Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
File:                     253cdd3a-36e0-3298-9d6b-13208042593e.roa (raw, json)
Hash identifier:          ihwfzAKPdY5+BFRBIYHMag+MisCbKS9DNfYoocBeGOk=
Subject key identifier:   22:47:32:E7:E5:19:59:0F:A1:17:7F:30:D8:E6:A8:83:F9:B7:68:E8
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584F4973D99F459168198E565850
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55163
IP address blocks:        2620:109:c006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d9:9f:45:91:68:19:8e:56:58:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b94c16a5-7a03-40f3-8bbb-1d0e1e4b666e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:ea:da:92:07:b6:69:67:38:01:02:fa:eb:
                    65:e3:c7:05:fc:da:a4:e3:78:8e:31:d1:59:6a:51:
                    f2:6d:03:23:ce:62:f0:41:da:db:2f:ba:d0:8b:fa:
                    89:1c:84:e0:ad:06:9b:5d:71:2f:86:f1:66:5c:11:
                    cc:f7:0c:1b:3b:80:b9:16:44:61:d1:32:90:49:d1:
                    4c:61:6b:9d:9e:6d:05:7c:37:17:c8:b6:65:76:60:
                    5b:b8:ca:ee:e6:c9:07:bb:72:1f:2a:0d:62:86:40:
                    fc:b6:cd:2d:e6:df:86:1e:36:30:bb:e0:d0:dc:00:
                    1b:c3:e2:c4:e3:82:13:fa:c1:c1:56:bd:23:0c:06:
                    9a:b3:65:c2:8c:f3:bb:98:42:22:f9:9b:e8:49:22:
                    b3:03:30:16:c2:0e:a6:64:21:c8:0b:3a:26:27:c6:
                    15:6d:2c:f0:61:2b:f5:31:80:7f:f7:43:33:cc:13:
                    c6:60:f1:bc:67:38:c6:03:68:15:36:04:03:8f:0e:
                    36:a2:95:fa:c7:5a:92:26:63:19:d3:09:08:7b:d4:
                    b3:f5:a2:a4:ed:7a:be:c6:21:0f:fc:3d:f4:fe:df:
                    75:be:87:fe:9f:ab:00:0a:b6:ec:67:5a:b9:e1:0b:
                    c2:c6:70:ec:df:9e:96:e8:ed:fa:24:75:5f:bf:09:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:47:32:E7:E5:19:59:0F:A1:17:7F:30:D8:E6:A8:83:F9:B7:68:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:c3:07:d5:5e:26:2b:a9:c2:11:66:c3:83:fd:00:88:b2:
         fd:ec:c9:9c:a8:5c:68:5d:bf:ad:bc:69:03:0a:3a:fa:f8:9a:
         09:24:d1:c9:7c:86:ab:99:8b:13:d2:e4:20:76:80:6a:53:3f:
         ec:20:4f:d3:c6:d4:1f:a1:c9:79:10:1a:b5:80:a3:6e:0a:8f:
         33:8f:06:cb:e0:2e:87:1b:46:21:56:f5:39:a7:28:f4:3b:33:
         b9:7e:45:e2:9e:69:c1:d5:95:ed:06:9d:54:52:42:69:c7:6e:
         b0:2c:37:8a:9e:b5:4d:64:c4:bb:20:21:05:d4:7e:49:11:3e:
         24:5b:7d:78:e1:97:fb:ea:e5:1a:5d:31:05:c3:50:16:94:5f:
         c9:b7:f1:a7:30:54:e1:bf:4f:0a:5a:85:cb:17:cb:2e:ec:1d:
         43:ad:50:4b:5f:ec:6c:82:64:e5:77:f9:3c:6d:d6:38:02:d1:
         2e:ac:9c:14:0e:dc:3b:2a:44:57:2d:22:14:ac:6b:9d:65:5b:
         20:52:31:12:fe:7a:3f:d8:73:fa:1d:c9:b6:0c:0b:89:17:79:
         8f:31:82:a4:16:26:0c:89:c9:2a:88:96:7a:43:bc:27:bc:36:
         9b:f2:23:59:81:b0:f1:59:d4:13:eb:4b:6a:f5:51:ae:5d:17:
         26:1a:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:53:54 2026 by rpki-client