Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac8169d-1bb6-35a6-9326-48c13633c078.roa
File:                     3ac8169d-1bb6-35a6-9326-48c13633c078.roa (raw, json)
Hash identifier:          rYX5tJOG0KLC8WY7d32bvP4oYUZvKuZvXp+BbWApL04=
Subject key identifier:   A7:35:D0:D3:00:FA:D5:B2:9E:CE:0B:2A:28:C1:42:FE:A3:4D:B0:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA83C8E805E6C08F1A940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac8169d-1bb6-35a6-9326-48c13633c078.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:4220::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a8:3c:8e:80:5e:6c:08:f1:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=2477c732-b50f-4fed-ab5c-ce1dbd1d1d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:56:82:f9:3f:bd:3d:52:43:8a:ac:83:47:
                    af:12:ac:24:ac:a6:00:70:3b:c4:f2:25:25:aa:75:
                    fd:8a:13:fe:9a:9d:c4:7a:60:df:73:26:f5:fe:ee:
                    84:97:89:6f:2c:e5:a9:cc:97:a8:37:fa:77:3b:98:
                    b2:6c:6c:e7:67:51:4e:46:2d:7d:cd:7a:48:2b:8f:
                    15:5c:ba:12:c7:1f:13:f5:bb:7a:d1:0f:d6:68:8a:
                    de:84:fe:fe:af:1d:0b:15:7e:c4:58:18:ac:2a:bd:
                    bc:ea:c0:d4:cd:1f:00:94:04:44:19:bd:b7:e7:e1:
                    ee:2d:50:09:48:6e:d9:8e:5f:a4:7b:39:e2:b1:42:
                    33:ea:88:e2:fa:c5:10:79:b3:18:b6:f0:86:d1:78:
                    a5:f4:42:a8:65:53:b0:fd:d5:f5:2e:bb:18:34:3d:
                    c9:31:b7:a7:ab:ba:5b:37:64:de:2c:80:d5:13:70:
                    06:43:1c:4c:87:4a:94:d7:22:b1:b7:3f:ab:d9:8c:
                    8a:1f:c5:02:ab:dc:bc:53:93:49:fb:90:02:24:64:
                    ae:d2:62:91:4f:a1:fb:79:2c:fc:56:c5:fe:c9:c5:
                    52:ed:f0:58:ea:dc:64:54:67:f5:9f:46:a9:d8:b3:
                    20:1d:bd:03:25:ca:d8:4c:29:bc:55:d0:68:58:3a:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:D0:D3:00:FA:D5:B2:9E:CE:0B:2A:28:C1:42:FE:A3:4D:B0:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac8169d-1bb6-35a6-9326-48c13633c078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4220::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:33:bb:2a:92:c1:3a:79:5e:d8:0c:5e:b2:63:81:f5:6a:9b:
         4f:c5:c5:f3:0c:7a:01:28:a9:0a:ab:4b:e2:52:3f:b4:e1:a6:
         39:ee:48:1d:11:6a:77:71:ab:73:9a:f1:1f:af:0f:bb:73:98:
         93:30:ff:43:0c:d0:3a:da:fb:e1:cf:ac:bb:27:24:1c:4d:70:
         3d:4e:80:54:ec:03:30:76:62:ea:a7:60:a6:ac:29:3b:99:68:
         d4:27:b5:b5:6b:8f:cc:74:f1:d9:74:7b:42:1d:cb:8d:b2:c6:
         ca:9d:a0:8a:e9:10:d8:30:74:83:5a:79:55:de:99:5c:b5:11:
         74:cc:9d:0b:bd:57:bb:ff:36:ae:89:70:be:12:44:5e:16:9c:
         ac:d9:a9:70:b3:05:ad:2a:81:e5:2c:9c:d8:6b:a0:52:43:df:
         bd:63:5e:7d:1d:2e:8a:00:88:7e:97:1a:a3:d7:a1:98:06:56:
         32:e8:ba:4f:6b:f9:6c:ef:c4:66:a5:58:49:d3:1d:93:01:28:
         e0:41:f2:8b:76:d3:24:08:93:82:e6:89:12:cd:63:0c:da:d2:
         ca:1a:93:7e:74:e5:e2:62:f1:8a:0d:72:07:41:a5:63:7a:7b:
         ee:f0:65:3a:7a:a0:88:96:2c:40:3c:de:13:1a:81:96:62:8b:
         8c:22:3a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:36:48 2026 by rpki-client