Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/4f557bf4-a202-3b14-bef1-7595ebc92550.roa
File:                     4f557bf4-a202-3b14-bef1-7595ebc92550.roa (raw, json)
Hash identifier:          CcNwaoi88DQwu1fDQleIxwRvlnTF07A5OIbgYfW8UCc=
Subject key identifier:   29:8C:F2:08:CB:9B:A8:D5:FE:3D:22:F4:CC:6F:F3:47:E6:A7:3B:90
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584EC0A7646BC94FBAA763492340
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/4f557bf4-a202-3b14-bef1-7595ebc92550.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     32590
IP address blocks:        2620:f9::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:64:6b:c9:4f:ba:a7:63:49:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=08f41eee-aeef-44ee-9a1b-51900fb27d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:90:05:8a:b4:78:47:8d:e9:f2:20:62:81:
                    53:d7:e8:fa:93:31:fb:47:cb:c8:a5:7f:2d:d6:d2:
                    12:59:bf:2d:4b:f7:21:d6:e4:c3:c1:0c:eb:4b:fa:
                    c0:e3:3e:98:cb:8c:55:d3:47:fa:92:6a:17:a5:bc:
                    cd:1b:96:23:b8:14:fd:f6:a2:72:71:2a:20:82:cc:
                    bf:8a:14:fc:28:51:e7:62:09:82:ae:c3:d9:59:b8:
                    d2:a1:4d:93:ff:24:c8:4f:ae:72:46:7e:0f:37:09:
                    5f:88:13:70:b1:8f:ac:8e:2c:65:36:43:88:ec:a3:
                    6f:85:3d:1d:21:8e:9f:44:e7:ff:e6:8a:fe:70:8a:
                    65:a0:7f:43:ae:da:81:7e:72:8e:6c:85:c2:d6:96:
                    f1:b8:6c:cc:c5:ff:61:b6:34:b3:31:bb:d4:ff:34:
                    3d:d0:89:a0:fe:5e:14:f7:58:34:48:ca:52:7c:c1:
                    aa:a7:52:72:ea:97:4e:4b:02:ab:89:ca:18:d3:25:
                    f2:48:61:77:f8:ad:a3:69:fb:85:89:17:68:0b:e9:
                    a3:8b:8a:4f:66:02:66:46:e8:4b:dc:51:18:88:61:
                    a0:3d:fb:75:c0:1b:88:d3:a5:e1:38:c8:ad:0a:b9:
                    d1:c5:e2:d6:66:f4:e0:ff:bf:69:d3:c9:16:59:50:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:F2:08:CB:9B:A8:D5:FE:3D:22:F4:CC:6F:F3:47:E6:A7:3B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/4f557bf4-a202-3b14-bef1-7595ebc92550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f9::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:46:83:2d:b2:46:81:3a:c0:91:b8:86:cc:f6:97:0c:24:24:
         1a:06:e5:0e:c3:04:4f:a1:82:2f:ed:8d:01:ce:14:9d:0d:19:
         4f:d4:2b:49:35:a4:97:60:1f:dd:55:9e:56:ec:66:ed:22:ca:
         dc:42:32:47:16:3b:ac:95:87:d2:34:4e:79:ce:f9:4a:2a:cf:
         e1:ae:1a:87:b0:56:7d:cd:e4:27:30:02:a0:45:f2:54:7a:cc:
         01:c3:e9:89:f3:b0:3f:08:1c:ce:d9:cc:12:e8:2d:49:2b:93:
         e9:3b:b5:a1:22:5a:43:bd:66:e8:ce:87:21:09:28:1c:a4:52:
         f1:e9:5d:b9:9b:f0:5a:50:c2:e7:47:67:9d:97:31:0c:5d:82:
         ed:2f:51:dd:61:78:b7:dd:40:d0:64:bd:c5:07:f6:c9:a8:85:
         68:ef:35:4c:fb:c7:03:96:14:2d:18:89:87:10:0e:97:b8:ec:
         24:7f:bb:cb:26:67:65:26:ad:cc:21:33:93:14:a9:f9:16:24:
         0e:95:0a:5a:bb:33:51:74:53:4c:b3:8a:f5:c2:ce:0e:4f:75:
         3c:ff:42:91:ae:9f:33:b7:f1:f2:8c:9c:fe:55:25:6c:a7:e3:
         5b:eb:68:a1:79:ea:89:76:ec:33:26:e8:33:e1:da:d1:4e:7e:
         84:18:3e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:44:10 2026 by rpki-client