Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/22273b26-2aca-35f4-9116-5b083584d5f7.roa
File:                     22273b26-2aca-35f4-9116-5b083584d5f7.roa (raw, json)
Hash identifier:          TKZXlybAICZYVf4S9tk6EZMuKo/fpRoJrh7jUTOAMiU=
Subject key identifier:   9D:BE:05:67:40:AA:00:76:34:FD:CF:B0:23:D4:93:DB:E7:27:B0:F6
Certificate issuer:       /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Certificate serial:       010D0C9F4328584FA594059AC3188CE53A91E580
Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/22273b26-2aca-35f4-9116-5b083584d5f7.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     29757
IP address blocks:        2604:d680:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:94:05:9a:c3:18:8c:e5:3a:91:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=ea72d8e6-b65d-4d99-b296-ec8aacf67681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:33:23:ad:f2:1a:64:ee:1d:1a:9e:90:5f:
                    51:27:7c:fe:f9:a6:8d:6e:82:6d:15:62:46:b8:95:
                    b2:a3:50:10:ef:10:24:e4:19:53:71:7b:b3:30:a2:
                    fb:be:65:cb:48:50:19:9e:4d:94:57:81:26:45:41:
                    19:5c:0f:21:03:04:70:a6:57:23:de:4e:a6:d0:73:
                    98:fe:4f:8f:79:7f:33:c8:90:67:97:1f:af:ef:21:
                    9a:38:7e:78:e4:ea:51:d7:2f:fd:c6:4e:a4:a6:9d:
                    b0:f0:d7:e4:7b:2f:d2:c9:73:bc:08:7d:ee:3d:c5:
                    84:a0:a3:76:70:88:d8:09:46:4a:96:17:63:2a:8d:
                    2b:1a:ea:b3:b1:f0:f3:47:0c:55:79:08:06:6f:42:
                    23:a1:f0:c3:24:eb:18:40:4d:3f:51:f3:7c:71:50:
                    df:bd:32:71:49:7b:e4:78:3c:71:5c:0b:2a:13:04:
                    3a:2a:c1:6a:32:2e:79:95:f7:99:31:10:e2:13:59:
                    03:e3:1f:76:cc:e2:5c:1f:5b:66:ca:a5:9f:10:4d:
                    a5:09:5d:b8:d3:7c:7a:52:90:c8:35:0a:4c:29:e7:
                    ed:a9:1c:87:8b:ef:e9:f4:02:07:d1:e1:cf:e6:08:
                    ce:b0:51:0d:60:e2:90:97:56:21:0d:79:1c:c9:aa:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:05:67:40:AA:00:76:34:FD:CF:B0:23:D4:93:DB:E7:27:B0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/22273b26-2aca-35f4-9116-5b083584d5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl

            X509v3 Authority Key Identifier:
                keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d680:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:70:e7:9d:05:b0:2c:1d:bc:a7:a2:a9:4e:2b:a6:32:3f:
         69:36:a9:dd:62:11:87:da:ea:de:70:6a:9c:26:fd:cb:b0:ea:
         60:e1:ab:00:93:ca:c1:90:97:aa:12:8d:ac:43:3b:61:74:99:
         fe:c4:c4:94:3a:36:7f:ff:99:54:7a:72:1d:71:61:7b:f5:7b:
         e1:16:07:0f:20:a1:2d:d0:b5:82:3e:c3:a3:e5:79:27:2e:40:
         c6:7e:85:1d:20:1f:e3:0f:db:02:03:bf:88:0f:b2:f9:5e:12:
         40:d8:98:10:be:b3:aa:0a:29:08:f3:75:50:49:4e:7b:69:6e:
         bf:dd:1a:64:d9:a6:de:54:15:8e:29:ce:8c:c2:eb:ca:93:ee:
         64:8f:75:ac:97:df:fa:f6:42:5e:59:fd:c8:dc:dd:21:95:38:
         65:73:b0:49:7e:c4:d1:89:cc:77:1d:6a:28:a9:00:18:0e:84:
         e6:36:d7:72:46:4f:0e:30:dc:50:aa:6c:36:42:54:8c:40:c4:
         17:05:bd:c0:67:6b:25:f4:5f:06:48:09:24:67:75:01:68:6c:
         b1:78:11:00:9e:ce:13:9c:80:69:b4:ea:1a:a4:b7:b7:14:af:
         4e:fd:6f:e3:89:7b:f8:61:22:4a:c2:56:d8:ac:1a:19:6b:fe:
         12:b3:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:12:58 2026 by rpki-client