Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa
File:                     cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa (raw, json)
Hash identifier:          pFsKEpmTuXNYG4OFT9NFwFL/uAeoctJvYSg/57sAmL0=
Subject key identifier:   F6:30:22:A1:EC:21:53:30:76:BC:E2:14:D4:0E:CB:81:E2:24:72:3B
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F4328584F7A4D858397789996C7179100
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     19233
IP address blocks:        2604:50:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:85:83:97:78:99:96:c7:17:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=042d91e9-80b3-4497-9104-eac8afc8028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:f5:8c:53:ab:bc:f6:56:67:79:5b:c4:d1:
                    b4:14:25:3b:08:48:59:b6:9c:ba:94:d3:6f:fc:ea:
                    04:81:d2:67:20:e0:ab:0a:e4:f8:d0:78:f8:15:86:
                    c7:ee:4a:75:a1:4d:6b:f3:10:f9:16:61:25:9e:2a:
                    96:75:f0:c2:44:d8:88:af:0a:15:54:da:49:03:03:
                    e8:0c:a6:66:9e:64:b9:5c:a2:a1:dc:f9:18:b1:5b:
                    ce:2b:4f:1f:3b:19:63:b8:ea:6d:82:22:2b:9f:a1:
                    a3:64:03:5c:4a:04:09:d9:4d:5b:d5:3f:57:31:5b:
                    b6:e7:d0:ba:7d:87:a9:de:d5:ff:86:78:12:40:63:
                    f0:73:cf:f6:30:33:9b:e0:ae:2b:02:85:fc:1c:35:
                    74:90:40:b0:fd:e0:e7:da:76:e2:b2:8d:9c:8b:48:
                    af:79:be:22:24:e0:cc:03:76:9e:1a:b4:75:98:12:
                    75:c7:6c:c2:9e:a5:43:37:28:3c:b3:85:da:75:a2:
                    02:a3:34:59:8c:81:62:3c:7f:e0:d8:d0:88:51:ae:
                    bb:f2:93:46:e1:4e:d6:9e:1d:f7:8a:a9:2f:6f:1f:
                    05:ef:42:1c:ee:18:97:eb:d6:1f:ee:58:ab:65:c1:
                    24:5c:a8:5c:af:9b:79:43:ff:4b:98:40:6a:1f:aa:
                    be:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:22:A1:EC:21:53:30:76:BC:E2:14:D4:0E:CB:81:E2:24:72:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:50:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:b4:3b:bd:ba:0a:2a:14:2d:20:4a:45:e5:9a:3d:8c:a8:
         4a:2c:e0:6a:de:18:35:6e:71:e8:77:cf:09:96:e0:26:5e:1e:
         b2:20:15:e8:42:0d:b7:ca:87:4a:3f:db:33:8a:b8:1a:fe:6c:
         68:48:21:cd:6b:4f:f8:e0:49:da:8c:ce:d4:9c:75:38:d4:8c:
         ed:e0:69:0a:5e:84:bf:7c:82:a0:a5:89:84:84:2a:63:3c:95:
         07:32:41:02:65:a5:b3:aa:9d:b0:77:f6:49:b3:1e:65:64:c2:
         91:39:b3:d9:92:bf:ee:d8:87:66:8d:d7:3c:db:82:c1:25:0e:
         cd:f4:0e:a6:e5:0e:6f:ab:9e:a6:28:de:7d:99:4e:41:25:51:
         cd:89:a0:1c:f6:0c:64:e9:69:9e:8c:a1:09:7a:d7:61:34:67:
         90:c9:c5:85:5d:b1:01:31:65:6e:67:06:70:e4:10:69:3a:9d:
         b1:c6:73:32:96:33:52:04:ba:f4:ae:bf:66:55:84:f5:50:90:
         6f:25:83:24:b2:dc:9b:f1:81:c2:5a:fc:90:ab:f7:6d:3f:ef:
         ce:0e:42:f3:48:33:0e:9f:2f:34:f5:13:52:b2:ac:d6:e2:ce:
         ab:64:c4:2c:5b:50:b1:c6:04:e0:5e:b2:29:ea:36:58:0f:cf:
         14:7e:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:59:35 2026 by rpki-client