Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
File:                     d5585992-e680-3e2a-90c5-f5452de158cb.roa (raw, json)
Hash identifier:          Dap9+DVx5CzWgRxn2aUiTxV3nZqq9713UpIghoO0GBQ=
Subject key identifier:   99:23:3A:18:3F:CE:A3:8C:F5:02:90:28:42:92:DD:8D:6E:C9:DD:0F
Certificate issuer:       /CN=b76a56d7-e03c-4adc-a642-166acb54d72b
Certificate serial:       010D0C9F4328584F549D640C15B07718BE4C5B00
Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     32277
IP address blocks:        2605:ab00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:64:0c:15:b0:77:18:be:4c:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=1952b213-37af-4f70-bfd3-07e2cbb7e4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:50:c5:3b:31:02:f0:b2:0c:a0:3a:46:37:
                    83:40:75:e8:cc:b5:ec:a7:f3:a7:01:8f:91:be:a9:
                    c3:d0:06:d2:e0:b8:8f:e9:ca:b9:94:07:74:6c:6a:
                    ad:83:05:f9:59:6d:d8:48:e9:39:a2:4b:27:c6:5b:
                    9c:6e:b3:d0:f1:58:71:2e:7b:8b:0e:93:33:b0:7d:
                    c0:7f:b3:f1:59:9a:1e:8c:68:a6:a9:49:22:f2:ab:
                    30:66:4e:83:61:ba:bf:34:4d:e3:c0:fd:44:e7:c6:
                    a3:a3:a6:b3:c2:93:5e:93:8c:df:4b:eb:84:bc:8e:
                    05:50:9f:a4:12:ba:be:1d:4e:8e:8a:23:2e:a7:54:
                    0f:17:50:ab:70:3d:96:09:96:fc:d0:9d:f4:65:04:
                    9e:54:42:b2:ea:90:b4:5d:10:c8:ab:53:27:ca:ac:
                    04:49:7e:b6:9e:d1:cd:c9:6b:3b:b1:a9:29:d1:ee:
                    f8:3c:f9:52:a5:56:fc:57:4e:e1:9c:0a:23:50:bb:
                    b8:03:5e:fd:d5:c7:e7:3d:d9:ab:18:f1:2e:20:01:
                    69:cf:0b:cf:11:03:e8:86:05:2b:a7:5d:8c:aa:f5:
                    8b:8a:c4:d5:ec:81:0c:eb:a3:88:cb:41:f0:c8:17:
                    2c:0a:1f:e1:c7:58:63:bf:ca:c7:5b:10:e7:e9:28:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:3A:18:3F:CE:A3:8C:F5:02:90:28:42:92:DD:8D:6E:C9:DD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl

            X509v3 Authority Key Identifier:
                keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ab00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:24:61:cd:0a:a3:8a:e0:35:7b:a9:55:6b:a8:4b:68:e2:90:
         38:1b:fd:91:09:8f:f8:93:7f:cf:5a:19:fa:70:fd:92:b9:f5:
         be:32:d8:f9:dd:7a:8c:f1:bd:03:72:53:03:fc:1a:84:d2:0f:
         bb:9b:40:39:47:f3:4e:59:35:6c:be:31:46:e6:8b:90:f2:7a:
         be:a0:95:22:60:28:7f:5a:9f:c1:12:da:e3:20:20:c7:02:30:
         59:4e:16:34:f7:16:68:2e:43:a7:6f:5b:30:7e:22:51:b6:0d:
         69:99:75:1e:3a:30:9f:7a:d1:8d:8a:da:f4:e5:99:26:c7:1e:
         c7:f8:33:40:6f:32:79:17:55:9b:d5:bc:11:77:63:b5:59:b2:
         55:b5:31:c3:53:5a:51:8c:6a:75:dc:b9:50:8e:c1:b7:4f:5f:
         b6:22:eb:51:5b:64:37:92:6d:e5:fc:69:4e:40:cd:45:b6:50:
         58:4f:0e:90:78:9a:6d:4b:c7:de:2d:f8:5b:07:c1:49:54:d9:
         b5:72:5b:41:2c:6e:d8:28:02:82:19:2a:81:4f:b6:19:54:84:
         b2:b2:c4:cc:91:7d:16:7f:dc:3a:53:84:25:06:92:a7:7b:d0:
         cd:f6:77:65:99:a9:39:8c:bd:f2:3c:79:b9:b7:d2:3e:a7:93:
         c0:3b:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:26 2026 by rpki-client