Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
File:                     dfb9926d-6216-3b2e-836f-c99868aba2de.roa (raw, json)
Hash identifier:          KZASP8mXr5k7vsqVMNaERkNfGksLLOSILHlEQWnc+OQ=
Subject key identifier:   DB:FF:B6:C8:2C:53:DF:8A:86:6F:F2:B9:17:02:D8:78:5D:AA:68:95
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F62931C6D27964DF989F5A1B0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     36137
IP address blocks:        2600:bc04::/32 maxlen: 100
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1c:6d:27:96:4d:f9:89:f5:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=845ac2f2-d3ce-45e8-ad8d-6fc8266b1320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:da:e9:ff:15:1e:e2:80:6e:5d:93:0e:d3:
                    f4:c1:5e:9f:35:04:51:27:20:5a:e2:6f:65:ce:b5:
                    bc:71:f9:72:32:b9:88:57:4e:ea:6c:9d:85:ae:de:
                    e3:ac:1c:9b:8a:82:4e:e4:ee:11:68:35:c9:17:bd:
                    aa:9e:ec:e3:80:b5:6c:54:a3:d1:28:1c:01:72:87:
                    bf:c6:eb:d8:a4:19:ee:94:dc:a4:11:d5:ad:81:17:
                    9e:20:f2:21:af:ad:10:04:ad:30:e1:5b:99:87:30:
                    08:77:ac:cf:aa:ca:f1:c9:9f:64:8a:f7:a5:54:64:
                    ad:fa:f7:0c:d5:67:72:af:b1:64:fb:03:53:7a:d2:
                    7b:16:9d:7d:47:c6:5a:da:3d:e9:65:98:13:5e:72:
                    55:1a:48:2c:6c:f1:d8:f6:d6:02:17:53:a5:7f:cb:
                    48:28:e6:71:e3:cd:03:06:d4:5e:fb:94:3b:3e:8c:
                    24:94:d1:d5:61:76:be:e4:de:eb:22:d1:75:e2:a2:
                    13:0f:f6:26:c7:ac:e4:5f:7a:a0:82:c6:a6:6d:dc:
                    38:fb:69:4e:d2:e1:1a:24:f6:fd:23:71:fa:73:e4:
                    04:e7:47:97:4d:93:07:5a:15:a1:07:2e:df:68:54:
                    e4:f8:bd:15:92:21:c6:9c:41:c1:21:7a:9f:a4:8f:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FF:B6:C8:2C:53:DF:8A:86:6F:F2:B9:17:02:D8:78:5D:AA:68:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dfb9926d-6216-3b2e-836f-c99868aba2de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:bc04::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:5d:5e:7f:6b:60:6e:3c:ba:a9:fb:d7:ee:94:94:66:3e:
         82:12:9f:11:d2:7c:2b:09:2b:2b:e1:1f:e1:96:6e:47:aa:a7:
         4b:54:73:1c:d8:4a:fb:57:33:4b:c7:41:12:a7:8d:fc:20:ee:
         f5:d7:57:a9:cf:b5:a3:6d:1d:35:95:2f:e5:2a:2d:b0:70:7c:
         d6:2a:e1:39:76:cd:de:c7:dc:a6:7a:d7:58:1e:4d:5f:85:92:
         c3:e7:26:54:0b:bd:3c:fd:3a:6f:d9:d3:5e:c7:d7:4d:bb:9f:
         eb:83:3e:cd:87:34:c9:63:53:19:e1:c9:a0:95:b2:df:29:30:
         d1:e9:91:24:dd:13:bd:38:76:06:71:6a:0e:d8:c1:3e:95:48:
         46:2d:51:05:e5:9f:95:d1:79:d9:0a:66:ec:5b:b6:6a:99:18:
         86:e6:0a:a9:44:71:6a:25:d0:18:45:c0:f6:5c:b1:36:fe:b7:
         0c:16:d4:cc:b2:ab:92:c4:ce:d3:8c:be:26:9a:1b:bd:d8:5c:
         bb:a9:fa:db:55:a4:e2:b3:05:f9:88:3e:66:64:f8:01:ac:3a:
         1d:52:c2:32:c0:5e:21:8f:d9:ee:27:52:d6:f8:8a:85:41:33:
         f6:87:a1:04:5a:61:03:f3:89:b3:b9:79:e5:2a:c6:dd:09:7d:
         57:e8:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:09:28 2026 by rpki-client