Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/3a2f7da4-38e9-3f32-99ad-88cda834dbe9.roa
File:                     3a2f7da4-38e9-3f32-99ad-88cda834dbe9.roa (raw, json)
Hash identifier:          p1PoXCZRTo/2Fx4Cz+2xw/Bi2q5FGz1PTJ3I/DSf6m8=
Subject key identifier:   AC:0A:2C:8F:C9:BE:B2:DC:6C:01:25:46:FE:55:0C:A9:26:B0:2B:CF
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F4328584F5CFD563C1D9DEEE402091D00
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/3a2f7da4-38e9-3f32-99ad-88cda834dbe9.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     53779
IP address blocks:        2620:104:6001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:56:3c:1d:9d:ee:e4:02:09:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=d244be66-790a-4056-bef9-6f7fb27fce6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:82:b1:1c:e5:f1:63:70:4f:cc:5a:4d:95:
                    2d:06:04:7b:50:53:c0:78:f1:c8:77:a9:28:cc:5c:
                    25:2d:78:35:02:5a:da:29:59:3f:71:6d:e4:48:42:
                    db:bc:c8:8f:5d:f2:28:af:9e:68:99:19:41:35:2e:
                    80:ee:45:0f:f6:c6:cd:b7:73:03:29:17:c9:d6:3a:
                    df:40:0e:c7:1b:ab:57:a6:dc:18:6d:ab:1d:04:6b:
                    33:5d:94:b0:35:75:cf:a7:02:da:16:bd:2e:78:f6:
                    c0:c1:19:a8:03:42:86:78:b1:c9:ad:aa:28:04:76:
                    7e:09:f6:e4:63:14:6f:a0:7f:61:1a:bc:a7:d5:42:
                    aa:4a:74:4f:15:e9:a3:c0:6c:e3:c1:06:fa:ca:ac:
                    e7:49:d6:b1:9e:45:c7:41:17:f3:35:d7:3d:b8:72:
                    36:af:8a:65:bd:56:18:5f:4f:f8:1f:06:6e:77:07:
                    3f:41:6c:12:3e:bc:79:84:dc:76:02:35:16:2b:87:
                    79:8b:68:a0:ec:e8:fc:d9:a0:b7:8a:5e:a7:a2:53:
                    33:ab:4e:79:4b:64:94:dc:0b:49:a0:b4:12:7b:5e:
                    61:b7:e7:9e:7d:90:b3:0a:d9:3d:86:1c:29:41:78:
                    5e:59:1b:dd:f2:be:34:7d:c3:52:79:77:1a:69:a8:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0A:2C:8F:C9:BE:B2:DC:6C:01:25:46:FE:55:0C:A9:26:B0:2B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/3a2f7da4-38e9-3f32-99ad-88cda834dbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:00:3e:39:15:9c:96:22:ee:07:9d:c4:bc:a0:31:bf:4c:aa:
         90:58:0a:7f:b3:1b:de:05:22:6b:6e:5a:2f:0e:fa:64:10:cc:
         d3:83:06:a0:1d:5d:b0:ac:d0:00:4d:6a:d2:76:7d:69:66:0b:
         6d:5c:3f:b8:2a:82:84:89:b4:cb:27:a3:26:f4:48:72:2e:3a:
         37:01:38:da:55:5d:d9:61:17:b3:e0:06:cb:03:7c:99:14:39:
         f4:ee:36:c6:1b:99:80:4c:29:db:37:a6:8c:62:e7:24:02:52:
         9e:a9:05:75:a2:f7:db:dd:a9:6c:31:56:9e:b7:70:80:3c:b3:
         d7:09:8e:f2:15:35:71:92:ae:2a:be:ba:ac:6f:26:98:db:87:
         2d:17:1d:f8:d3:2c:8b:d7:07:be:86:64:fe:75:8e:c2:dd:65:
         ee:3c:0c:fb:98:4e:8b:46:3a:15:a9:77:df:51:f7:b0:24:35:
         9e:66:33:0e:87:11:e3:79:7b:3e:5e:27:8b:48:16:5a:9d:be:
         8e:41:f8:cf:84:6b:db:12:dc:c8:ae:67:12:a3:e3:08:a6:1a:
         2c:23:6c:68:90:6f:77:17:47:1c:c6:ca:67:c7:6d:c7:83:3e:
         b7:ef:80:24:4d:3d:a2:1d:17:f1:80:04:52:d9:ec:37:4a:61:
         17:12:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:42:24 2026 by rpki-client