Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d122a7c1-3571-3eeb-8793-3ec681157a43.roa
File:                     d122a7c1-3571-3eeb-8793-3ec681157a43.roa (raw, json)
Hash identifier:          FYSrHRquEcllYq62HKftQppMYx5ImVXNAKL0SNDf2YY=
Subject key identifier:   81:99:A5:91:3B:8D:1D:E2:11:80:FB:AE:44:04:42:70:03:20:62:9F
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584F655E6A3478136B2350838761
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d122a7c1-3571-3eeb-8793-3ec681157a43.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     26042
IP address blocks:        2606:fc40:4004::/48 maxlen: 48
                          2606:fc40:4010::/44 maxlen: 44
                          2606:fc40:4020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:6a:34:78:13:6b:23:50:83:87:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=6d2f77d2-ad0d-4222-81a7-9a6dd81d15ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:29:2a:13:a3:1d:f9:94:ab:73:de:22:14:
                    c5:e1:9c:7e:de:b5:d2:24:8c:0c:7c:7f:8f:2b:14:
                    db:e4:92:60:db:58:76:3c:82:8f:ec:01:98:ea:16:
                    b5:ca:0e:f3:28:55:45:f9:90:02:f6:c7:10:36:bc:
                    ea:36:31:7c:2f:5f:94:bf:4f:63:04:0a:56:99:34:
                    2c:53:a7:b8:13:50:9f:64:3a:c4:53:9e:6b:57:c2:
                    a7:1a:7a:32:9d:d8:1a:60:b3:d0:34:10:a1:d2:b0:
                    97:cb:b8:0b:2e:e3:4c:ba:9e:fb:fd:75:f8:5a:1f:
                    e2:0f:b2:22:0e:cd:46:f3:f9:28:c9:41:19:62:95:
                    80:79:b7:07:e8:89:a9:58:a1:ba:a3:05:86:19:0b:
                    52:ca:47:48:99:1e:28:74:17:84:ee:0c:4d:83:46:
                    9c:d6:90:b5:fb:db:db:03:3e:31:73:9b:cf:18:b2:
                    42:ee:c4:8c:c3:58:1c:fb:f1:ff:df:cf:bd:b1:ee:
                    20:0b:e6:27:ae:95:ff:ea:0f:84:bc:b2:79:cd:60:
                    1f:ea:ed:87:bd:52:5b:49:98:76:ac:74:89:96:fe:
                    48:dd:bb:eb:0a:72:75:f8:12:36:c9:98:84:fb:06:
                    5e:10:3d:92:5d:44:43:c6:49:84:bc:82:9d:10:26:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:99:A5:91:3B:8D:1D:E2:11:80:FB:AE:44:04:42:70:03:20:62:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/d122a7c1-3571-3eeb-8793-3ec681157a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4004::/48
                  2606:fc40:4010::-2606:fc40:402f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fa:11:5e:8f:3e:d8:5a:3f:af:cb:97:db:45:06:8f:b7:55:
         28:0a:6f:7b:c3:c2:19:5c:d9:b2:8d:47:4a:95:d1:2c:9a:36:
         ac:7d:12:f6:28:81:42:c5:5f:80:6c:f8:5b:28:f0:38:4a:2a:
         4a:a6:09:be:2b:e7:8e:fb:f4:02:f0:02:f6:72:b1:6f:5a:dd:
         d9:e3:cb:07:56:71:a4:69:4f:ee:77:09:7d:44:c4:4f:04:58:
         01:13:30:d0:eb:52:2d:36:38:70:db:cf:de:51:34:a3:1f:07:
         c8:e8:a1:b7:53:3c:99:16:07:1a:b3:ae:a0:23:55:8c:8b:43:
         06:ad:17:81:52:90:b9:dd:2e:27:65:eb:ff:31:0b:04:b5:51:
         fb:61:6d:41:b7:d3:dd:27:60:3e:fc:8d:4c:0d:99:40:7f:9a:
         04:5a:85:22:ad:56:a1:fb:d6:39:74:02:c0:74:4a:db:94:49:
         70:e1:d0:54:3d:13:03:fb:76:1e:35:35:4e:5c:52:1e:7d:79:
         08:c1:44:ec:3a:2b:57:6b:a4:54:68:01:19:14:c3:73:d9:ce:
         e5:09:61:07:a9:ae:02:9d:7f:ba:ee:da:22:df:28:8e:ac:6c:
         82:8c:49:b9:92:79:67:67:fc:44:e6:5f:3f:b9:df:ec:a1:43:
         a3:e8:1f:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 23 12:45:56 2026 by rpki-client