Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
File:                     1a640b8d-2f75-3f95-bc47-eca644a37c87.roa (raw, json)
Hash identifier:          q1SiWTJ0LHpfE7ujzyj9CpyGkSz6k8pqsINUX9ctl0Q=
Subject key identifier:   F1:3D:21:87:C4:4D:39:A1:74:E3:23:0D:09:83:E3:1A:E8:8C:7B:8C
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584F549D64FDE1B404E94E516D80
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     394354
IP address blocks:        2620:10a:8017::/48 maxlen: 48
                          2620:10a:801a::/48 maxlen: 48
                          2620:10a:809a::/48 maxlen: 48
                          2620:10a:80e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:64:fd:e1:b4:04:e9:4e:51:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=21e3b600-3de2-49a6-bc43-731f5c3d8122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:23:1a:a4:74:d7:e8:16:ea:b8:c0:24:83:
                    ee:a9:0b:c7:1b:87:00:ed:2d:ab:b6:0f:5a:6a:62:
                    db:f2:c0:4e:9c:48:fe:dd:b8:ca:22:56:54:31:9d:
                    77:38:31:57:6a:ea:63:c3:2a:3a:a3:48:32:c9:7d:
                    46:b3:0f:ae:5e:d2:a6:50:4b:f3:fa:c4:dd:ba:e4:
                    18:44:d0:21:b6:ea:7b:91:ea:bc:01:d1:c5:dd:42:
                    11:0b:1e:f1:f0:7c:6e:71:db:06:36:ea:ea:fa:68:
                    c9:05:0b:70:50:12:aa:3d:3c:63:de:dc:b1:90:c7:
                    9b:7d:a2:7c:77:03:6a:6d:cd:3e:2d:56:2f:20:d9:
                    7d:78:c6:16:69:76:a5:04:7c:24:22:c7:8a:5c:5e:
                    2b:a8:03:56:30:af:32:e0:29:97:b2:d2:be:55:00:
                    34:09:1c:c0:93:f6:21:c5:f3:5c:cb:3f:63:25:e7:
                    d3:1c:4d:22:f0:46:0c:08:df:0b:93:cd:df:bd:b9:
                    d2:34:28:81:e4:e0:7d:49:ed:98:6b:cb:63:5f:19:
                    1e:e5:9e:6d:7f:50:a3:79:88:23:ad:3e:22:e0:9f:
                    d6:8e:e0:b6:f0:f9:40:41:13:96:4a:7c:89:8e:69:
                    60:e7:52:73:74:d5:d9:d1:93:48:30:81:cd:c0:28:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:21:87:C4:4D:39:A1:74:E3:23:0D:09:83:E3:1A:E8:8C:7B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8017::/48
                  2620:10a:801a::/48
                  2620:10a:809a::/48
                  2620:10a:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:9d:d1:e8:05:a7:51:17:9b:0d:7b:0c:ed:cf:f1:1f:69:
         26:07:b1:9e:5b:62:52:96:24:c8:4e:63:74:f0:d2:fa:a5:e6:
         c4:ad:2d:99:61:aa:db:06:1a:84:03:c7:73:b0:75:33:48:a2:
         0e:74:24:61:ac:6f:f4:aa:f1:a0:eb:3c:b6:f1:17:92:45:2a:
         27:a4:cb:79:7c:ae:2b:ea:e1:c4:82:82:20:7c:87:51:0e:bf:
         d8:4d:f6:23:85:4d:4c:10:ba:fa:4b:22:e8:97:ee:d0:13:a2:
         c8:13:a0:d0:2e:97:3a:9a:94:07:19:9d:94:0c:7b:15:ae:54:
         41:2e:a2:1e:5c:ec:bd:6b:98:29:71:e4:ec:29:9b:9e:5c:b9:
         92:ab:93:14:43:c2:17:05:f7:3f:ac:9b:a0:4a:a3:bd:58:11:
         f3:94:d8:50:e0:8c:ff:04:39:9a:26:39:3e:06:11:fb:e5:df:
         92:b4:e8:b7:c7:8c:af:4b:56:5c:4a:4b:d7:ca:05:90:2b:5b:
         51:e9:7a:8c:bf:e1:26:e8:06:7c:05:84:1f:0f:40:02:23:c3:
         ea:b1:ef:59:33:ac:5a:2d:d4:0e:a2:d8:30:f4:34:48:4a:25:
         ae:35:9c:12:4f:d2:bb:d2:38:9c:7d:c1:ae:63:c2:bb:ed:0a:
         f5:ed:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:12:24 2026 by rpki-client