Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/17e913b1-7221-3e6b-b6fb-7bb85056ef09.roa
File:                     17e913b1-7221-3e6b-b6fb-7bb85056ef09.roa (raw, json)
Hash identifier:          RkBKmOEZHX1hqo8rnMgsGBKgSpT09jE7klJETVMWRlA=
Subject key identifier:   C3:F0:0B:37:4E:33:CE:CA:FC:4C:3A:E3:7A:A8:6C:A4:FE:AC:6D:97
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584F4F07FF9F4945291C17F1CC80
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/17e913b1-7221-3e6b-b6fb-7bb85056ef09.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     19901
IP address blocks:        2607:6c40:c840::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ff:9f:49:45:29:1c:17:f1:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=e3c77ab0-6e6c-4e18-84a1-61106fe4e113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:b4:b5:5e:3f:81:0a:7f:4e:42:b4:38:59:
                    41:cb:89:77:de:49:d1:db:85:5d:99:58:16:93:e2:
                    dc:a1:88:9b:3a:37:84:30:80:61:84:16:7f:5d:a3:
                    17:52:65:2f:1e:e4:2d:a5:22:52:19:eb:02:1b:5a:
                    1e:70:d2:5b:65:86:98:45:43:6c:38:ef:44:73:8c:
                    6a:ab:44:31:83:e5:04:e3:a5:89:ec:78:f4:ec:43:
                    56:43:1d:10:fa:3a:91:98:27:b2:63:7f:ca:d5:af:
                    b7:6f:57:b0:62:16:f4:1c:08:06:5a:ef:d9:f1:03:
                    c9:b7:e8:b8:98:6e:75:62:55:0f:74:40:d9:07:54:
                    74:4c:ce:be:8b:aa:71:13:9a:20:03:df:30:c3:ca:
                    bd:36:30:66:0a:80:60:d6:a4:57:2f:88:fc:29:52:
                    ed:be:47:57:92:10:56:09:95:e5:26:8a:dd:46:58:
                    bc:2c:85:86:f0:93:b7:b1:32:66:0e:ed:6a:41:49:
                    74:cc:7f:7b:f4:b3:a0:19:ce:36:43:b4:23:b1:dd:
                    04:80:19:1d:11:e7:80:8e:9a:8f:1d:0a:1b:0e:27:
                    69:f7:84:43:e0:6d:ee:70:b3:97:81:e6:d7:1d:a3:
                    a9:94:40:42:16:46:d7:36:ce:ff:97:5d:d1:6b:84:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:0B:37:4E:33:CE:CA:FC:4C:3A:E3:7A:A8:6C:A4:FE:AC:6D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/17e913b1-7221-3e6b-b6fb-7bb85056ef09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6c40:c840::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:7b:32:66:48:75:9b:c9:9a:2a:19:11:a4:eb:af:b5:53:
         39:21:29:ef:d0:32:32:2f:45:76:56:45:2d:30:14:70:d4:3c:
         ed:0a:80:16:61:1c:90:02:00:c4:4f:32:ce:78:97:67:b7:1a:
         7b:a5:95:85:d3:79:89:71:30:82:fa:6b:e2:62:a0:b3:5f:7d:
         66:d9:1b:5a:da:d3:80:2b:6b:79:b8:34:54:cf:8e:31:c8:fd:
         9a:0a:d0:c7:fe:be:41:fb:3a:ab:f4:50:cc:5a:5b:74:50:8f:
         86:9d:20:cd:79:fd:d1:df:5b:f5:08:a5:e0:14:9e:6e:52:1f:
         1b:e1:78:88:4f:3e:f9:e3:03:f6:2b:0c:40:15:6b:01:4d:39:
         a7:bc:4e:e0:b8:1b:54:4e:5d:21:5a:2a:1a:2e:9a:7f:02:e3:
         56:a9:ae:5b:d6:7a:5e:a9:ca:08:3d:75:2a:18:9a:5a:a8:50:
         44:28:03:3e:a5:0b:60:7d:d3:3d:28:f9:90:aa:c0:c0:3e:a3:
         11:9b:15:a6:79:4c:0f:45:e0:07:c3:86:0d:3a:ee:e0:c2:a9:
         3d:e3:6b:de:1c:cb:54:d2:71:69:99:9b:ef:82:4f:ba:2a:e0:
         6a:f3:f4:c0:c9:fa:d9:59:0f:1b:35:16:3a:02:b7:7f:07:5d:
         7e:f0:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:39:38 2026 by rpki-client