Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa
File:                     4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa (raw, json)
Hash identifier:          Hyn/Fq21m95Z+iuYI7iuPoggCSHbFn/MTLYT8GQFx7I=
Subject key identifier:   43:3C:C9:CE:A1:5B:C5:2A:F3:FE:AD:B2:AA:51:0D:EC:5E:AC:7E:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE0C1EEE6BCF3926CF65EE700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:ee:e6:bc:f3:92:6c:f6:5e:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=8d42179c-d1f3-48b0-9f97-630dc0cfe03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:4d:88:cf:75:c5:22:48:37:b2:0c:b9:86:
                    c8:3d:cd:5b:f9:64:92:3a:f7:8b:7d:e3:0b:50:bd:
                    fa:5d:3b:d2:6a:d2:6d:2c:46:14:68:74:5e:94:8d:
                    de:ec:0c:0c:16:db:e6:5a:05:ec:c9:43:92:dc:23:
                    d0:fb:9a:95:b7:82:c8:dc:c3:23:f4:96:ba:23:2b:
                    69:9a:e6:09:d5:4f:02:64:09:c2:9d:fa:81:fe:d2:
                    7a:db:ef:9a:b9:bd:31:03:8b:55:8f:f8:2c:97:22:
                    3e:95:fe:b1:91:87:f4:a0:ef:19:8e:71:7a:b4:ca:
                    35:75:41:ae:59:c9:88:2c:50:9e:00:74:b9:e8:d3:
                    77:b5:c2:b1:c3:29:33:65:6d:07:1b:67:30:5e:d0:
                    4c:23:80:2a:82:00:6f:21:09:c7:76:b5:b8:68:ee:
                    5f:18:6f:83:4c:fa:d7:fa:a8:07:d3:3c:e6:db:9c:
                    00:cf:bc:ae:76:49:03:47:7c:42:2d:70:2e:1f:a2:
                    e0:4d:7c:86:72:6c:a2:d5:75:04:f2:de:00:7a:48:
                    46:2f:df:2a:73:5e:b9:fd:bd:07:cd:16:29:e3:1d:
                    08:0f:9d:f2:bb:bb:a4:f3:68:0e:42:62:d0:ae:67:
                    e3:cf:40:23:2a:8e:71:a5:b9:ac:f8:ae:93:0f:5d:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3C:C9:CE:A1:5B:C5:2A:F3:FE:AD:B2:AA:51:0D:EC:5E:AC:7E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:26:f5:9d:11:4b:fe:31:b6:25:b0:fa:64:90:d1:d4:67:d9:
         bd:38:dc:52:1c:4f:bf:e7:7f:74:57:46:66:46:96:1e:6d:14:
         e2:d9:3d:16:5a:9a:3b:5a:de:17:6f:fc:b5:92:1f:ce:c9:ee:
         08:19:bf:d8:ec:98:9a:51:83:77:f0:c8:31:3b:9b:8e:5a:1b:
         22:f9:0a:1b:6a:be:b4:cd:4c:a7:54:da:d6:90:39:46:51:1a:
         72:7b:98:d7:fd:b4:f3:57:5e:08:60:72:7a:9e:ee:ab:64:af:
         ca:3a:cb:52:7e:22:05:d6:36:30:50:28:60:e3:b2:1f:66:d1:
         9a:cf:f1:74:f8:d5:c9:b1:01:ba:39:ea:ff:ab:bb:45:0b:b8:
         35:7d:cf:5e:7d:f6:d1:be:5e:cf:e5:f8:de:f7:2a:92:24:55:
         ec:21:23:62:aa:6a:c3:13:b7:aa:69:45:35:bf:ea:ef:52:fa:
         34:d8:c2:cf:54:b8:94:a5:6d:6a:24:b7:34:d0:88:96:60:76:
         5b:b0:41:e2:6d:2f:68:3f:17:a6:73:73:77:dd:d7:b4:a7:fc:
         0e:51:d6:e6:d7:20:aa:7d:23:88:87:66:a8:86:4e:3b:9e:ea:
         a3:bd:d5:e1:12:30:6e:c6:d5:b7:2f:96:7c:53:f3:50:ca:6b:
         1c:36:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:22:30 2026 by rpki-client