Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa
File:                     2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa (raw, json)
Hash identifier:          jl5TXUP+Zhfo/2e2nZIIYkmxjqWoL/mn2AtlpP3O8co=
Subject key identifier:   78:27:00:DC:C0:64:B3:02:01:3D:17:E7:22:88:8D:D6:3A:42:DF:E4
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584F5E62D678C7975093B0815640
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     33343
IP address blocks:        2610:20::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d6:78:c7:97:50:93:b0:81:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=5bba1ef3-4faf-4433-a499-fb510691092e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:89:78:4b:d4:bf:45:ee:76:d4:62:f1:6e:
                    b1:07:5b:a7:26:7c:34:0c:c6:43:43:8e:3c:e8:23:
                    4f:52:cc:de:c7:dc:f6:64:96:58:36:e3:d8:99:41:
                    b2:40:39:81:fe:d1:0d:21:39:a3:78:a7:63:e3:10:
                    8f:b1:ba:80:0e:14:21:f5:3f:a4:e4:47:da:15:25:
                    1f:ec:9e:f1:18:b0:e9:71:4d:f4:a3:97:7a:d9:1f:
                    ef:a8:5b:f2:96:d0:2b:a7:96:30:5b:d7:6f:12:07:
                    6d:43:dd:84:16:80:b5:df:70:fc:83:8e:e5:af:15:
                    7d:bd:27:c1:73:75:fa:aa:e2:44:fd:d1:fa:b3:11:
                    90:55:ca:b0:7f:65:d5:d1:d8:b6:2b:7a:57:ed:44:
                    09:8f:46:92:35:29:55:22:d8:b7:ea:e7:c8:46:86:
                    b4:2c:68:2e:8d:8d:8a:fd:05:8b:1f:31:2d:95:5a:
                    3c:13:6a:28:9d:b7:33:49:ee:a1:d9:61:32:2e:3f:
                    54:d4:35:36:49:09:26:56:43:3c:72:22:d3:de:a9:
                    09:47:a4:c3:54:b8:4a:d5:2c:ea:03:d8:b2:a9:d1:
                    3b:22:3e:5e:a6:77:17:50:44:4f:28:a4:65:0a:79:
                    f2:1f:4a:eb:e8:c8:00:56:2a:d3:f0:0b:a0:44:ac:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:27:00:DC:C0:64:B3:02:01:3D:17:E7:22:88:8D:D6:3A:42:DF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/2ffba34e-cbfb-35ff-b53f-b7a5bae74d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:06:45:8a:7f:f0:4a:44:28:1a:22:c8:b7:fd:5c:15:e5:55:
         0e:a5:32:c1:fc:1b:da:37:69:0b:96:54:33:d8:9d:e7:b2:6f:
         dc:c5:3b:4a:11:35:00:9a:eb:4c:78:dc:a5:11:15:70:e1:d5:
         7c:e1:4a:26:56:41:5e:70:af:62:e9:0c:93:4e:df:37:0a:fe:
         2d:1d:7e:d8:04:88:26:97:71:25:d3:37:8c:35:c3:a7:2d:35:
         c6:d7:ed:4d:cb:6b:ea:c3:a0:b5:8c:f5:fd:26:b6:1f:8b:ea:
         f2:d4:f0:9e:08:6a:2e:d4:98:e2:77:23:32:ca:e7:02:a7:fa:
         be:81:6c:31:14:e5:bb:5e:9a:03:1c:5b:31:76:ef:48:e8:8b:
         04:0e:81:2d:c2:aa:ec:62:f6:e5:f3:e7:64:eb:18:db:d6:70:
         c6:ef:f3:7c:2e:c4:b0:19:8d:7d:e1:c9:e1:37:d6:0f:51:1c:
         38:af:b4:11:06:ff:6c:f2:9b:6e:0f:0e:aa:6e:3c:5d:df:b3:
         57:b7:c0:10:2f:01:d4:ff:2b:68:0b:b1:11:a1:1a:1c:b3:36:
         76:e6:ac:9f:3a:93:66:7a:41:79:91:d6:f4:d0:dd:fe:bb:b2:
         9e:b6:7a:81:16:f6:70:ae:fb:88:7c:af:79:02:8c:58:33:ae:
         c8:cd:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:36:48 2026 by rpki-client