Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3769f206-20bf-3a22-abf2-d969401175d2.roa
File:                     3769f206-20bf-3a22-abf2-d969401175d2.roa (raw, json)
Hash identifier:          96m0tRHf9Ux68B6NDqsrsQPf9+VQpKJGcn4JbvTMGIo=
Subject key identifier:   2C:15:CD:36:C6:07:D7:67:59:64:5E:1C:AF:36:2D:41:D6:40:F7:61
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584F093CD8F952BDFF4ACE3CAA80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3769f206-20bf-3a22-abf2-d969401175d2.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     3491
IP address blocks:        2606:9dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d8:f9:52:bd:ff:4a:ce:3c:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=fd21f497-69c4-41f9-858f-668a6baba461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:d2:ef:34:ce:0c:12:d1:2e:b9:a5:85:25:
                    d3:6d:20:72:dd:88:0f:12:2b:97:57:8b:3d:93:6b:
                    58:20:ec:11:ff:3d:73:cc:c7:4d:5d:4d:61:84:66:
                    8e:5c:a3:5d:77:5f:03:04:36:a9:e4:74:bd:c7:6a:
                    16:4e:d5:de:1d:5a:9b:2b:16:df:5c:8c:c8:5d:02:
                    6f:23:f0:5f:f0:0a:70:b8:03:ac:e0:15:24:08:99:
                    b1:46:ae:69:67:13:64:1c:d0:2c:b8:ef:d5:36:7c:
                    ab:05:1c:29:27:cc:cd:21:75:25:ee:75:9a:7b:a1:
                    74:51:2a:11:11:0a:cc:ff:20:99:87:ae:16:2c:0e:
                    2b:a6:f8:4c:5c:bd:69:43:fc:38:89:30:00:d9:9c:
                    86:b2:e8:a3:9d:4b:cc:99:02:d1:ab:32:a9:18:4e:
                    f7:06:14:1b:7c:fe:d6:9b:13:f3:75:f3:96:1e:d2:
                    ae:40:6d:18:3c:46:36:b5:44:09:46:89:c0:08:be:
                    cf:f1:0f:ca:d5:fd:82:0d:e2:45:61:e7:df:82:df:
                    19:c8:a8:db:d8:be:47:06:f7:ec:a4:30:29:dc:93:
                    2f:50:9f:b4:1c:94:a2:7d:78:ee:e8:4e:84:5a:d3:
                    6a:4d:c9:9c:ff:1e:c1:57:25:b4:41:aa:7d:b2:03:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:CD:36:C6:07:D7:67:59:64:5E:1C:AF:36:2D:41:D6:40:F7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3769f206-20bf-3a22-abf2-d969401175d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:56:5c:94:6e:e8:32:69:a1:64:a6:36:da:f5:6b:b4:17:3f:
         80:ea:b0:28:44:cd:41:79:2c:29:0f:3d:d7:8e:c1:03:d3:1e:
         22:a4:bf:bd:75:36:19:2f:23:35:95:a0:79:e4:1a:6d:e1:ee:
         76:0f:de:40:6b:0b:51:5d:4a:43:2b:c9:71:eb:4d:d1:31:d5:
         20:97:7b:7b:ac:4e:0d:f8:a2:f9:52:c8:65:88:c2:88:6e:71:
         00:53:00:63:88:70:96:59:6d:e8:6e:8d:f0:9e:8a:d3:25:6a:
         d2:94:1d:a7:9c:82:26:2a:4e:66:d6:15:56:4d:ff:b5:f1:f3:
         b3:ef:f2:e6:f4:b9:56:b4:8f:bf:77:db:d3:fd:66:d9:99:ea:
         bc:80:b1:b1:8d:ac:60:1c:35:ea:1a:11:ca:5c:1b:2f:a6:09:
         5a:06:cc:de:88:c6:7b:ac:21:c0:1d:ac:62:97:3e:64:5d:7c:
         8d:77:6a:cb:6e:29:9e:55:81:e2:93:26:e5:46:3a:fd:c4:05:
         c4:17:20:93:96:81:a2:9a:72:07:d1:9b:38:84:8c:58:e5:e7:
         5a:56:cb:c8:7c:70:03:20:72:61:f0:3a:61:31:fc:b6:6c:10:
         72:d2:98:f4:22:11:cd:d9:99:ce:ef:6a:af:9d:3d:ce:9e:7b:
         57:2d:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:52:49 2026 by rpki-client