Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/86c6192b-de79-3b5b-9bc7-ceeba0e6a092.roa
File:                     86c6192b-de79-3b5b-9bc7-ceeba0e6a092.roa (raw, json)
Hash identifier:          Dylb1K7ulQFe5Bm+P1W7WPcc8U933Fztj+aZuC096xs=
Subject key identifier:   F2:D7:1E:09:90:C1:34:8A:2A:44:7B:EF:9A:93:50:FC:37:4A:DD:10
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F4328584F857842628A0C66EC1C9B8300
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/86c6192b-de79-3b5b-9bc7-ceeba0e6a092.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     57169
IP address blocks:        2605:3b80:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:42:62:8a:0c:66:ec:1c:9b:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=4c7bc7cc-e3f2-496b-bd2e-3c30656cff02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:f4:e3:92:bc:cb:ae:80:11:f6:fa:8b:ae:
                    37:90:65:79:d0:c8:86:45:bb:85:b1:3c:77:c8:1c:
                    3b:90:23:a5:9e:e0:df:2f:98:89:49:19:97:1a:76:
                    c1:a9:b7:5c:91:51:f8:b7:68:59:57:f3:ce:72:a7:
                    0a:b2:f3:25:f9:32:c2:6d:37:1d:14:47:1c:6f:07:
                    b5:37:d0:12:bf:15:b7:b4:1a:f0:27:22:cb:19:28:
                    6a:a8:e9:d7:15:99:8a:4f:96:7f:21:5e:54:22:84:
                    5c:75:da:bf:e2:aa:33:6c:a5:8d:a8:57:3c:5a:b2:
                    c3:45:a4:8e:6e:fa:77:a1:aa:83:33:9f:52:5f:c9:
                    2f:b6:03:6d:d9:6a:bf:13:86:26:61:2d:89:a9:3a:
                    02:f8:ac:40:27:a9:77:f4:52:94:6b:0f:84:e8:6e:
                    ab:93:79:33:7f:0d:9b:07:e2:b6:da:2e:b9:7c:cf:
                    4f:c3:77:73:36:af:ef:c9:35:1b:f7:5b:e6:ee:0b:
                    5b:32:78:38:7f:16:35:04:7a:db:94:44:1a:81:94:
                    c9:1e:b8:2f:b3:3b:24:98:79:7d:f2:09:88:96:f6:
                    0c:bd:63:a1:46:e2:09:95:b0:70:02:55:5b:3b:7d:
                    75:66:b4:87:e5:50:39:ef:94:67:d7:77:ce:37:bb:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D7:1E:09:90:C1:34:8A:2A:44:7B:EF:9A:93:50:FC:37:4A:DD:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/86c6192b-de79-3b5b-9bc7-ceeba0e6a092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:85:25:f8:46:f1:34:1e:c3:35:35:62:ac:c0:c0:e0:fe:
         4a:3f:d1:f2:a3:c1:94:42:47:09:68:0e:33:be:23:1b:0e:03:
         61:17:13:1e:a6:7f:57:b0:e9:19:25:7a:90:09:79:d3:65:25:
         36:2f:a7:b0:28:9b:e9:0d:b8:12:91:3f:d1:48:8b:02:91:80:
         9b:2e:b6:65:a7:4e:59:38:60:73:ed:d2:75:81:8b:22:cf:cd:
         8d:5a:35:4e:52:8c:a8:b9:26:b1:34:0b:3f:2f:29:bf:1c:2b:
         32:3f:0c:86:01:53:09:7e:a0:a0:cd:59:1e:72:18:1f:48:1b:
         ef:f7:8c:17:d6:79:41:74:f4:81:8a:dc:71:e9:f0:39:49:07:
         9b:fa:b5:2d:49:10:e7:3c:64:f4:bf:48:c1:42:50:04:8e:3c:
         17:ea:5f:ba:84:92:30:1a:e0:75:4b:0f:b6:f8:0f:55:4a:e6:
         e3:59:47:2f:86:77:ec:31:20:b6:dd:f0:25:1c:ef:d4:2b:ec:
         68:4a:fd:25:f0:ad:f8:d6:9f:0f:14:79:99:31:a4:16:b8:97:
         dd:e0:d2:22:7b:e5:43:f1:94:e7:00:7c:e3:a0:de:5e:8a:67:
         d8:05:39:3b:31:46:62:9b:6c:d3:e3:49:2c:85:35:75:7c:43:
         db:1c:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:54:40 2026 by rpki-client