Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/dc5565a2-68d7-3ce9-82fa-f75a736c8872.roa
File:                     dc5565a2-68d7-3ce9-82fa-f75a736c8872.roa (raw, json)
Hash identifier:          908h7sBfuCh4b3VVnu37nMBtOynHEFSDI8crbav96+Y=
Subject key identifier:   99:2C:99:33:65:E6:E4:2B:A8:EF:AE:26:27:A4:5E:16:99:FA:04:52
Certificate issuer:       /CN=53c68106-39f2-412b-bf7e-089bbe80fc42
Certificate serial:       010D0C9F4328584F4973301AFEA0BA0A7F008990
Authority key identifier: D5:17:74:F1:B6:E6:63:80:0D:59:92:75:35:A3:51:9F:5B:B5:D2:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/dc5565a2-68d7-3ce9-82fa-f75a736c8872.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40676
IP address blocks:        2604:6600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/53c68106-39f2-412b-bf7e-089bbe80fc42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/53c68106-39f2-412b-bf7e-089bbe80fc42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:30:1a:fe:a0:ba:0a:7f:00:89:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c68106-39f2-412b-bf7e-089bbe80fc42
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e8da9e65-1b16-4162-a560-f7640a54f20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:8a:8d:c8:7b:bd:b4:00:0b:29:49:ea:86:
                    e2:57:0b:62:58:f3:73:16:33:f1:dc:8d:dc:97:9e:
                    b5:b9:78:cc:54:c1:37:33:ec:06:16:f5:9d:e5:5e:
                    09:38:d4:52:4e:21:e2:cc:1c:82:26:8c:ff:e7:27:
                    ee:cb:66:6f:bf:16:bb:78:30:10:bd:71:a2:66:d5:
                    2a:bc:b1:e7:67:b6:df:90:12:a1:f5:45:5c:c4:9a:
                    1c:be:4f:a8:d5:aa:dc:a8:47:fd:51:52:f9:07:c6:
                    8f:e9:71:34:09:45:60:5d:3f:bb:c0:6e:be:6d:00:
                    0a:8f:95:e4:81:88:91:93:69:6d:1d:d3:db:41:4a:
                    86:d5:4f:16:05:a7:77:8a:5b:16:80:47:19:96:30:
                    ad:a5:03:a8:88:95:6e:f2:2d:d6:7d:90:c9:81:fe:
                    13:6c:05:18:6d:9b:12:b9:a5:6a:fb:70:57:01:c9:
                    0d:1a:81:48:dd:69:cd:fe:13:94:42:e4:24:69:83:
                    c0:0f:4a:27:8e:6e:ea:03:3b:09:fe:c6:b4:cc:e6:
                    8c:00:5d:79:9c:d1:1c:f5:13:0b:af:6b:6e:c9:84:
                    18:4f:41:e9:28:40:ea:85:dd:3c:bb:68:4b:43:05:
                    f3:fc:3f:ea:67:60:13:7b:10:e2:29:8e:15:39:a0:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:99:33:65:E6:E4:2B:A8:EF:AE:26:27:A4:5E:16:99:FA:04:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/dc5565a2-68d7-3ce9-82fa-f75a736c8872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/53c68106-39f2-412b-bf7e-089bbe80fc42.crl

            X509v3 Authority Key Identifier:
                keyid:D5:17:74:F1:B6:E6:63:80:0D:59:92:75:35:A3:51:9F:5B:B5:D2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:be:13:ca:a5:34:32:92:38:ea:bc:c7:7c:73:28:f4:f1:c3:
         94:ea:ec:41:de:e2:06:83:12:ae:0f:12:c0:cc:44:e5:25:6e:
         d5:90:ab:87:3a:6a:53:cc:6f:ce:d9:96:05:32:8d:3c:45:17:
         54:51:6d:e5:87:17:28:66:27:4a:63:52:14:43:cb:f2:08:8d:
         b5:30:b4:13:80:59:42:dd:23:4d:9c:b2:6b:4a:5d:78:4f:5e:
         47:55:1b:98:66:d3:b2:8a:8c:de:88:50:37:e7:52:26:e9:5a:
         dd:0c:00:88:70:43:93:a1:1e:3f:0d:0c:63:5f:00:2a:f5:00:
         57:37:0d:97:3c:06:77:a4:e8:3d:58:0f:33:59:fd:20:95:b4:
         e2:e0:cd:81:f7:85:23:ac:78:fb:82:a1:17:19:5d:ab:81:8a:
         76:a0:0b:a2:7b:8f:28:d4:6d:56:b7:08:30:9c:0d:04:ee:a7:
         bb:5d:98:7b:71:8c:a0:1a:27:39:d8:62:8c:a5:4e:97:24:ad:
         72:5a:fe:7f:dd:8b:3b:bb:ec:18:8f:e1:a9:dc:c5:c8:ca:dd:
         71:53:5e:7d:af:2c:81:64:8f:31:01:2d:33:26:76:8f:85:9d:
         3c:92:74:29:3f:a3:17:38:9d:a1:e7:b7:f0:06:2d:16:9e:af:
         9d:33:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:17 2026 by rpki-client