Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
File:                     5d25e087-be39-300b-9ac3-0f9a2a629082.roa (raw, json)
Hash identifier:          O1TDqhOhiFJDBmMsTS0hzVu3o5PsE67DDtiGKnQsrEA=
Subject key identifier:   9D:CD:2B:87:A1:64:1E:DB:2A:5F:76:F0:41:D1:F4:83:70:53:09:C5
Certificate issuer:       /CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
Certificate serial:       010D0C9F4328584F7782F1D5BCABCE669382EE00
Authority key identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     5670
IP address blocks:        2607:97c0:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:f1:d5:bc:ab:ce:66:93:82:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=f5406b60-28bc-42f1-9c5b-25495e14ae9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:23:b5:d7:f6:53:4d:97:75:17:cd:86:ab:
                    b7:b1:9f:d8:6b:ab:d7:7c:6d:9a:f6:c7:ab:39:bb:
                    de:47:08:a1:58:bf:ca:60:42:51:be:ae:49:c2:59:
                    a5:12:7a:e1:81:e0:9d:3a:6e:df:cb:ef:a8:f0:54:
                    b4:b8:b6:68:ef:82:8a:8c:d5:b1:cf:f3:00:77:4b:
                    6a:55:c1:a0:dc:82:fb:01:4e:7f:da:9e:19:76:22:
                    9a:81:a5:58:31:39:18:ef:34:36:b3:c2:af:4e:60:
                    96:b3:72:5d:fe:38:e9:e0:66:8b:4e:06:e7:58:a0:
                    00:1e:cb:72:cc:ab:9d:80:e7:1d:41:c6:76:eb:83:
                    d3:3c:b8:86:f8:5a:52:d3:51:48:96:0f:0d:fd:7a:
                    60:a4:99:b0:50:33:37:1c:36:15:6e:f2:4c:4e:d2:
                    91:2e:85:ff:cd:ce:af:70:11:4d:20:55:1f:e6:25:
                    bf:73:ec:35:06:26:1c:1f:03:84:db:21:fc:6a:a8:
                    4a:e4:1f:13:a8:e4:e4:aa:ad:05:a9:7a:de:0e:ba:
                    69:58:1e:03:0e:bf:2c:a8:f8:9f:ad:b4:c2:92:b6:
                    a2:ab:2a:e0:2b:3f:d4:fd:ea:cf:ac:30:de:68:51:
                    c9:8a:c5:2e:31:98:d1:8d:b7:93:a6:99:fa:25:80:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CD:2B:87:A1:64:1E:DB:2A:5F:76:F0:41:D1:F4:83:70:53:09:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl

            X509v3 Authority Key Identifier:
                keyid:D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:97c0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:5b:62:29:29:a5:20:cc:1e:5c:80:84:fa:15:29:5c:94:
         77:4b:49:af:3e:50:62:5f:bf:57:bb:31:ae:59:e5:2b:d9:ad:
         d0:ed:71:2b:20:d4:7b:e0:33:56:f4:dc:39:13:93:86:eb:9b:
         47:ed:a1:5c:31:9f:4a:75:0c:9c:18:aa:bc:11:8a:45:7d:df:
         9c:d6:51:84:e7:f2:c8:a9:79:c5:7b:2c:da:da:89:67:cc:90:
         86:54:11:ae:f3:e7:3c:9e:a5:4d:a9:65:3d:81:e7:66:bc:81:
         26:67:02:ff:c5:a5:85:e0:bb:79:50:12:57:ad:25:e0:d4:fa:
         51:e2:4c:22:04:22:2d:ef:10:ed:58:0f:6e:c4:7c:10:1b:78:
         c4:d5:e7:5e:90:70:b8:d2:26:b4:81:c4:52:29:03:06:41:6b:
         ce:3b:fc:76:d6:ba:36:9f:74:81:02:ee:72:86:83:5a:eb:9a:
         4b:92:b5:04:82:e6:04:00:d6:e3:6b:6c:78:ed:bf:da:fc:22:
         e6:de:2a:b8:c0:03:4c:8d:46:51:72:98:72:3b:1e:46:6d:c9:
         54:fc:66:21:cd:68:1a:bf:e0:20:d6:93:3f:ed:00:7b:f4:fb:
         c8:b1:8f:9c:f3:6f:fc:46:f8:67:b0:a6:f2:e8:1d:a0:8c:c6:
         15:bf:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:25:01 2026 by rpki-client