Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e76b39ac-8023-3a2b-82d4-95f4d4d071c1.roa
File:                     e76b39ac-8023-3a2b-82d4-95f4d4d071c1.roa (raw, json)
Hash identifier:          yPh/XXGOca5eOifhi+jWy+XO1WrwteYM9d5YnAsMxvE=
Subject key identifier:   E3:2B:D6:27:12:C1:A5:A7:CE:7B:17:9F:78:58:57:3D:DE:2B:6D:46
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584F71ED95DE15321DC8130A2600
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e76b39ac-8023-3a2b-82d4-95f4d4d071c1.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        2605:84c0:cc2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:95:de:15:32:1d:c8:13:0a:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=6f47f353-e802-4383-9512-d1d43c0f681b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:4d:ed:be:9d:ab:74:13:40:9d:1a:ee:97:
                    97:5b:48:26:ec:3c:63:62:53:fe:84:4a:ba:79:57:
                    3a:4b:6b:31:85:ad:bb:cb:87:84:c4:94:02:8d:4f:
                    20:35:9c:da:7f:73:0a:fe:21:d4:2b:71:28:a8:ee:
                    c9:76:06:a0:33:0e:9d:f9:c5:95:e7:de:06:3f:71:
                    26:b8:d7:12:13:a2:f0:05:29:25:74:3e:41:92:49:
                    d6:b8:e1:eb:d1:fb:c0:81:5f:a9:8c:e6:f4:f5:e1:
                    e4:9f:69:5b:d6:77:bf:7a:b3:e3:5e:de:08:18:63:
                    36:d5:ca:4a:1d:1f:2c:31:c1:15:3b:3f:4d:fd:77:
                    39:f4:ca:c6:64:b1:96:57:a7:03:e3:2f:7b:6d:f0:
                    cf:d0:5c:96:5a:9a:26:eb:9b:f4:e3:4b:45:37:b5:
                    37:6f:48:25:7e:68:f4:83:6f:9b:4c:38:c2:8c:8a:
                    b3:40:98:b5:68:a4:39:81:85:79:39:cf:1f:c9:09:
                    86:78:b1:74:22:18:fe:fc:01:38:53:ec:3f:39:49:
                    53:00:78:dd:d5:28:b8:02:9d:fd:5b:56:3e:12:28:
                    bd:5a:37:5e:28:02:b9:94:6c:da:9e:64:34:0c:ee:
                    9b:38:19:84:d3:6e:b8:38:57:6f:7e:9e:ab:66:5e:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:D6:27:12:C1:A5:A7:CE:7B:17:9F:78:58:57:3D:DE:2B:6D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e76b39ac-8023-3a2b-82d4-95f4d4d071c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ee:af:52:ba:20:0c:e5:c7:9f:33:3a:e2:f6:d6:ba:cd:cb:
         cd:96:72:20:2a:bc:af:a5:f9:b4:ae:55:4d:0e:fb:12:66:13:
         04:7b:58:0f:31:16:3e:ef:02:9f:65:14:9c:72:f8:72:c4:b3:
         05:06:2e:05:0e:84:84:76:7e:4d:00:89:04:95:fb:3a:e9:5c:
         66:10:7f:9a:27:1c:a0:d7:bb:93:4d:3e:4f:e6:30:d8:16:37:
         58:12:ae:1a:e9:33:bb:f4:0a:9a:85:bb:48:31:9f:4a:97:83:
         28:1c:bb:f8:c4:44:74:b0:93:e4:10:89:43:16:30:d1:10:61:
         3e:44:dd:30:3f:47:36:84:57:68:d4:88:a9:a8:54:11:39:7a:
         40:83:96:9f:b0:70:e0:e0:0a:65:77:a1:53:83:7a:90:d3:c0:
         ac:28:eb:91:d0:3a:f4:79:34:5a:32:21:2c:62:a3:49:c1:6a:
         8d:68:57:da:e8:4c:fc:00:8a:7c:0b:96:e0:1d:9d:fa:4e:0d:
         ec:de:67:f8:ac:f0:18:6a:bd:b1:dc:aa:22:9a:a1:4a:cc:82:
         fd:bf:d6:e8:66:eb:8f:da:32:bb:5b:a8:c9:2b:39:4f:a3:10:
         df:b0:e6:01:c4:01:3c:11:bb:8f:f0:ed:a5:cf:ce:72:67:34:
         93:4e:30:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:01:57 2026 by rpki-client