:83:
                    82:be:91:e6:62:09:40:19:25:bc:64:9b:bb:06:68:
                    b3:52:16:fe:4e:6c:ec:96:2f:87:e0:07:49:de:82:
                    cb:54:ba:76:02:40:b7:a0:10:ea:4a:36:4e:49:20:
                    ab:33:67:f1:45:e4:b7:cd:35:63:61:f7:2f:87:69:
                    28:0b:c7:61:f2:48:35:5f:ec:bd:0d:20:6d:69:84:
                    0a:60:86:80:55:b5:ac:cc:b3:ba:5b:9a:8d:be:ab:
                    24:2d:e4:b8:bd:e2:1b:19:9e:1b:57:d8:6b:bf:3a:
                    85:3e:52:35:a5:1f:73:9f:0c:e1:4a:c9:dc:3c:c4:
                    65:69:95:f9:76:74:f8:8f:be:97:d1:1a:53:2b:45:
                    1d:46:06:58:1a:72:ad:5c:a0:96:97:45:43:c1:6d:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:12:AE:B6:45:F4:B7:02:10:31:48:C5:21:48:6C:EF:89:2A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:80:d7:de:64:87:96:06:a4:1e:b0:eb:5c:ac:62:c6:f3:6f:
         40:27:63:a8:07:cc:32:b5:ae:99:67:ee:58:ed:74:f0:50:5b:
         be:d7:03:ea:d2:ee:26:22:27:34:11:93:87:0d:ec:3d:27:f8:
         57:ee:88:74:92:f9:1d:78:56:2c:f8:70:f2:85:fb:07:4d:5b:
         77:80:29:1c:4e:17:eb:b9:03:dc:23:8d:63:7f:02:10:27:83:
         c3:03:73:3a:98:59:72:b8:1b:e8:d6:2a:d9:f8:0d:65:8d:f1:
         b8:9c:19:fe:d5:5f:cc:f1:fb:8b:29:1a:36:a3:3b:73:1a:d4:
         d0:82:4d:ca:0f:83:42:82:2e:d0:e2:c6:f1:8c:3c:ff:45:d5:
         21:d7:c1:98:fa:dd:5b:86:be:05:72:a9:87:38:67:8e:8c:4c:
         72:78:82:9e:be:6b:f2:cb:48:a0:59:60:54:66:89:30:f2:dd:
         8e:87:2d:57:c3:5b:a1:7e:d2:23:9a:c9:bc:1a:3e:9b:22:3e:
         3d:58:38:91:12:02:7c:d7:ef:c6:e5:28:e9:5a:7e:1e:db:c2:
         c5:d6:68:64:28:99:b9:a7:ac:55:1e:a7:4a:bb:57:24:97:98:
         16:5f:78:50:12:d1:00:29:1f:37:7f:be:d5:ba:bc:60:f8:05:
         4e:9f:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:24:34 2026 by rpki-client