Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/e89964fe-8028-3773-91b0-0964b6b60473.roa
File:                     e89964fe-8028-3773-91b0-0964b6b60473.roa (raw, json)
Hash identifier:          db8f38B3jVK6LZ3mbDPmpW9v9MH69UDwvphL4jBMVVM=
Subject key identifier:   EE:76:94:48:D0:2E:EA:B0:3E:A8:6D:7D:4C:28:61:5B:80:EE:76:F3
Certificate issuer:       /CN=9f50a32d-67f6-4911-9d39-4147e96f09f8
Certificate serial:       010D0C9F4328584FAA9229D5B010F71479CC00C0
Authority key identifier: 0D:90:E2:47:71:F5:A4:7D:42:D2:9F:B2:51:2F:9C:25:ED:20:A7:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/e89964fe-8028-3773-91b0-0964b6b60473.roa
Signing time:             Thu 29 Oct 2026 19:57:22 +0000
ROA not before:           Thu 29 Oct 2026 19:57:22 +0000
ROA not after:            Wed 27 Jan 2027 20:57:22 +0000
asID:                     54413
IP address blocks:        2620:9b:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/9f50a32d-67f6-4911-9d39-4147e96f09f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/9f50a32d-67f6-4911-9d39-4147e96f09f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:92:29:d5:b0:10:f7:14:79:cc:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f50a32d-67f6-4911-9d39-4147e96f09f8
        Validity
            Not Before: Oct 29 19:57:22 2026 GMT
            Not After : Jan 27 20:57:22 2027 GMT
        Subject: CN=885e8ae0-c3ec-414f-88cc-1515a29c363c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:3b:0f:c2:fe:c9:1e:39:aa:20:00:c6:ff:
                    3a:38:74:56:14:d0:18:f3:2e:ba:a5:ea:60:c4:ed:
                    89:10:60:79:47:25:07:3a:a7:ec:61:c7:cf:12:38:
                    2e:b3:ea:80:6f:e7:ca:7b:07:07:e2:af:8e:e9:95:
                    5c:5a:28:f2:a5:cc:08:e4:27:c1:ff:69:c5:7f:31:
                    2c:ee:34:68:ef:ad:51:32:5a:9b:15:8b:1d:68:b5:
                    cd:7e:0c:a9:3a:83:1f:48:75:ef:06:3d:ea:8d:4c:
                    5c:a6:a8:18:5b:7f:7a:ae:7e:91:85:d1:2e:bb:bf:
                    ac:9c:7d:01:bd:57:a4:a7:ad:76:a9:0f:df:1a:23:
                    b4:ca:9d:24:85:e4:ee:a5:af:bf:05:81:d6:e2:a7:
                    cb:64:6d:ac:fe:e4:10:bf:30:60:59:08:e4:91:2b:
                    9f:e9:26:ad:0d:40:ec:a0:3a:ab:b3:5e:3a:81:94:
                    cc:cc:65:21:48:a8:d7:b0:ba:e1:79:86:75:57:4d:
                    4b:ac:a5:07:5e:11:cf:7f:f3:91:35:9d:b2:bd:09:
                    b4:d7:be:60:ad:c6:74:9f:8c:9a:31:7e:98:b3:9b:
                    62:cf:c8:45:c0:e8:27:ff:06:20:a5:6d:82:9f:17:
                    4d:f3:b3:61:4b:e3:ea:c9:ef:27:9e:4c:2a:8e:8e:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:76:94:48:D0:2E:EA:B0:3E:A8:6D:7D:4C:28:61:5B:80:EE:76:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/e89964fe-8028-3773-91b0-0964b6b60473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/9f50a32d-67f6-4911-9d39-4147e96f09f8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:90:E2:47:71:F5:A4:7D:42:D2:9F:B2:51:2F:9C:25:ED:20:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9b:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:0c:0e:ed:0c:c7:15:c5:7b:39:e4:77:ae:b8:07:6f:10:
         74:76:2f:95:ed:8d:22:d0:66:93:e3:15:6b:71:20:82:59:a9:
         82:5d:da:1d:27:d4:0b:66:ac:d0:76:d3:91:a0:5c:9a:38:6f:
         89:37:2c:c9:f9:5a:35:59:6b:17:54:7d:f4:87:3d:22:f1:94:
         2c:c7:31:48:30:c7:c7:a4:86:16:29:49:cb:98:2c:72:8c:29:
         c0:c8:d2:22:dd:46:63:78:f8:a9:f4:04:04:5e:e7:49:ac:07:
         91:73:bd:8f:41:6f:da:ca:c3:7f:e3:31:c9:6a:18:84:7f:f7:
         76:05:1c:74:a0:c0:71:c9:f2:d8:ce:86:bf:10:ce:84:bc:30:
         aa:b2:19:b1:72:03:f5:2f:75:d6:42:ed:d6:0c:ad:cc:0c:aa:
         67:6d:37:dd:ac:d4:65:2d:71:81:f3:e4:2c:cf:44:95:7e:33:
         e3:c1:7e:40:2b:50:78:81:b6:74:4b:32:f2:14:d1:82:61:66:
         0d:26:e3:32:08:f7:de:b1:4e:ef:3c:df:c1:75:62:1b:26:7a:
         b6:7d:de:a7:25:6f:48:15:22:a6:3a:fe:f5:e6:70:42:e5:77:
         8d:d6:e9:ce:19:15:09:48:71:97:a8:0f:45:02:b2:23:9d:5d:
         49:ab:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:26 2026 by rpki-client