Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/14fe8f30-8678-31d1-911f-18215dcdb7b3.roa
File:                     14fe8f30-8678-31d1-911f-18215dcdb7b3.roa (raw, json)
Hash identifier:          7pmH5Z1o9u0nhj/KmoRYtzxn9MUcHxnYwOhABNWCh5E=
Subject key identifier:   11:40:19:EF:46:9A:35:86:E5:E8:02:71:53:BA:D8:6B:71:9D:34:1C
Certificate issuer:       /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
Certificate serial:       010D0C9F4328584F549D4D6F85A5C08BD09A90C0
Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/14fe8f30-8678-31d1-911f-18215dcdb7b3.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     401815
IP address blocks:        2604:1760::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4d:6f:85:a5:c0:8b:d0:9a:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=ac77607d-ec68-4091-be60-48565dd7c5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:a4:57:1b:6c:10:3b:94:1e:eb:b5:48:b2:
                    b0:8e:1d:7a:5f:fe:d7:52:96:94:44:ce:18:6c:bd:
                    d9:10:a2:73:a5:d2:4f:b8:d0:e6:77:fc:74:71:af:
                    34:93:2a:39:15:84:31:c7:44:ff:40:86:9c:26:e4:
                    4e:21:14:c9:7a:03:95:56:4f:8d:de:45:1d:bc:b7:
                    43:59:37:32:4c:2e:48:40:1f:80:dd:dd:32:ca:fd:
                    d6:29:23:0c:f1:06:03:05:28:a3:9e:5a:9e:44:77:
                    33:b1:ad:ae:ea:b3:17:78:c2:79:86:69:72:da:de:
                    6a:aa:96:ab:d9:62:d2:29:a6:c9:4d:5a:e9:fe:bf:
                    5e:8a:a6:9e:72:17:cc:5f:27:9a:28:d9:39:aa:cf:
                    61:19:58:80:80:7d:56:56:e5:23:dc:c5:9a:d9:78:
                    ad:02:d3:b6:d2:bf:c5:42:fe:b9:78:f0:2f:f6:f6:
                    07:a8:d4:c5:30:d5:58:c1:24:01:6c:94:bc:4d:f0:
                    00:02:96:3d:c0:93:ff:ca:1f:52:eb:5e:24:6b:d6:
                    91:b2:90:a0:13:27:a5:63:1b:8e:5b:e1:6c:8b:76:
                    74:d9:67:52:06:4e:e7:ba:14:ba:0a:ab:8b:7b:68:
                    7a:b4:65:37:ae:50:32:27:b6:51:fd:51:67:f8:bf:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:19:EF:46:9A:35:86:E5:E8:02:71:53:BA:D8:6B:71:9D:34:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/14fe8f30-8678-31d1-911f-18215dcdb7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1760::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:41:42:c5:df:59:26:c8:2c:87:7f:3e:a0:d9:75:a7:df:27:
         4d:74:fd:58:1b:bd:97:5f:24:c6:30:98:7d:8d:6f:18:28:1d:
         00:96:a5:51:46:ae:1e:13:1a:46:ec:2b:a6:b5:df:8e:97:33:
         57:a1:3b:3d:0d:7a:03:e0:23:36:e0:67:67:09:fc:ed:56:f5:
         e4:f6:46:f7:c7:42:7d:c0:ec:c0:9b:0e:6d:2f:ef:6c:34:06:
         a9:aa:13:33:12:1b:d4:99:72:a8:3e:c3:83:ab:e6:33:22:66:
         07:cb:5d:ab:fa:aa:62:73:e8:c4:6e:fb:ea:fd:d0:0d:b5:67:
         f3:bc:91:ae:2a:23:e7:b5:96:e1:f7:31:3d:50:1b:d9:f3:1c:
         e4:73:58:25:cd:76:1f:dd:cd:dc:c1:93:b9:d8:41:fe:d4:e7:
         db:a1:b3:e2:52:c4:3b:20:56:26:c2:f5:e3:8f:a0:27:d6:a5:
         7e:92:ec:2b:c0:c6:43:d5:eb:f8:09:87:c7:13:49:2a:34:53:
         2e:43:d4:7b:73:2a:1f:f5:94:0c:0e:e1:56:10:eb:9b:47:94:
         7b:2d:35:95:94:4d:d5:d5:55:28:a2:cf:df:d9:b4:6e:5e:a9:
         8d:b2:c3:fa:8d:5d:a9:9d:50:16:c0:ee:56:4b:2c:dc:f0:6c:
         70:ee:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:54:14 2026 by rpki-client