Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
File:                     ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa (raw, json)
Hash identifier:          OSZVE35CWYFI6p4GSb3JSC3gmIpu//ovV77FlBsV/lQ=
Subject key identifier:   60:70:1E:7B:12:E9:E4:B1:4E:69:F6:D1:36:85:40:38:26:54:5B:36
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584F4C3D519077BBECA1213CB800
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     62494
IP address blocks:        2604:9440:2300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:51:90:77:bb:ec:a1:21:3c:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=0e276055-3dca-4053-bfd2-99cdf2d8b4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:99:e0:46:0b:29:44:6c:67:c5:b0:64:e3:
                    f9:65:45:4d:c9:e0:e0:9d:c0:09:06:ca:38:92:fc:
                    95:67:2d:3d:8b:f0:8e:cd:94:1a:8a:94:74:87:23:
                    c3:af:b8:3c:da:87:19:0f:ca:05:d5:35:4a:99:b7:
                    3c:84:0c:57:18:32:d3:2b:44:df:ac:14:31:1f:cc:
                    15:53:88:3e:6b:2b:b6:7b:c9:62:58:2d:e9:4b:5b:
                    b8:03:e3:86:39:0d:58:99:2a:70:03:d8:74:46:77:
                    38:ff:b9:97:37:ee:1b:89:fc:e3:44:ad:29:c9:bc:
                    79:4b:5b:aa:16:ff:87:26:f7:9e:57:63:82:d2:b0:
                    55:d2:20:6a:9e:d3:4b:c5:4a:36:7e:29:7f:cf:ca:
                    60:b9:d5:8b:a7:0e:db:5f:60:52:e0:8c:b1:bb:5a:
                    e8:79:d9:f3:2a:8f:4b:ea:11:e7:e2:a2:b8:df:f8:
                    c0:5e:87:20:8f:32:a5:4d:69:58:9c:3c:a0:75:b3:
                    6b:a8:5b:b5:08:bc:bb:db:ff:f4:54:b5:0e:7c:b0:
                    de:98:cb:8c:3b:06:87:da:8c:c7:cd:d3:a8:f0:6c:
                    4d:68:28:58:40:9e:27:99:a6:43:e1:fe:b8:82:0e:
                    af:1d:d4:a1:a0:d0:b9:f7:c9:3c:0b:28:2e:ce:d4:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:1E:7B:12:E9:E4:B1:4E:69:F6:D1:36:85:40:38:26:54:5B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:64:39:5e:63:99:35:65:cf:d4:67:d6:9d:fd:ff:7f:50:
         7c:7a:38:06:35:fe:81:49:2b:00:db:5b:ce:43:85:5b:e2:80:
         ce:0a:11:c2:ad:a9:9a:5b:c9:2b:20:9c:dd:b4:ec:00:c1:b5:
         9d:c7:ea:60:84:89:0e:42:0a:c6:e5:4a:e8:df:ba:b6:4c:f6:
         a0:04:9f:db:bf:55:98:2f:92:81:0b:f3:e9:3f:99:90:3d:12:
         3f:4c:4f:e1:d9:23:37:c7:05:4c:6a:5d:27:20:38:73:d5:0c:
         2a:fa:b1:d9:f3:de:1e:26:ed:e5:70:ce:13:e8:0a:88:5f:f9:
         ff:3f:66:cf:e1:38:20:d6:3e:cc:42:27:26:b7:1b:a6:c3:a2:
         05:54:ce:9b:3a:ee:b8:18:b4:99:d0:de:b0:f8:1c:fd:e2:9d:
         dc:e2:ad:dd:db:1d:6a:90:f5:3e:7b:97:b8:a7:12:0b:1d:39:
         86:0b:12:fe:4e:90:38:60:e4:d5:5b:6e:d1:e0:4a:a0:aa:fe:
         0f:71:bd:e9:c6:c9:6c:b7:3a:a5:79:53:c8:7b:35:24:c4:55:
         12:de:97:62:6e:b2:69:7f:3f:eb:0a:e0:30:1a:d5:e8:49:3e:
         8d:51:9a:19:11:a5:22:c5:b2:7f:98:31:52:e7:a4:bf:94:2b:
         a9:75:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:52:43 2026 by rpki-client