Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/0426c976-73a0-3100-bfbe-65df97cdb060.roa
File:                     0426c976-73a0-3100-bfbe-65df97cdb060.roa (raw, json)
Hash identifier:          5R4jDmnhA8X//s+vmnlVp/1LGrAHAZGX3m+vYaGbpks=
Subject key identifier:   7D:F4:59:B0:79:EB:42:11:0B:B7:D7:77:15:52:84:9C:B5:25:78:3B
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F374D1AF5801C919076EA0380
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/0426c976-73a0-3100-bfbe-65df97cdb060.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     16504
IP address blocks:        2602:ffde::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1a:f5:80:1c:91:90:76:ea:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=2bbd2ec3-542e-45b7-b7ad-85ba33fb6eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:63:35:f6:63:d1:83:9b:7b:f6:9b:a2:64:
                    f7:3b:81:41:b5:5c:9b:3f:68:d6:40:58:bc:f3:c8:
                    a7:47:cc:ca:b4:c1:f1:ea:56:8c:5e:ed:57:a4:2f:
                    60:a0:37:18:4b:a0:44:86:fb:81:f6:5c:53:65:3c:
                    1b:06:c4:07:64:6d:dc:81:52:f7:14:2d:39:64:21:
                    57:4d:a3:57:2f:4f:ac:a5:a7:2a:28:c4:0e:7f:a9:
                    d1:c5:c0:d3:4b:e3:a9:b3:bb:73:92:1e:df:61:e0:
                    fa:82:35:32:80:9c:4d:bc:6e:7f:3f:be:5a:dd:ca:
                    5a:d5:23:74:b7:55:eb:8a:34:13:13:49:0b:4b:11:
                    98:b9:69:f4:09:95:6a:a1:c7:8a:96:ea:7b:04:10:
                    df:d0:0c:a0:8f:f2:92:2a:e3:c4:c6:28:42:d8:92:
                    1a:61:e8:5a:a6:6d:9f:53:60:66:b5:29:be:68:d6:
                    1e:61:3d:e4:ef:59:63:c3:3d:47:44:81:de:15:23:
                    a2:84:25:a6:85:f9:ef:d4:df:61:a7:59:c1:dc:d1:
                    ac:e3:f6:dc:a1:3d:f7:4e:20:eb:82:a5:07:54:35:
                    f9:7a:12:01:e6:7e:ef:44:b5:2a:ea:51:56:b2:07:
                    dd:72:db:01:4f:73:47:87:8d:16:59:89:b4:43:0c:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F4:59:B0:79:EB:42:11:0B:B7:D7:77:15:52:84:9C:B5:25:78:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/0426c976-73a0-3100-bfbe-65df97cdb060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffde::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:91:3c:c9:5e:df:64:af:89:35:f5:d3:5c:42:63:0c:d2:0c:
         7e:b5:b4:ff:c8:99:c3:3c:26:7c:50:f1:f4:65:d0:87:67:7f:
         5b:ad:9d:1b:5d:9b:f3:d9:47:c4:b9:08:4d:cb:5e:20:1a:94:
         6a:86:4f:b8:cc:68:37:b1:e7:a5:31:12:22:5b:82:c4:93:20:
         3e:9b:17:13:58:be:6b:1c:a8:36:30:9c:99:9f:b2:2b:be:35:
         e5:23:4f:a1:14:6a:fb:40:f5:34:fd:5f:6b:a7:b9:92:0b:e6:
         b9:b4:f4:52:ef:04:0d:c7:9b:3f:ff:6b:76:17:90:23:2c:1e:
         0b:b1:ed:70:0f:71:44:a4:56:55:ae:07:72:4b:e8:ea:a1:2a:
         7e:bd:91:2b:6d:ae:e2:cf:1b:69:f3:29:bc:b0:9e:df:4a:33:
         5f:b5:0b:62:39:bf:7e:cf:b7:6c:17:66:11:79:f3:ee:9b:a9:
         fc:64:7d:a8:8f:03:f8:eb:e7:f6:1d:b7:1c:74:41:d9:e8:d9:
         ba:5c:aa:d3:08:0a:bf:c4:f4:a3:a1:f3:46:dd:df:18:40:21:
         c3:e5:29:7b:fd:cc:d7:1c:25:dd:c3:23:f9:65:49:42:cc:0c:
         e7:86:c2:ee:20:4f:94:ec:55:bb:2a:53:d9:4e:18:2b:45:08:
         cc:32:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:28:59 2026 by rpki-client