Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f3804480-c364-3a02-b67d-5049870f02de.roa
File:                     f3804480-c364-3a02-b67d-5049870f02de.roa (raw, json)
Hash identifier:          R4lRE2QAV4k97oMH3yoS8nyIzz1MEbGQkNiuzBcOKus=
Subject key identifier:   14:8F:36:96:AF:FF:50:02:22:EE:3D:05:6B:7F:99:EE:3A:26:2A:4A
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584F4F07FFC0565504D32CD3ABC0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f3804480-c364-3a02-b67d-5049870f02de.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     19901
IP address blocks:        2607:6c40:dc20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ff:c0:56:55:04:d3:2c:d3:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=14d72c52-9411-4628-80c2-57f96d9e6192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:44:e6:73:b7:9f:55:ff:47:40:d5:a6:2c:
                    21:9a:22:27:c9:56:90:79:b4:11:70:98:89:3c:66:
                    de:aa:84:b3:e8:21:79:04:8a:18:df:b9:6c:17:93:
                    20:a0:93:89:c2:fe:47:f8:1d:8a:73:42:c4:81:87:
                    5a:a9:3e:38:1d:bb:ba:09:69:be:08:78:8f:8a:ef:
                    e3:63:09:e8:56:18:2e:76:29:68:e8:a2:9f:8c:4f:
                    1d:af:29:4e:41:28:71:09:58:da:be:9a:2b:1d:2a:
                    c6:06:ff:81:b9:e5:35:10:3e:fb:1b:a2:d1:12:77:
                    e7:0a:38:88:5e:d0:1d:f3:f3:02:6c:d9:cf:d0:54:
                    67:46:32:4a:4f:41:ac:dd:d5:05:a3:ae:1a:1f:34:
                    96:ef:71:72:c7:f2:3b:da:39:74:3f:d4:61:c7:01:
                    8e:5e:8b:83:d9:be:9f:23:ab:d2:42:ed:da:3a:bb:
                    f0:ca:9f:95:c0:5b:60:1a:05:e0:70:90:81:29:85:
                    72:bd:87:7c:03:43:e1:89:95:72:3d:eb:5c:59:f0:
                    5a:6b:ac:88:ce:25:f7:6f:4d:85:95:94:43:ae:e3:
                    c2:4c:fd:bf:2c:65:a8:86:31:7f:3a:d6:00:65:d3:
                    de:a1:ae:64:d0:78:ba:07:40:00:56:40:56:54:c7:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8F:36:96:AF:FF:50:02:22:EE:3D:05:6B:7F:99:EE:3A:26:2A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f3804480-c364-3a02-b67d-5049870f02de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6c40:dc20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:f0:b1:40:7c:46:1c:ce:8d:2b:34:f2:0c:13:a4:55:a9:
         ad:a4:0d:50:a1:68:b1:ed:b4:40:f9:2f:83:ba:f6:f1:7c:34:
         a0:3e:c0:fc:12:e0:52:a6:af:83:9c:e3:a3:f8:22:52:0a:e5:
         77:16:4f:c8:e6:05:49:75:e7:4c:a3:fb:ba:1e:84:4f:37:c6:
         d4:e3:05:77:4d:56:e1:43:71:44:ee:c5:06:88:dc:21:46:bc:
         b8:98:fa:9c:74:50:1a:73:e2:bb:4f:59:69:e0:ce:51:25:bd:
         03:a9:92:6a:f5:d2:34:9a:f6:3a:14:2e:b4:7a:4c:f8:8b:5f:
         fc:48:10:50:4c:bb:cf:76:82:74:d6:24:af:93:61:05:4d:68:
         a3:75:15:3c:f8:9e:19:b2:a7:26:4f:13:34:8b:49:06:7f:ee:
         e4:f7:af:98:ed:93:22:a4:44:d2:1b:30:1b:05:0c:b5:18:1b:
         fe:40:83:5c:b6:f8:c2:42:c2:f2:98:9b:4b:fd:9f:e4:32:68:
         44:7b:29:41:35:93:98:c4:ec:94:79:66:80:48:29:2e:82:65:
         ef:97:cb:d7:9b:87:f3:85:5e:10:cd:52:5a:71:f0:c3:db:ac:
         79:6c:e9:a8:3e:41:22:5a:4f:f3:0b:d6:36:20:fa:9a:fe:52:
         04:d9:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:31:35 2026 by rpki-client