Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa
File:                     76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa (raw, json)
Hash identifier:          85LhpEwg/s3sSLNV14v+RvTkF/yeAh5dG2l01Su5JFk=
Subject key identifier:   42:BC:E1:2A:7D:A0:24:1F:BE:77:9A:CE:C7:10:A1:C1:55:EE:51:AA
Certificate issuer:       /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
Certificate serial:       010D0C9F4328584EA78795B3AE6F42C422158B00
Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19523
IP address blocks:        2620:9e:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:95:b3:ae:6f:42:c4:22:15:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=766c1d51-d751-4e5e-9aa9-46a0fa76cde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:ec:4d:87:e5:70:92:ff:81:45:7d:b4:b6:
                    77:ab:6b:60:61:ad:d6:29:a7:2b:fc:6f:c3:f5:7b:
                    19:a0:fb:c6:bf:a4:57:95:64:78:0a:be:00:e8:2c:
                    1b:4a:9c:f1:79:2d:24:c6:22:20:e8:8f:e1:c1:32:
                    02:11:af:3d:c6:d0:3c:57:cf:04:71:f9:12:35:59:
                    3b:c4:c0:05:43:65:d6:d9:55:8d:e8:77:7b:5c:1d:
                    d7:a8:89:7c:a3:fa:ba:50:73:d7:7f:a7:80:74:15:
                    7a:73:79:59:e5:ed:35:0c:7e:ff:da:a2:5a:85:75:
                    be:85:39:d5:db:a7:63:12:b9:79:9b:e7:f7:25:dc:
                    e7:39:19:8e:d5:1a:21:6e:66:59:e3:bb:88:1b:c8:
                    39:e9:85:05:e0:4d:dd:5e:fc:39:b4:72:4f:9b:17:
                    bc:df:dc:2f:ff:73:2d:92:bc:4d:82:79:4e:2d:1e:
                    35:50:c9:af:01:bd:cc:00:de:c4:0c:13:ab:dd:1c:
                    cc:d0:43:90:9c:be:83:da:12:de:76:65:5f:26:7c:
                    44:ca:cd:c4:f1:03:b2:d7:b8:70:5c:2e:23:00:f4:
                    c9:12:e6:3b:95:04:be:a8:90:0e:e1:af:74:a8:26:
                    6e:3a:21:fb:81:9e:1f:6c:4b:61:d5:12:15:c8:6a:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:E1:2A:7D:A0:24:1F:BE:77:9A:CE:C7:10:A1:C1:55:EE:51:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl

            X509v3 Authority Key Identifier:
                keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:a7:04:9f:44:b3:fd:67:a4:43:b5:ac:f5:25:81:8b:0b:
         20:2d:5c:97:d3:40:a6:b8:bc:fc:a6:15:34:eb:5a:40:98:04:
         7b:b2:89:ed:dd:dc:7a:2e:e0:38:e9:b3:92:cc:6d:68:90:b6:
         51:7f:0e:23:7b:cc:d0:ba:bf:66:d1:c4:65:ad:ee:5f:dd:84:
         d3:db:40:2a:75:b9:a6:e0:00:1e:66:a4:53:8b:1c:64:65:ec:
         ec:c1:a3:a7:e8:5c:e6:5d:a3:57:5f:af:8b:7a:ee:4b:cd:c8:
         e9:64:48:2b:f3:64:73:a9:27:ec:ce:3a:a1:59:74:26:a9:08:
         80:ac:0b:28:b8:a1:5b:04:7f:96:e9:f7:02:a5:f9:6c:e6:65:
         30:54:94:dd:7b:fb:3b:48:a8:22:b1:30:3e:f5:7b:bd:6b:ac:
         d4:09:87:01:4f:2e:6d:91:b7:4d:8e:95:a8:0b:4b:4f:14:68:
         7b:a6:12:01:ab:5b:20:e7:b2:0b:99:1c:9f:84:d7:f3:1f:da:
         a6:11:9c:d6:fe:26:c8:da:58:e1:23:ef:9f:b1:3a:c4:5e:9d:
         42:1c:cd:2e:59:df:a4:0d:de:27:92:87:3c:02:ab:5e:e2:10:
         36:bf:63:f0:66:8d:ad:79:9e:02:91:f9:74:21:db:b2:9e:70:
         8b:9f:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:51:58 2026 by rpki-client