Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/744cedec-5ffe-3430-bda4-c3c16bf15e7a.roa
File:                     744cedec-5ffe-3430-bda4-c3c16bf15e7a.roa (raw, json)
Hash identifier:          ggfMPqyOYT3vwaHVG0wGh1vk2NCEioUrrVLZnsf0Qpo=
Subject key identifier:   6A:AE:C0:B9:C1:B6:2D:53:9F:6B:10:90:7F:D8:EC:85:83:FB:58:0D
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584F9A68BF9A6D40EE1E9B20E400
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/744cedec-5ffe-3430-bda4-c3c16bf15e7a.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     63023
IP address blocks:        2604:7580:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:bf:9a:6d:40:ee:1e:9b:20:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=697ad046-4e7b-4d74-a4e8-8b6a8c1a20fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:cf:47:80:69:91:c0:dd:84:4c:ef:10:70:
                    fb:2d:04:c4:1c:4a:38:2c:f6:d6:1f:25:9e:b0:04:
                    a3:bd:d9:c1:12:68:19:d8:1d:24:5b:a3:71:a0:1d:
                    77:39:fd:97:bd:a5:5c:1e:f6:c6:70:18:21:75:2f:
                    ec:ba:1f:14:15:3c:4c:bd:e2:19:0e:00:26:80:a0:
                    45:88:2f:cd:11:95:a6:2e:f3:d5:a9:bd:8f:45:d7:
                    f8:0a:29:d0:e1:1d:c3:7c:ee:a7:ad:f4:94:06:8f:
                    1f:05:52:ed:18:c9:f5:e5:3d:f8:dc:dd:fd:d4:3b:
                    01:c4:55:6c:65:f8:64:11:be:b5:03:e4:8a:9d:c2:
                    55:0f:3d:8b:eb:ef:df:df:f3:10:fe:0b:1d:70:59:
                    18:0d:c7:71:bd:45:9a:43:a6:52:a1:bc:3e:cd:d7:
                    c2:24:16:55:3d:47:e4:e9:fd:fe:ab:bb:8e:a8:aa:
                    83:03:f6:47:9a:a4:e3:41:40:d5:99:bd:20:d4:bd:
                    1c:b6:f5:c3:e2:3b:4d:fc:7f:ae:d4:de:72:93:e4:
                    cc:f9:d9:08:56:cc:9b:a4:4e:61:47:91:31:a4:9d:
                    69:09:5e:c2:84:ef:ab:72:fa:91:ce:ee:ad:81:63:
                    64:12:39:39:51:6e:06:d2:ba:a1:9e:fd:15:bb:7b:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AE:C0:B9:C1:B6:2D:53:9F:6B:10:90:7F:D8:EC:85:83:FB:58:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/744cedec-5ffe-3430-bda4-c3c16bf15e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7580:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:8c:96:db:06:a4:ac:0a:ba:d8:d4:f2:96:ef:b7:5e:ff:
         ae:6b:56:d7:19:d3:4a:9a:a6:5e:50:7e:91:a6:00:3f:06:01:
         16:54:cf:26:9d:f7:51:6b:f5:13:f8:c1:50:42:88:56:68:9e:
         c8:ad:e9:8d:3d:d2:e7:d8:95:3c:0f:f8:3a:5c:29:17:dd:eb:
         43:d0:5d:dc:3b:b2:d3:cc:72:68:c8:77:66:ce:6a:fa:b1:42:
         0b:a9:66:72:aa:7f:d2:b8:2d:55:32:19:62:db:b0:27:3c:8c:
         63:b7:55:95:f6:b9:7f:6c:ef:55:e4:77:80:e4:90:21:91:58:
         aa:a1:3a:0d:93:49:f9:c2:47:4f:37:95:53:8b:d6:91:79:f5:
         48:77:41:74:83:33:0a:63:a2:09:82:09:e5:5c:ab:8e:c1:01:
         b2:0f:b8:b5:41:07:a7:14:0a:da:d6:57:ec:16:77:74:dd:20:
         8b:7c:bd:96:49:3f:c8:cb:c0:ba:5f:b7:ed:32:af:7b:4c:25:
         0c:ef:e2:c8:9d:1c:63:08:2b:89:bc:e5:19:71:8f:bb:bd:6d:
         91:f4:ce:27:1b:2b:06:a4:35:2f:26:d6:c0:43:2b:84:a1:a9:
         97:64:c6:a6:10:83:35:f7:42:4d:67:8d:70:0b:cf:42:69:13:
         81:c8:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:25 2026 by rpki-client