Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa
File:                     61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa (raw, json)
Hash identifier:          8hUCc0GTE2Iatf5W5ueuYiOGfMg5j9uOknfbtlu0Big=
Subject key identifier:   1C:B5:58:86:B1:01:81:B8:BB:7D:76:03:BE:11:E8:57:B9:8A:99:B2
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F0AA226864E5680DE92184500
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     3209
IP address blocks:        2620:11a:a055::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:26:86:4e:56:80:de:92:18:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=3c943cc2-74fe-4145-8edd-82d44b3c79c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:7d:93:89:a2:c0:19:12:ba:c4:6e:d7:dc:
                    fc:09:ac:fb:23:a3:98:89:91:76:ff:af:53:d3:9d:
                    83:68:39:cd:ea:3f:f8:5c:b4:4c:75:48:48:00:a9:
                    cf:3f:ab:b8:df:e2:27:7b:e0:a4:6e:ee:2b:b8:53:
                    e2:d6:45:22:a0:d8:34:a3:13:dd:3f:42:71:95:df:
                    f2:ff:eb:bc:12:40:7d:6e:e6:83:57:61:29:3c:a3:
                    9e:a7:1c:71:b8:98:59:b8:a7:a5:50:59:42:e7:cd:
                    6d:fd:ad:2e:ff:e2:9f:0a:e0:af:52:0d:4e:bb:57:
                    8f:5c:0d:12:be:02:70:35:ca:ce:e3:5c:b7:3d:75:
                    24:01:bf:09:37:a1:29:ea:cb:8b:c9:b4:f3:5d:49:
                    86:61:be:fe:a6:3f:94:e1:78:9c:a0:4d:f0:69:71:
                    29:36:4b:a1:af:b2:1a:2a:f4:45:2c:e4:21:9f:c3:
                    7e:fd:08:48:bb:10:13:e7:00:9b:3c:63:27:0b:0c:
                    0c:bf:97:bd:38:7f:3f:2c:47:d3:d5:02:93:a1:ce:
                    ca:48:33:bc:61:23:26:b4:1d:ab:19:ce:80:f1:ec:
                    93:fe:7c:be:73:9f:97:0e:c0:7d:79:bc:4e:c8:53:
                    37:97:7c:06:60:81:34:d2:c9:88:2a:0e:27:84:2d:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B5:58:86:B1:01:81:B8:BB:7D:76:03:BE:11:E8:57:B9:8A:99:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/61d17de9-7c1f-36ac-8c87-9ed5076f5311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a055::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:89:b9:22:f3:05:da:e1:0e:f5:5b:7b:d1:69:1d:84:cc:
         2e:b7:4b:b0:ad:c5:6d:c9:7e:79:9d:34:d8:5a:39:38:19:84:
         d5:2a:3d:ee:26:d2:d1:78:d8:91:e7:51:d2:d5:ab:1e:2a:d9:
         37:54:5b:68:60:46:62:fb:92:b1:fa:b4:2f:a9:15:47:bc:e3:
         87:14:f6:af:9e:20:f4:4d:0f:b1:04:6a:bd:71:f1:94:4f:f7:
         6d:74:ec:c3:72:86:ec:d8:cd:79:76:1b:70:f2:ba:04:68:0d:
         27:41:2e:55:96:a0:61:79:8d:a0:49:63:56:3b:78:20:a4:11:
         5c:7c:6e:dd:9b:04:09:93:c6:66:2c:3f:e0:6b:cd:c6:07:29:
         35:51:60:72:c2:0b:b2:d5:2a:3e:ef:0d:a7:ef:cc:1a:5a:73:
         30:d1:17:9c:6b:6e:e3:de:82:6a:7a:12:0e:2d:41:12:1b:10:
         bb:7c:38:a9:2a:ef:09:f8:e6:ea:54:9e:4a:04:56:56:03:2c:
         9e:8c:c3:fc:24:97:6a:fa:8e:81:1f:6f:10:0e:f0:cc:fa:22:
         c7:29:16:1b:11:6b:7e:f8:83:99:1f:67:3d:49:68:fc:c3:0c:
         a8:a9:74:3b:30:86:b4:78:31:69:4a:2b:96:53:9f:15:36:14:
         74:eb:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:52 2026 by rpki-client