Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
File:                     878804ae-2c92-32cf-a079-f9b1123410d3.roa (raw, json)
Hash identifier:          12Oicb1/naG+EFXOpeO2GFoz9G5Dr2rMDd6idDInXtU=
Subject key identifier:   CD:C6:19:B8:EF:2F:24:B2:AD:21:80:AE:1E:4A:49:56:A6:CE:E2:D4
Certificate issuer:       /CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
Certificate serial:       010D0C9F4328584F3A17CD618C3F8355F8858500
Authority key identifier: F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     393657
IP address blocks:        2620:13b:a000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cd:61:8c:3f:83:55:f8:85:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=9f8c5803-6997-4d2b-a00a-3d55b520c0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:fa:dc:67:86:fe:e6:7b:29:3c:fc:8e:e6:
                    ff:d0:5c:a6:5f:84:88:f2:e5:93:9d:b4:ba:27:69:
                    c7:a2:a2:c8:49:17:ae:65:3e:d1:46:30:bf:bb:0e:
                    a2:31:9b:ef:82:15:18:41:d0:ef:c9:4c:f2:3e:9b:
                    0d:74:f1:c9:e1:11:4c:11:c4:ea:3d:1a:31:46:53:
                    53:67:f7:6c:10:b3:39:ab:e6:bb:3e:86:01:fb:ab:
                    a0:f3:58:4e:6e:e1:bc:43:6e:97:8f:61:28:53:02:
                    e2:fe:33:d7:58:fc:16:57:40:fe:4a:e9:44:b4:1c:
                    76:bd:8c:70:4f:1b:aa:f2:1e:54:86:6c:28:04:7d:
                    a9:d4:ad:bb:09:ee:d7:89:a4:06:60:c7:a4:2f:a7:
                    13:6f:da:e4:2f:31:37:a8:22:11:63:ad:9d:c6:99:
                    0b:39:84:24:9e:b4:cd:19:64:a6:20:75:9e:b4:f0:
                    b1:08:41:e0:13:dd:07:75:3e:75:bb:96:b1:4b:32:
                    30:0a:8c:2e:c9:63:4b:a6:22:96:5f:81:16:e3:1b:
                    c4:1c:a4:0a:fb:97:29:24:84:41:ea:32:c4:6a:4a:
                    b5:40:3f:0f:23:51:3c:09:06:db:46:98:f3:a3:a0:
                    e4:29:f3:5a:d9:84:b2:bd:80:6d:75:77:5c:54:c0:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:19:B8:EF:2F:24:B2:AD:21:80:AE:1E:4A:49:56:A6:CE:E2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:d2:ca:bb:26:e0:9e:85:f7:f2:1c:fc:29:b7:b4:d6:3f:
         fb:47:ac:58:88:04:eb:44:8c:f4:90:83:1a:57:c5:31:a9:ea:
         72:d4:97:74:aa:25:52:65:51:47:58:43:36:48:91:86:9f:e4:
         12:65:6c:5a:0e:b0:87:b0:1a:78:46:f8:f1:a2:29:27:96:50:
         38:65:db:c4:36:e9:22:78:28:bb:a7:a8:a4:be:9b:73:de:a8:
         57:1b:4b:8d:4d:c2:3d:c9:a4:08:b4:75:bd:cc:cc:47:1e:9f:
         97:93:5f:20:2c:e6:b6:e6:cb:07:70:b5:87:39:47:47:76:18:
         3e:a5:2b:4a:0e:e3:75:7b:2f:3a:36:4d:d0:62:a2:b8:92:c8:
         0d:9e:c9:c4:08:92:eb:fc:9b:c8:43:3b:bf:0f:30:1f:6a:42:
         78:95:88:00:00:02:17:2f:fa:f9:86:97:eb:06:3d:da:fe:0c:
         fb:76:47:d9:38:90:2d:ad:a1:ef:6e:c3:ba:db:aa:7b:55:ce:
         0d:81:19:a7:74:6b:05:b3:c8:1d:81:51:58:7d:f7:49:f1:01:
         6b:a3:99:9d:be:41:14:4a:93:ff:aa:85:b7:15:c5:d6:e8:d1:
         cd:da:ac:1f:c0:d0:d5:56:f4:58:83:9a:d3:0d:c5:bd:be:f7:
         52:55:01:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:32 2026 by rpki-client