Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa
File:                     24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa (raw, json)
Hash identifier:          9wVJJBefoY8LALKBHTPJDbnlC1AreHNUCVaeqzOY3cI=
Subject key identifier:   3C:28:0E:AB:09:DF:CD:2D:A3:7E:C9:FF:4D:C1:23:D0:D2:41:17:00
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F49758C9C17752B6B162D3280
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2734
IP address blocks:        2605:6c00:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:8c:9c:17:75:2b:6b:16:2d:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3a9b5a7f-537e-4699-a994-65786f1ad38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:41:25:f5:22:ce:1a:c4:4c:59:c3:7b:39:
                    8d:fb:ef:9f:aa:b6:6b:f9:df:92:9c:21:45:1c:d6:
                    49:93:36:47:82:a5:15:ab:bc:1c:e4:ed:63:02:51:
                    c6:30:33:6a:e9:a8:e3:5e:c2:25:26:fe:61:b6:6f:
                    bf:0a:f7:87:a2:99:ec:e0:f0:66:f2:c7:dc:e2:a7:
                    44:ec:19:fd:1f:80:3f:95:21:0d:59:9b:87:1c:05:
                    dc:c7:de:d9:c0:fe:ef:8d:e3:9e:65:1d:3f:6f:db:
                    af:73:bc:f7:6e:4e:e8:cf:0a:a6:ec:0c:59:1b:61:
                    8f:e7:03:e3:7f:20:af:74:92:91:45:a2:75:d1:14:
                    28:77:32:11:d1:85:41:59:88:f6:44:84:d4:da:91:
                    ef:21:01:32:1b:f2:54:28:ad:51:f1:05:7d:38:2f:
                    22:eb:f5:5c:f8:c1:98:c9:0c:ba:2c:9c:b6:52:36:
                    39:d3:9a:09:cb:5d:3f:0f:0f:3f:92:07:f7:9c:5f:
                    fb:c5:f5:2c:e1:de:89:61:2b:3a:72:9c:86:8f:18:
                    95:6b:73:e9:60:4c:16:50:ab:8f:52:38:f6:09:5f:
                    e6:d1:dc:2c:42:5f:8f:01:01:e8:60:b9:78:e3:c5:
                    d0:26:a6:4b:0a:4b:b2:ef:67:77:41:dc:36:a2:58:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:28:0E:AB:09:DF:CD:2D:A3:7E:C9:FF:4D:C1:23:D0:D2:41:17:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/24f2fc0b-8c2f-3913-ba1c-9797df442aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:de:60:19:64:a5:ad:10:6e:e0:6a:3b:f6:66:da:0f:7c:8b:
         f9:90:64:7e:5b:f3:b9:2a:9b:2e:94:26:99:66:f5:29:db:b2:
         63:30:cf:1a:88:99:95:7c:ce:4a:19:d5:85:0c:a5:8b:25:f6:
         fe:ec:ad:12:82:e8:4b:37:ee:57:5f:fe:0e:d0:14:f1:3c:d8:
         bf:5b:47:58:2c:d2:ed:fe:f4:32:4b:77:49:36:28:c0:a7:38:
         76:eb:02:a6:a9:bc:31:c8:24:0f:7d:b4:3d:1c:da:3c:2e:7f:
         49:bc:29:9e:8a:7e:89:71:cf:42:ec:8e:40:df:fb:4d:43:52:
         3d:f4:4e:36:3c:0a:90:fd:b8:cf:35:a4:65:72:bf:02:18:ba:
         25:06:54:9f:05:4c:19:6d:ec:e4:84:ed:72:55:9a:f2:88:68:
         a7:b3:2e:42:c7:1c:43:2f:2b:f9:d7:0a:fa:b9:a6:31:4e:dc:
         8d:03:9b:10:90:b3:45:93:cd:6a:10:f0:24:96:23:c1:96:93:
         cd:30:e8:25:09:ca:aa:4e:bb:22:86:8e:b6:3a:62:8e:33:4a:
         fe:fd:82:5b:11:06:2d:f3:e0:ee:f1:3e:d5:ed:df:aa:ef:58:
         52:30:75:6f:43:17:51:17:72:fe:ef:79:5a:67:b8:ea:66:b3:
         39:e0:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:53:26 2026 by rpki-client