Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa
File:                     23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa (raw, json)
Hash identifier:          9e2qjW6GXV8+4tq2ur0z+vlTp8I8/B8jQeSf7/CAHT0=
Subject key identifier:   27:46:B8:4F:62:44:BF:4E:2B:2E:E3:9A:06:A6:9E:BD:58:F8:06:01
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE38C9F4245B2699E60450D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     12222
IP address blocks:        2001:4878:a048::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9f:42:45:b2:69:9e:60:45:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=f3abafcb-0cfd-4a71-8fd0-88bbb579be1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:5e:75:f6:da:4f:68:f3:f0:36:29:92:0b:
                    f0:4f:17:54:51:6d:dd:37:04:be:87:2f:05:7f:ab:
                    bc:53:09:e4:d0:89:b3:6d:01:cf:0b:3f:eb:28:4f:
                    f6:6e:b8:91:60:84:b7:3b:ca:eb:a9:87:c1:8b:d5:
                    33:63:77:1b:ff:5b:90:63:22:9f:ce:6c:b7:0f:e2:
                    fc:f0:f0:68:c5:fe:b3:dd:24:32:0e:a8:64:13:cc:
                    04:ce:61:e9:3d:c8:1a:f3:e6:ed:8a:05:13:38:34:
                    94:4f:3b:dc:dd:b8:09:53:87:a1:b1:1e:2e:5a:3c:
                    fe:ba:27:1e:eb:fa:31:0e:a5:23:b7:19:d1:30:a9:
                    19:53:1c:ee:00:26:63:5e:40:d6:d1:74:dd:14:e1:
                    7c:66:86:be:4d:b8:bf:dc:02:6e:08:fe:58:1f:9a:
                    31:7e:37:fc:a4:72:f6:e4:a2:19:63:10:8a:d4:15:
                    32:ae:93:27:03:10:bd:ed:8d:d8:d1:56:9b:89:33:
                    32:cc:2d:01:df:f3:f8:78:25:9b:14:41:76:75:0c:
                    e4:1f:17:ab:32:f5:56:63:9b:49:38:c0:a4:09:d3:
                    39:13:05:1b:dc:83:d6:2a:27:d8:d1:48:fc:e9:a4:
                    db:43:ca:7a:43:d1:cc:8d:fb:3b:70:50:95:46:6b:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:B8:4F:62:44:BF:4E:2B:2E:E3:9A:06:A6:9E:BD:58:F8:06:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a048::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:50:d1:d5:b4:4f:4d:28:13:dd:42:73:f2:c2:9e:14:91:50:
         22:43:ea:dc:13:ad:a0:82:93:18:10:ae:b2:60:42:85:00:e9:
         1b:ac:56:da:a5:35:b5:e4:fd:b3:79:d4:b4:cb:fd:20:b6:61:
         ad:c8:4c:21:0a:8b:7d:7a:61:3b:ba:83:44:05:9f:9a:2f:33:
         09:ee:58:39:89:7e:38:f2:30:a6:9b:4e:3a:7d:10:4d:7b:22:
         04:e9:c7:0c:f6:c8:43:fa:48:fd:b5:e3:d5:37:7b:e8:cb:26:
         25:68:0e:41:2d:1c:40:28:91:11:00:b4:a4:6d:c4:0f:f8:23:
         0c:b6:13:59:be:4c:f4:bd:73:1c:52:12:ec:06:b7:c9:aa:03:
         b8:cd:02:99:48:76:0b:e7:9f:9c:a0:d8:69:01:f5:30:be:35:
         ad:f7:e8:38:4e:15:42:b9:b7:de:af:62:8d:5d:6b:11:8b:34:
         57:80:cc:ef:27:5d:b4:ff:aa:6a:1a:fb:9d:08:e3:2c:e5:30:
         65:cc:01:65:7f:2c:60:00:6c:b3:1f:96:8b:81:bc:b2:52:a6:
         77:3a:a8:14:4b:e4:cf:87:b9:4e:d2:38:7e:5e:9b:2f:eb:2b:
         57:2f:26:e3:90:7b:31:16:fa:f7:e9:9f:d0:e7:9c:0c:cc:03:
         49:fb:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:45:47 2026 by rpki-client