Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa
File:                     3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa (raw, json)
Hash identifier:          wq/Y3UxC/+pRm5Q/Gk5QjkFbxZdhEiWLtlCCFUfEGHc=
Subject key identifier:   C1:0E:CF:F7:6A:DF:01:36:D1:83:15:5A:9B:11:42:DC:BE:35:75:25
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584FB3A6947293BA712EA310D700
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     397041
IP address blocks:        2604:f740:bacb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:94:72:93:ba:71:2e:a3:10:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=0401aa9a-7e38-44af-939c-c74a8efc9130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c7:06:4e:d0:14:ca:65:b7:00:e7:ed:b0:af:
                    0b:d8:a3:92:48:6b:24:aa:65:bd:d2:ea:a1:80:59:
                    a5:0b:79:55:78:fa:11:95:fb:82:48:41:9b:1e:93:
                    b8:92:c0:82:33:26:a1:a4:99:e1:04:65:43:97:b2:
                    07:54:12:d6:eb:4c:0c:8b:56:24:80:18:7c:5d:80:
                    e0:7c:98:c1:fc:ef:a0:15:c6:95:bc:19:00:67:21:
                    82:11:cf:7b:88:66:a8:34:a3:a6:dc:d8:59:c4:b6:
                    46:b8:ac:3f:5a:29:11:f6:bf:ab:01:02:da:c6:5f:
                    73:af:11:f6:21:8b:33:24:47:de:63:d5:ab:05:15:
                    e9:54:0a:f1:75:3a:35:43:63:d1:74:fe:9f:2d:21:
                    38:c8:02:72:90:37:43:71:d2:0d:83:1b:fa:9a:9c:
                    1d:68:2c:1c:1f:ac:3d:c9:e9:b6:b8:76:c3:dd:2f:
                    07:fa:b6:57:0c:8b:cc:73:30:6c:68:35:3f:dd:1f:
                    55:3c:e2:8e:4c:f0:90:cf:73:15:a3:53:9c:20:07:
                    a6:7f:84:71:07:56:3b:60:19:40:9c:ae:ea:62:09:
                    ab:7f:09:49:fa:15:e9:6e:60:56:38:f6:d0:cf:89:
                    fa:06:c1:a3:fc:a9:ad:2e:dc:ca:5d:25:b3:61:aa:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0E:CF:F7:6A:DF:01:36:D1:83:15:5A:9B:11:42:DC:BE:35:75:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:bacb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:02:b9:e4:87:36:3d:e5:a2:f3:c5:c8:7b:01:a2:df:79:
         a0:60:07:75:7e:01:36:66:44:2a:93:e4:03:11:18:5a:db:cc:
         28:67:6e:95:b3:04:4e:61:fe:77:79:e3:a6:f3:81:27:d3:d5:
         40:77:ca:39:3a:73:ad:de:6c:54:b7:20:33:06:b0:54:ac:1b:
         08:65:9c:84:b2:ff:97:b9:23:16:a4:73:86:53:a0:df:c4:3e:
         e4:1b:f4:63:48:1a:d6:82:fa:f1:27:2c:55:89:be:8e:f1:24:
         5f:73:1d:bc:13:30:18:fe:c0:eb:42:58:16:5d:ed:5e:17:a9:
         fb:7e:af:c7:c5:85:28:a2:b2:7b:b9:62:3c:6b:14:d4:f9:ce:
         f0:70:46:23:10:77:2a:b0:9a:21:5a:a5:76:e9:00:b3:a6:76:
         d5:ed:aa:05:18:a1:61:29:cf:44:9e:87:1b:5d:8d:b6:7d:0b:
         76:ab:1c:fa:54:4a:01:37:ee:b9:74:b3:09:5c:c1:61:1f:45:
         85:82:10:5a:51:ff:ce:39:54:32:da:96:47:f2:ff:ef:de:a7:
         8e:f4:18:91:f1:ac:11:13:a9:09:cb:4c:f7:b9:4c:71:9b:d2:
         ba:02:51:1b:1d:b0:1e:9f:fc:8b:49:2a:3c:5e:ad:f4:63:95:
         17:2a:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:26 2026 by rpki-client