Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/3bb7402e-54ea-3273-9890-bf8af9126d42.roa
File:                     3bb7402e-54ea-3273-9890-bf8af9126d42.roa (raw, json)
Hash identifier:          wqy7yfjJqg0XTw8E19C7GwWKyyGE0nGtAlskOAl9i0U=
Subject key identifier:   D5:F1:81:CE:54:B3:46:5E:95:05:68:F9:8E:BB:2E:26:70:A7:6E:F3
Certificate issuer:       /CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Certificate serial:       010D0C9F4328584F5E62D0DBAADE229F3B79EB60
Authority key identifier: 41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/3bb7402e-54ea-3273-9890-bf8af9126d42.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     396982
IP address blocks:        2620:1f9:100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d0:db:aa:de:22:9f:3b:79:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad78b405-a495-404a-a809-d632ddd6e3d6
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=98ba4205-b66a-4caa-9604-1f0c5f7affbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:d3:a4:0b:81:11:b9:f9:9e:c7:3d:2d:51:
                    21:f6:7b:5b:8b:7a:f7:50:5d:91:9b:93:c4:b9:01:
                    db:86:a3:f1:da:0f:87:98:91:a8:9a:d0:d0:24:73:
                    52:d5:1e:8b:60:73:e8:e1:ec:04:77:72:53:4b:74:
                    b6:2f:a3:7d:c4:a9:5d:2e:3c:23:8c:c4:b9:d0:7f:
                    33:3b:e8:4a:62:f3:80:32:4a:29:32:37:7d:6a:c5:
                    eb:be:3a:8e:0d:ee:3a:f7:b1:db:26:ad:ba:11:ec:
                    67:ee:4a:e1:8e:91:ed:3f:ba:98:ae:41:49:4a:e8:
                    c6:45:66:ad:dc:a5:ff:83:15:4e:ab:97:44:13:61:
                    d1:f7:c1:28:30:ea:ae:18:29:20:a5:df:95:f1:d2:
                    c6:69:b7:75:59:ce:da:c9:87:9a:f3:d2:38:b8:e8:
                    ee:e6:64:9b:b2:d2:0a:b0:77:97:c4:7e:8a:fa:5a:
                    39:84:81:b9:30:b9:4f:89:3f:24:11:34:01:2e:f1:
                    86:d0:6f:18:4a:2d:83:55:fc:33:2d:f0:b4:7d:20:
                    96:76:7d:b4:99:27:d6:da:63:f5:3d:6a:33:88:55:
                    01:c3:a2:b7:4a:7c:b0:7d:05:5e:8d:a8:21:8b:79:
                    7a:e1:43:7d:81:a1:37:d0:2e:92:3a:3b:d1:e4:73:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F1:81:CE:54:B3:46:5E:95:05:68:F9:8E:BB:2E:26:70:A7:6E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/3bb7402e-54ea-3273-9890-bf8af9126d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl

            X509v3 Authority Key Identifier:
                keyid:41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f9:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:31:e5:38:cf:9b:c6:a5:4c:74:a9:6a:1e:a2:be:21:1a:
         6f:96:3a:15:08:87:6a:cb:0b:2c:bd:aa:82:8d:58:ba:89:4b:
         f2:e9:1b:df:cc:c2:58:c1:80:c9:5b:4a:39:90:54:c5:4b:c0:
         3c:87:c8:1d:9c:ff:ce:70:9c:ca:4c:59:b1:2e:3b:93:51:5d:
         70:3f:ed:2d:ed:85:71:9e:84:87:72:f5:7c:97:5c:a6:3b:90:
         1c:ff:11:fc:7f:7f:3a:44:f3:89:e5:76:1b:6a:6a:43:75:11:
         b5:14:8e:17:96:fe:df:c7:d7:e1:90:87:be:38:c0:be:31:7f:
         d0:26:26:41:ef:ab:ab:a6:5b:57:30:99:09:30:c8:b9:30:4c:
         56:9e:78:f8:e8:cb:e2:27:a6:53:10:ff:48:6b:54:59:37:c9:
         bd:dd:70:cb:fd:c5:00:df:71:df:55:34:f8:8d:23:29:fb:e2:
         38:d7:21:b6:a5:eb:47:5f:bb:19:63:fe:4a:84:e4:06:2e:37:
         85:1b:10:57:8e:f1:a7:de:fb:47:9a:95:71:85:c0:fb:2d:8b:
         96:e4:7a:db:f9:9d:29:66:99:a2:81:46:22:ed:98:2d:a4:90:
         14:1d:b6:59:29:44:4d:76:f1:1e:69:54:a4:33:24:27:11:3b:
         de:74:36:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:48:00 2026 by rpki-client