Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa
File:                     3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa (raw, json)
Hash identifier:          dY3X1AxHQIhnEU1TRtaxOZWZ8Y6T3y3vImB9bpG0k/g=
Subject key identifier:   77:87:0D:5A:B7:F8:8A:F8:DF:E3:37:85:EF:54:84:87:C6:64:59:75
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F4328584F6292E074E08475BE5FCA1240
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     160
IP address blocks:        2605:9a00:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e0:74:e0:84:75:be:5f:ca:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=24771c01-37aa-4ef1-9b98-98fb1eea6f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:08:73:d1:61:08:6a:50:95:85:0f:60:b6:
                    b1:ef:95:9a:21:ab:19:46:38:3b:b9:d1:af:6f:9d:
                    25:c2:ce:ff:c0:e0:71:5f:bf:01:99:82:da:af:aa:
                    e0:cb:c6:a2:eb:6f:8b:2a:bf:d6:d1:6f:21:9f:dd:
                    9e:22:b6:a4:e2:f4:c8:e5:aa:1c:4c:d7:9d:54:27:
                    a1:ad:fa:55:b0:38:a6:76:49:8c:10:34:3c:ed:84:
                    30:f8:bf:30:e5:ce:a6:73:30:60:60:71:76:a6:65:
                    eb:0a:02:2b:64:c9:6e:33:f7:cc:f2:c0:a3:1f:bc:
                    c8:fd:95:e7:40:af:76:24:be:68:a2:5d:03:a0:63:
                    d4:74:65:ad:21:09:51:63:cc:b3:07:c3:68:a1:da:
                    13:b8:15:f5:73:bf:a5:43:6b:30:69:31:ce:83:9b:
                    f0:8c:0e:45:96:6f:3f:32:79:63:86:7a:b6:38:16:
                    57:0c:3d:2d:4a:58:56:9a:e5:a1:be:10:0e:03:f2:
                    ed:11:88:f0:5d:63:53:69:34:ba:ae:d7:8e:e0:21:
                    3c:7a:2b:c0:56:8c:43:68:53:b3:9c:51:de:87:f1:
                    10:4f:67:a1:46:2e:bc:fe:46:49:b0:f1:44:23:b0:
                    fc:f3:08:fc:30:f0:cf:12:7a:45:22:b3:b6:ea:83:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:87:0D:5A:B7:F8:8A:F8:DF:E3:37:85:EF:54:84:87:C6:64:59:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a00:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:b5:cd:fb:71:36:3f:5c:55:2d:54:ae:70:18:92:c2:38:
         64:02:cd:50:e6:ff:e4:63:4e:af:11:af:ab:67:d4:dc:15:96:
         9a:d7:c8:0b:00:1f:ff:e6:05:2a:61:56:21:15:db:5e:0c:35:
         e8:e6:3d:3c:16:1c:99:de:43:a7:23:6e:cf:f4:78:51:95:c8:
         57:d6:fb:d9:9b:d9:83:39:d1:a1:97:9e:5d:22:5f:5a:b7:a5:
         3e:dc:3d:cd:63:64:c1:d6:d1:08:dc:dd:b4:a6:5e:6f:b1:68:
         76:10:38:e8:80:39:7f:54:aa:68:0e:41:66:70:35:b4:01:0a:
         0c:c6:a9:ea:80:b1:d0:14:e4:07:6f:38:4f:d2:26:d9:38:fc:
         2c:f8:fd:a1:db:0f:37:21:1c:c9:6e:0c:60:44:3c:cf:a7:1f:
         f3:3a:3a:51:50:2f:68:9c:fe:52:64:5e:07:54:6d:69:3e:71:
         e9:35:5c:81:53:82:68:e2:1c:2f:5b:56:c2:fb:5d:9b:70:bf:
         48:35:cf:bf:7f:b0:92:47:af:61:9f:36:91:8d:82:ba:49:e7:
         30:ba:89:8b:d3:d5:be:37:28:b2:c6:02:21:89:00:a2:e2:22:
         6d:a6:dc:d4:eb:65:60:44:be:92:6c:84:83:4a:cc:70:c1:f3:
         ed:43:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:43 2026 by rpki-client