Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa
File:                     330d7a56-9d3b-325a-9408-7b85401e8917.roa (raw, json)
Hash identifier:          8zTLS5j21w/GPxl2iq0TVQ+4K0oC6RTXS1nuPsCZPUQ=
Subject key identifier:   17:7C:8A:0B:B8:C0:82:31:FF:16:31:D1:51:CC:23:29:22:1A:72:11
Certificate issuer:       /CN=8715c48f-238b-4492-ab94-609edd679287
Certificate serial:       010D0C9F4328584F612D6633104260C5FA093F40
Authority key identifier: 15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     68
IP address blocks:        2620:126:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:66:33:10:42:60:c5:fa:09:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8715c48f-238b-4492-ab94-609edd679287
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=300d27da-cdc9-4dec-92e8-f84c4886d65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:ce:a7:e4:cc:82:93:91:70:d5:3f:04:3c:
                    bc:3c:3f:80:12:3e:dc:5a:aa:30:0a:4b:8a:75:3e:
                    d6:9b:1e:05:14:ca:d0:29:e3:3e:83:46:8f:09:14:
                    02:79:12:74:f2:28:aa:00:5c:49:f8:8a:47:ba:fa:
                    50:84:5f:18:b2:c9:a5:f6:5b:00:b1:51:12:29:86:
                    c3:f4:fb:45:39:b2:1f:ca:67:32:4d:7f:08:42:2c:
                    01:06:ea:6d:71:91:d8:57:b0:6a:6f:17:f5:c9:44:
                    15:67:67:44:3a:fe:18:bb:2a:80:8c:6a:28:a7:a2:
                    bf:d9:53:15:2a:fe:96:9e:c8:97:5f:d0:3f:cb:b2:
                    b9:27:6f:0d:3e:c7:cb:95:bd:bd:27:df:4f:38:13:
                    9e:b9:ea:60:02:d7:ce:f6:53:c7:35:f5:cf:1b:0a:
                    12:ca:49:c8:06:95:4e:34:0e:20:7e:b8:54:d2:08:
                    b0:e9:ae:b9:e0:0a:c2:5d:e5:3f:68:b1:ef:9f:4e:
                    fd:d4:f8:e7:2c:c7:bb:6b:3f:25:a6:92:b0:d4:22:
                    5b:ea:f7:6c:80:02:85:a3:c8:2d:c0:16:13:79:b7:
                    70:9d:9a:1d:92:41:d6:8c:54:6d:23:d9:43:2d:9e:
                    f6:ff:c2:7b:bd:f0:2c:5a:cf:22:bb:10:77:9d:36:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:8A:0B:B8:C0:82:31:FF:16:31:D1:51:CC:23:29:22:1A:72:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl

            X509v3 Authority Key Identifier:
                keyid:15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:126:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:71:6c:6d:f4:7c:9e:ca:4d:f4:db:91:75:99:c8:71:b7:15:
         f3:d5:d9:3c:02:05:cf:4c:9c:0b:fd:83:13:de:a0:f5:11:c2:
         8e:bb:9b:36:4a:91:d7:8d:fe:df:ea:0b:0b:3b:9b:b1:78:3a:
         1c:f2:01:00:9b:79:38:b3:29:c0:98:49:26:a6:73:63:be:b9:
         70:9d:47:29:22:37:f8:43:3e:fe:68:5a:11:1c:85:1c:05:26:
         05:70:8a:2c:82:42:ad:68:b1:3c:2d:6d:1e:49:51:fe:bf:40:
         93:68:d5:98:a8:68:2a:cd:23:8f:7e:70:a9:9e:0d:f6:81:26:
         e1:b7:ac:e8:ae:b5:48:a7:43:f5:06:3e:68:88:63:32:3c:2d:
         0b:d4:84:f1:a9:f8:fe:54:6a:16:4f:c6:36:54:c5:18:34:60:
         07:31:a2:60:66:3d:0e:bf:c3:9d:e5:a2:37:7b:13:a7:7d:02:
         54:73:ea:12:0a:8f:e4:30:b5:b9:8a:a7:65:b0:78:99:9b:23:
         80:82:80:6b:8b:d3:82:27:32:be:b9:a0:0b:f3:88:ca:1d:25:
         57:0f:ad:95:24:39:5c:53:d0:61:df:ab:56:b7:34:bb:a0:ab:
         4f:1a:67:b0:54:19:1e:a3:4f:d4:01:56:65:5a:1a:f7:aa:ae:
         01:c1:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:47:14 2026 by rpki-client