Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/4043f796-836e-3b35-b717-405964e82e07.roa
File:                     4043f796-836e-3b35-b717-405964e82e07.roa (raw, json)
Hash identifier:          FWzikQbAjV2SNTThhU1IetrWx1xpU60f2CDdJUzoKCA=
Subject key identifier:   C3:98:CC:74:00:19:D3:9C:9B:64:5B:91:CC:3C:05:03:8E:77:C5:94
Certificate issuer:       /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial:       010D0C9F4328584F331D31177567D77131E61880
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/4043f796-836e-3b35-b717-405964e82e07.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     399007
IP address blocks:        2605:f340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:31:17:75:67:d7:71:31:e6:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=1860feb1-464f-4ba4-9df6-19932d0320d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:fd:9d:7f:69:69:05:c0:21:be:37:f8:6e:
                    18:66:8c:86:d7:64:64:ba:45:3a:5d:d2:5c:0a:25:
                    31:6e:de:ac:84:b4:26:0c:77:52:fd:c5:a0:90:14:
                    70:22:fa:14:5e:73:4f:88:d2:6c:14:70:f5:53:f0:
                    46:fd:b6:ee:71:31:83:c5:af:03:b8:dd:b2:1a:2a:
                    4a:d7:26:61:58:e7:f6:b5:94:37:5b:af:14:10:57:
                    f4:b4:b0:b0:bd:19:cb:45:a0:07:49:6a:fb:56:83:
                    4d:b8:18:32:52:b1:0a:04:1a:f0:40:4f:b5:1e:78:
                    51:15:fc:eb:87:75:59:f2:79:7c:13:99:26:5f:09:
                    8a:f2:2a:d7:11:42:3b:c2:b0:8d:21:bc:ac:f2:f9:
                    24:ea:61:67:61:6e:41:73:31:50:43:62:c9:8d:68:
                    29:fb:57:68:bc:cf:94:19:73:16:b7:fe:50:94:4d:
                    8d:f8:16:95:6c:97:72:1a:e0:2f:b0:94:7b:05:74:
                    85:40:aa:45:c4:10:52:3c:e6:91:d7:eb:0f:ff:b2:
                    a8:a0:e1:c6:b9:bf:08:4c:1e:7b:1f:49:7a:2f:7f:
                    fe:da:bb:df:0c:7c:90:e0:bd:09:0a:a1:6d:bd:0f:
                    5e:bb:29:af:c1:55:bd:f8:d5:1f:b9:be:b6:08:16:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:98:CC:74:00:19:D3:9C:9B:64:5B:91:CC:3C:05:03:8E:77:C5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/4043f796-836e-3b35-b717-405964e82e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl

            X509v3 Authority Key Identifier:
                keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:29:fe:fd:14:4f:8d:ea:5c:c3:96:11:26:0c:ca:ee:6d:1b:
         68:72:6f:da:bf:f9:d6:43:f3:6b:5f:41:21:1e:36:f6:ac:71:
         fe:aa:3d:ca:0b:95:01:6c:39:34:72:39:3e:90:20:15:d6:1b:
         ea:af:5c:07:6c:1b:ee:ed:6a:dd:76:94:f6:7b:31:6b:c0:52:
         16:0a:7a:6a:35:b7:12:da:76:e6:44:6a:7a:6a:6a:d1:f9:8d:
         7e:37:23:9b:8f:fe:7a:50:e0:b4:cf:78:5c:dd:fe:a6:8f:82:
         66:e9:4d:fe:62:87:de:86:4d:ba:fb:d4:67:d8:0c:ec:f5:05:
         bb:7b:9c:fa:87:0b:af:06:f4:36:45:18:4c:a5:4f:94:8f:b4:
         34:c2:74:ad:25:d2:66:88:8c:53:64:79:1b:cc:8e:b0:e4:68:
         96:58:4e:43:23:fb:a7:9d:5b:65:61:23:85:ec:a9:2a:23:d4:
         b0:5d:d9:6a:07:88:6d:71:6c:cc:26:b0:48:81:e1:85:4a:0d:
         3d:48:44:a5:53:d9:3b:0b:1a:0f:c4:e6:33:02:dd:06:ef:2a:
         e7:f8:20:dc:e9:fe:f1:48:2b:78:67:3f:6b:cd:db:16:b0:77:
         df:9d:7e:a7:e9:18:e7:57:38:07:53:7d:14:3e:92:e9:c1:1f:
         af:d5:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:09:07 2026 by rpki-client