Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56/d2b9b067-55b1-3b34-b486-24ea47842eb9.roa
File:                     d2b9b067-55b1-3b34-b486-24ea47842eb9.roa (raw, json)
Hash identifier:          P9wzTYCU6VtXjVXgVXLXiLiAVAErelBQfs8ouHqP/aM=
Subject key identifier:   4A:DA:86:41:75:10:AF:EC:18:CD:59:89:E7:89:B9:AE:C0:CD:BB:26
Certificate issuer:       /CN=9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56
Certificate serial:       010D0C9F4328584ED4325CC3CFDCAF15AE48C580
Authority key identifier: 72:12:21:82:4B:11:2B:5A:06:9D:CD:74:EE:CD:12:1C:12:97:60:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56/d2b9b067-55b1-3b34-b486-24ea47842eb9.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     27176
IP address blocks:        2605:aa80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5c:c3:cf:dc:af:15:ae:48:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=4f7cd1c7-6e6d-4634-8710-016e1b161ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:bf:bf:04:31:89:d1:69:a8:bb:b2:d2:40:
                    f4:69:09:71:3d:02:01:23:ba:01:e9:14:43:06:fd:
                    15:40:26:df:12:7f:d3:f5:96:06:d7:84:bb:08:66:
                    3e:5b:e9:d8:d7:dd:bf:39:ab:82:6c:ac:01:b9:ce:
                    e9:e0:1a:8b:1e:6f:b1:a1:d0:ba:9a:ba:eb:dc:f1:
                    5d:46:5e:cb:d8:b5:7d:07:27:13:01:7d:aa:b1:89:
                    62:e0:39:27:8a:5c:30:0f:74:be:4f:62:49:a5:90:
                    4a:c1:3c:c1:6a:e4:0d:20:30:0b:43:30:4f:2a:6a:
                    a0:37:40:5e:35:40:a7:80:6d:c5:54:9b:76:ca:a1:
                    91:06:83:44:fa:4e:14:ba:db:dd:79:e8:3a:70:cf:
                    14:d2:bc:8a:38:a5:61:76:cd:f2:91:d4:af:a0:77:
                    f1:32:24:d9:a0:5b:7a:7a:78:86:85:77:62:0e:c2:
                    82:24:a1:e2:b9:ff:7b:35:21:c1:23:8a:2f:af:6c:
                    38:9c:c8:f7:b0:e4:8f:e6:8e:f9:62:2b:10:ba:51:
                    33:ca:be:f2:4d:89:11:7f:4a:e1:b5:ef:f0:b2:07:
                    d9:a0:c3:75:0b:a7:b6:4d:27:c7:e5:88:5e:32:90:
                    4d:2f:31:07:b3:12:d5:35:3c:31:f4:53:f9:47:1b:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DA:86:41:75:10:AF:EC:18:CD:59:89:E7:89:B9:AE:C0:CD:BB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56/d2b9b067-55b1-3b34-b486-24ea47842eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56.crl

            X509v3 Authority Key Identifier:
                keyid:72:12:21:82:4B:11:2B:5A:06:9D:CD:74:EE:CD:12:1C:12:97:60:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a73ed1a-8fd1-41c6-99ff-e0adf58d9a56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:aa80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:65:79:6e:c1:cf:a1:71:76:05:1d:37:c8:c1:a0:c1:9e:88:
         2f:47:96:70:b1:48:9a:58:c0:e7:21:ab:9f:89:68:4b:d4:dd:
         49:d9:63:9e:1f:dc:95:c1:63:83:86:21:c8:0a:73:ad:e3:15:
         e7:ca:f5:87:f9:74:1b:ff:87:c5:4a:06:fa:6c:df:f6:d7:bb:
         df:3b:bf:2e:02:d0:7f:f4:6d:69:b3:61:52:85:f6:b1:a1:8f:
         a9:0a:6e:29:ac:1a:ad:0f:cd:67:ab:3b:0d:10:ff:da:ab:b2:
         db:7d:71:49:25:46:40:01:b0:cb:ab:1f:40:f9:dd:7f:8e:1e:
         d9:d8:b2:f4:e7:05:51:16:d8:85:cc:5d:19:09:8f:7f:80:bb:
         3a:6c:4f:32:01:59:e3:1f:a8:af:7f:1a:90:f2:dc:d0:1b:08:
         c1:8a:61:62:69:5c:e4:7a:fe:ce:8d:64:79:e3:5c:d6:e5:bb:
         83:3c:87:e7:a3:8c:62:ac:1c:db:02:47:17:4b:1c:c7:65:7d:
         8f:19:83:c8:c5:af:ae:7b:4b:0d:67:3e:7b:45:ec:2c:4c:7e:
         d5:53:9b:e1:01:1d:68:68:81:2c:cd:21:1d:88:1f:01:ad:e3:
         7e:06:41:68:58:dd:7e:ed:0d:08:06:8b:d2:96:9b:58:43:0a:
         2f:3a:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:47 2026 by rpki-client