Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa
File:                     f075ba46-636e-3a48-a603-d735fcd312c4.roa (raw, json)
Hash identifier:          KKvoUM2GiKpF5EXJuQOCLCTFUIEiEkHuIRw36yN5z94=
Subject key identifier:   CC:6A:50:CF:DA:41:97:E9:E9:80:68:E7:50:5A:1B:12:4E:BF:FF:7D
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584F4C3D7944DCF91B6CA17ED380
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     398143
IP address blocks:        2604:cbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:79:44:dc:f9:1b:6c:a1:7e:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=a58fe6eb-2711-4b36-aded-c4705a0e4046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:59:c4:7d:d8:87:fe:26:3a:29:9e:a5:5b:
                    18:16:9c:c3:2c:32:6c:4f:fd:74:40:11:6d:6c:1d:
                    ac:59:37:9f:69:aa:94:37:cb:db:1a:e9:65:86:d1:
                    b1:e9:1b:cf:5c:14:67:bb:f3:04:12:a7:30:8a:c0:
                    de:a3:8e:30:47:68:c1:02:f8:68:4b:b4:0c:0e:be:
                    7c:16:e0:04:77:0a:32:70:05:44:96:f4:ad:4c:ac:
                    65:8e:cf:f5:98:a3:69:ac:17:a3:94:bb:67:0c:c5:
                    5f:eb:6e:9b:59:be:43:b7:bf:3f:71:33:94:ba:25:
                    73:c1:7a:a3:85:ff:70:d9:a3:d0:4d:2e:31:25:d3:
                    a1:a6:f3:0c:9b:55:0d:20:4f:97:c3:b6:21:42:c9:
                    b0:ba:30:23:ce:e3:9d:bc:da:fc:74:49:dd:25:92:
                    db:ea:8d:a7:96:f0:87:3d:a7:93:48:e4:75:66:bd:
                    42:be:77:62:11:19:20:3e:09:9d:80:1a:60:aa:97:
                    60:bb:63:70:07:77:bc:1a:78:e0:2e:cb:d0:d8:52:
                    dc:12:c0:78:14:3b:83:a1:47:f1:57:52:80:ae:c5:
                    8f:72:52:9c:90:5e:ee:17:93:01:08:97:ce:59:70:
                    ee:b9:76:f7:93:c3:ea:d9:c2:d0:61:45:e0:99:53:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6A:50:CF:DA:41:97:E9:E9:80:68:E7:50:5A:1B:12:4E:BF:FF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/f075ba46-636e-3a48-a603-d735fcd312c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:2a:7f:94:e8:ac:b3:d2:91:d8:e8:5b:8a:f6:71:98:a5:
         d4:ce:a6:cf:17:89:88:f4:c2:be:20:94:43:4b:45:7f:a9:aa:
         ad:0d:3f:0d:98:cb:57:27:28:f9:f3:c1:e9:91:f8:b3:3a:5e:
         6c:36:ab:88:0d:32:54:8d:4a:5f:a5:40:f4:53:04:aa:43:73:
         f3:c3:ef:ab:e9:48:8f:34:dd:28:c1:bf:fe:1f:17:4f:0e:4b:
         f4:9b:3e:9c:4f:3f:08:d5:82:2c:bd:de:a1:ae:4c:d0:70:44:
         e4:1c:ae:ab:36:db:e5:da:1d:18:14:fb:91:a3:45:87:0e:83:
         99:2a:ac:73:01:52:e9:4a:e7:4b:d0:7d:ef:63:da:e3:6f:ec:
         4d:5c:d4:03:96:9e:20:03:e8:f3:3b:4b:27:41:c0:af:2a:52:
         e4:3f:8a:16:1c:d3:19:f3:cb:b1:31:b3:b7:92:34:6c:44:61:
         7f:b3:41:62:9d:4b:0f:f8:a8:96:8f:02:af:48:c1:92:7f:5d:
         28:59:32:9d:c9:13:e8:28:ef:9e:24:49:76:e9:83:d5:ba:b3:
         66:70:22:b4:ab:56:b2:31:27:ba:78:8e:72:2a:e9:f6:ce:b5:
         8b:54:27:42:7e:00:51:00:d3:48:37:01:51:37:a8:56:a3:b5:
         11:82:ff:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:15:57 2026 by rpki-client