Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/242c337c-ad4f-3466-9036-06b29bffb71c.roa
File:                     242c337c-ad4f-3466-9036-06b29bffb71c.roa (raw, json)
Hash identifier:          03NlOZ6It68Az8u8Ink+bkwsI15OzlTJHclbgcm8Zgk=
Subject key identifier:   85:DF:B7:6B:25:DC:77:5D:9E:CD:BE:07:90:DB:9C:60:A0:3C:57:4B
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584EDDF741BBA01D813DD5566F00
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/242c337c-ad4f-3466-9036-06b29bffb71c.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     399516
IP address blocks:        2606:18c0:f7a::/48 maxlen: 48
                          2606:18c0:1a3f::/48 maxlen: 48
                          2606:18c0:7b92::/48 maxlen: 48
                          2606:18c0:c4e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:41:bb:a0:1d:81:3d:d5:56:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=fc2ee113-9744-4a51-b45e-9c373d4b86a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:03:2b:fe:2d:63:ef:46:3c:59:b7:14:d4:
                    c9:7c:53:8a:5c:dc:91:e9:46:14:6c:16:62:8b:9c:
                    13:a7:cc:25:db:92:e2:01:51:4d:91:68:17:3d:1b:
                    9b:4a:31:23:d0:02:a3:87:60:56:03:ab:55:37:40:
                    25:bb:c5:e9:9f:3b:ee:77:a8:39:b4:d7:fb:4e:44:
                    50:9e:c2:d7:87:4c:ed:db:81:4e:9b:48:ff:28:70:
                    26:27:6f:94:7b:27:84:fb:ae:ff:e8:91:72:19:f4:
                    6b:a9:15:32:30:ed:0f:7c:6a:fc:e5:6c:b8:07:bf:
                    6b:f0:20:9e:cd:d8:a3:14:87:46:43:5b:06:c8:e0:
                    08:a9:99:84:7d:05:c8:44:09:19:f1:15:8e:d0:60:
                    b5:bd:20:1e:45:7b:62:f3:c3:8c:d1:7f:95:0f:f4:
                    2c:ac:4d:75:57:a5:a4:27:78:90:e7:37:33:c2:ea:
                    1d:71:43:8e:8e:bf:34:75:63:59:b9:1f:e0:ce:f3:
                    a6:58:fc:1a:b5:29:a7:bc:bd:e5:45:54:34:78:15:
                    e7:95:8f:57:03:53:76:0a:f7:ca:89:e4:97:19:01:
                    3f:94:c1:2a:b5:ba:a6:d7:1e:77:83:fa:b4:61:31:
                    9c:d6:8a:ad:82:66:7f:9f:e8:b7:d3:6e:0f:6f:d7:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DF:B7:6B:25:DC:77:5D:9E:CD:BE:07:90:DB:9C:60:A0:3C:57:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/242c337c-ad4f-3466-9036-06b29bffb71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:f7a::/48
                  2606:18c0:1a3f::/48
                  2606:18c0:7b92::/48
                  2606:18c0:c4e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:db:86:71:73:92:fc:f4:eb:ff:35:73:2c:a5:8d:d6:0b:c5:
         06:96:5d:69:1d:2e:35:b7:99:ca:3e:ae:b3:f8:d9:c0:5d:d6:
         bb:8d:52:33:46:b9:ae:59:64:8a:c0:ef:aa:e5:63:0a:86:95:
         02:3e:85:3d:cb:f4:b8:c4:50:ee:d0:58:9a:be:f2:34:dd:87:
         64:3b:2a:b9:52:5f:0f:b7:f0:47:fd:70:53:c2:09:66:d6:c9:
         11:e5:cb:14:a1:76:be:56:9c:62:02:c3:c6:9c:ec:10:86:cb:
         c0:6b:f0:04:68:ec:ca:c6:a7:ea:78:4c:e9:5d:a2:5f:48:db:
         ba:0b:e7:f0:f3:1b:68:f6:f6:53:a3:49:d7:6d:c0:b6:ad:b3:
         10:ad:0a:07:87:10:be:16:e1:5a:d0:58:32:ea:56:d5:67:18:
         ef:9b:50:c1:5a:10:8c:ce:08:4a:f3:1b:fb:1e:4a:7f:ab:55:
         c1:0d:a3:36:63:d3:e3:52:ca:5d:db:95:73:ed:69:ce:27:43:
         76:c0:a4:e3:2b:22:24:cb:7c:9d:c2:af:b9:0b:10:80:dd:76:
         06:c8:4c:2c:e3:d3:3f:a9:96:56:33:3a:fb:1f:b6:a5:4a:90:
         20:7a:ca:19:90:8e:a4:17:a3:9d:5a:e9:21:1e:87:21:d9:7b:
         b2:1d:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:30:54 2026 by rpki-client