Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
File:                     656ee11d-0c87-386d-a956-31548ccbdf3a.roa (raw, json)
Hash identifier:          KuLKVjNl1nLdX273j0N5sa6xOvWeXve/6poSO1+oGMM=
Subject key identifier:   5F:E7:B4:60:05:09:05:B7:93:AA:BC:B2:09:90:3A:79:1A:23:68:E7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F629304433D4C81CC4FC9FDE8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        2605:a401:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:04:43:3d:4c:81:cc:4f:c9:fd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=44ccf4b4-1050-4abc-971a-94268b941428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:d9:a9:8e:38:b8:f6:8a:03:3f:24:0f:8c:
                    9c:0a:c9:19:32:17:48:c6:e5:95:1f:69:87:e0:aa:
                    3a:5f:81:91:6b:d7:c2:ee:32:12:9a:73:22:ff:9c:
                    68:32:d2:84:66:64:09:ce:8d:33:1f:d5:fc:04:6f:
                    c5:7a:b4:2b:3b:72:a9:a2:d4:dc:cc:07:ad:57:49:
                    ef:e8:e7:ce:bc:c1:2e:10:70:3f:b0:08:17:b8:83:
                    78:e1:a1:23:5a:c4:8b:86:86:03:85:11:2d:48:b1:
                    16:56:6f:f4:ff:f5:a7:6f:f6:df:94:95:01:f1:f8:
                    e0:e8:74:51:eb:24:70:a6:a1:9a:9b:2d:ca:82:e6:
                    a6:35:7d:db:a4:88:db:a0:bc:10:e2:00:e9:4c:3a:
                    83:3e:d0:6f:f6:57:7f:bf:4b:9f:cb:22:9c:3c:85:
                    24:d1:04:8e:dd:e1:3d:6b:2e:81:89:8f:fd:70:fa:
                    30:d9:aa:e7:dc:ac:91:eb:51:5c:dd:5a:f0:c0:49:
                    c1:66:b9:5d:14:71:dd:3e:b7:76:c6:3f:36:7e:a7:
                    7f:7c:7d:e2:e6:12:b4:3b:79:9b:71:71:ea:e4:f7:
                    23:1f:26:c4:b1:6e:2a:82:0f:b2:d2:2f:90:7d:aa:
                    73:fa:a9:b1:7e:25:2b:3b:1b:41:c8:fd:77:5e:83:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E7:B4:60:05:09:05:B7:93:AA:BC:B2:09:90:3A:79:1A:23:68:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/656ee11d-0c87-386d-a956-31548ccbdf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:19:a8:c3:f0:6a:f7:c5:95:95:d3:bc:bf:38:3c:72:d0:90:
         83:b4:3f:b8:9b:34:39:61:7d:19:84:6a:f8:fd:1a:84:77:2f:
         35:ce:e9:f0:9f:50:24:5f:2b:59:13:a0:57:06:87:db:89:56:
         8f:a7:fd:37:ff:b5:74:21:a2:f8:8f:85:ec:71:49:71:34:4f:
         7f:73:ba:9e:24:81:5f:a8:39:15:6b:8d:a7:5b:14:71:45:15:
         99:d6:2a:7e:69:81:71:5a:be:89:88:02:c8:da:7b:16:8f:82:
         e5:51:65:fc:f5:7f:3d:bb:99:46:0b:80:5d:97:4a:7b:2e:5f:
         6c:b9:83:f7:ee:51:f1:8b:bb:24:dc:f4:e7:04:b8:2d:92:65:
         2c:d7:d7:ef:0a:78:b9:5f:2a:8e:55:a5:59:c6:b7:72:6e:8d:
         df:38:51:c9:b6:1b:90:72:e8:ee:92:63:d4:22:15:fd:b3:df:
         7e:7a:ed:1a:38:10:44:6f:fc:9c:6b:7f:71:1a:ab:c6:7f:3d:
         11:0c:36:98:a3:92:fe:f7:e2:7a:dc:a7:54:d7:84:e6:00:1f:
         80:7b:d8:1c:9a:8c:4f:fb:0f:69:82:90:27:17:08:af:3c:35:
         a1:a6:a0:32:e6:7d:f5:a0:9c:1b:4b:75:c3:59:24:22:a7:ea:
         88:c2:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:31:57 2026 by rpki-client