Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa
File:                     f3af929a-e159-397a-bd25-ba1d31de60ea.roa (raw, json)
Hash identifier:          uBuiEdW17T+4lZDNMAjCoDHZ9NL/pgsg6L5CjBA5xz0=
Subject key identifier:   E3:79:11:5E:8C:7B:97:09:91:66:F1:B2:57:ED:76:86:24:D6:54:A8
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584F49740E7CD8A8061DECF44E40
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        2620:1b2:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:0e:7c:d8:a8:06:1d:ec:f4:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=30fbfe37-1be3-4bd8-8c23-e46aa9d37513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:f9:d9:42:80:98:dd:1b:7e:c8:f4:52:e7:
                    3b:22:82:8d:0e:3c:7d:28:d9:5b:8b:39:1f:d1:37:
                    5c:55:5a:a8:4c:97:b4:80:12:e6:09:b8:88:e2:ad:
                    00:c0:68:fd:2f:6c:43:0f:f7:11:ec:82:45:4a:7c:
                    a9:c7:66:cf:04:ad:04:45:fe:1f:0a:f1:ff:56:f3:
                    1b:3d:5e:46:9a:59:b3:e4:57:b8:44:79:62:22:22:
                    a5:3b:5a:b5:3a:13:45:38:09:ee:c5:ea:da:26:98:
                    18:59:03:ba:49:6b:b1:dc:da:8d:17:e2:ed:14:72:
                    37:14:0d:44:be:98:9f:86:7b:19:58:24:68:5b:b1:
                    a7:fe:dc:0e:d6:52:07:6d:d4:b7:fa:3f:97:45:4e:
                    9d:96:01:2b:07:c0:a6:a4:ac:af:91:f3:3f:c9:ee:
                    b7:0f:96:aa:e3:a0:86:b2:d7:b6:03:ba:59:57:bb:
                    b6:7f:14:48:ae:f9:c4:85:33:fb:03:c8:1a:1c:11:
                    9e:6e:e9:56:78:e5:af:1a:85:5b:35:a4:86:94:a0:
                    28:f9:24:35:9f:b8:83:49:ae:71:fe:4b:cc:88:18:
                    fa:c2:eb:6a:57:ad:38:4d:19:01:5e:d6:95:67:6b:
                    61:a3:b6:27:3a:37:a0:39:b9:e7:c0:45:2d:b9:79:
                    b1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:11:5E:8C:7B:97:09:91:66:F1:B2:57:ED:76:86:24:D6:54:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/f3af929a-e159-397a-bd25-ba1d31de60ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b2:8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:5d:53:b8:41:25:38:d2:80:81:f3:d9:01:b1:e9:51:b9:
         06:e1:fd:df:4a:81:a3:0a:7b:46:78:10:4a:2f:e3:6f:43:20:
         c0:62:f5:ee:4b:59:ef:37:0a:bf:c3:6d:f9:9e:6d:eb:f2:82:
         9b:f3:bc:77:e9:52:f6:dd:34:7b:f6:31:86:b7:22:3a:e5:8f:
         73:28:d6:35:35:ce:a2:db:4b:dd:4c:1f:b9:13:d4:ee:be:ca:
         61:95:c3:9f:b9:50:d7:ac:62:b0:5c:30:b9:7c:27:a2:72:3a:
         52:52:a3:bf:a8:93:2f:95:83:3d:f3:6d:0b:b9:c0:6d:d9:fc:
         ce:ce:7b:f0:8c:1b:b7:94:7b:44:fd:01:32:d0:89:5a:d1:2d:
         25:41:ef:ac:1c:ae:66:72:84:f6:8c:48:ef:96:51:3a:41:d8:
         53:9d:12:5a:96:0a:ea:a1:e7:1c:cc:ec:1b:cb:8a:92:2b:c9:
         1d:bd:2b:b0:cb:51:9b:05:49:10:1f:49:d6:65:77:95:89:db:
         0a:6b:bb:56:00:d2:ed:9b:f2:36:4b:98:52:90:f5:87:7c:fc:
         b2:f7:84:2d:f6:a2:cb:28:48:95:ac:e4:c8:f8:59:60:7e:ee:
         cf:5f:49:3b:fd:9f:86:4c:fd:f4:48:b3:f8:f1:3b:07:4a:6c:
         0f:72:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 14:44:29 2026 by rpki-client