Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
File:                     b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa (raw, json)
Hash identifier:          wcTIq9aMQ7fZsu2hFHk99/ddln6GawBIqG/xQIv0ObU=
Subject key identifier:   B4:DE:D1:F2:70:FD:CE:08:47:5E:E6:06:EF:0F:28:0A:78:45:CF:D6
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584F49773D73BA63B315CBC52F80
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     49
IP address blocks:        2610:20:6f15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3d:73:ba:63:b3:15:cb:c5:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9cebe472-96b9-4572-a66f-e3416d0edbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:d3:7d:da:2c:05:d7:70:67:e0:56:b8:7d:
                    97:34:74:83:41:dd:ac:1c:2a:c1:7e:8a:bf:ff:e3:
                    93:1f:69:50:3f:c7:27:44:9a:5f:fb:04:32:3e:a2:
                    8d:19:55:7b:c2:04:26:2e:3f:29:81:b8:a2:4a:ff:
                    5b:97:e8:4c:9c:56:21:84:53:41:11:e1:43:32:77:
                    15:97:b6:12:f7:69:fc:f6:77:24:58:05:9f:af:32:
                    0f:01:8b:8e:91:2d:8b:fc:13:30:85:28:30:bf:87:
                    80:40:c1:29:3c:18:c0:dc:21:65:ca:e5:5e:39:07:
                    73:ba:c5:ea:5e:06:08:48:3e:3c:a6:e1:28:70:44:
                    a7:8a:b3:2d:05:b5:42:2f:bd:56:f5:d3:7d:4a:9b:
                    a3:b9:d8:2f:e7:de:8b:7f:44:4e:71:e4:c4:04:e8:
                    35:49:25:2a:7b:89:f4:7a:fc:b9:af:d6:cf:6e:8b:
                    75:9d:c8:7c:7d:c5:b8:75:78:07:e2:f5:a9:83:9d:
                    11:fc:bf:c3:6b:0a:94:54:93:eb:c8:e3:3e:d2:e2:
                    b6:97:04:37:7d:7a:53:07:bc:7a:e3:b1:13:81:25:
                    11:62:68:ea:dd:cf:9f:fa:51:d4:17:ef:3a:b8:f7:
                    6c:6c:24:1d:ee:6b:37:e2:6f:09:42:01:93:cc:67:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DE:D1:F2:70:FD:CE:08:47:5E:E6:06:EF:0F:28:0A:78:45:CF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:56:53:c8:74:37:17:56:41:af:d0:95:60:7b:9e:8c:0f:75:
         d6:17:bf:6e:44:d4:a6:75:0e:c6:bd:34:45:ef:b4:f8:7f:f8:
         d6:fe:c9:a7:1e:ee:5d:ea:58:31:04:1e:f4:7e:dd:9b:79:99:
         2a:2d:f6:af:27:57:a7:37:97:42:f5:e9:fc:79:6c:e9:bf:5d:
         78:b3:04:62:5f:48:83:55:c1:88:e5:61:c7:d2:7f:f9:94:c2:
         06:0f:1e:46:5c:e9:4e:a1:89:34:98:ab:48:94:6e:e2:e1:e2:
         06:83:e0:1a:6a:3b:d7:38:cd:cc:d5:e6:89:2f:cf:01:f7:e2:
         ac:30:94:a0:18:2c:0f:1f:5c:9e:f7:56:01:3a:56:38:54:17:
         be:d8:10:63:d6:9d:11:94:6d:cf:de:36:aa:05:94:0c:14:4e:
         13:61:8e:6a:c8:14:ad:de:d0:fd:9b:93:55:e5:0c:09:eb:42:
         34:97:3e:e2:6d:6c:68:41:c7:5c:4a:5f:4b:63:f0:d6:1d:9c:
         c5:33:95:f5:b1:e4:8c:fb:52:80:b7:c6:e2:4e:e2:c9:10:b0:
         cb:10:da:fd:14:cd:95:93:3e:c8:60:a0:8b:28:21:bf:fd:75:
         43:3c:52:62:4c:8c:5f:bc:05:c0:fe:c6:f1:5e:8c:90:4b:9a:
         9d:da:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:21:54 2026 by rpki-client