Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58ce3166-d501-35a9-9f42-00a82773a97c.roa
File:                     58ce3166-d501-35a9-9f42-00a82773a97c.roa (raw, json)
Hash identifier:          HTZogvPSV8yI0Ng1CgaymckqE//kMyqW6yvSQP3oPkE=
Subject key identifier:   C7:49:7D:49:B5:D2:97:13:8D:DE:F8:CC:7F:26:1A:8B:67:29:10:84
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE0C1F623A21ACAE7D7786380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58ce3166-d501-35a9-9f42-00a82773a97c.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:4136::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f6:23:a2:1a:ca:e7:d7:78:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=d20c51c3-63de-49c0-aa98-298451c7870f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:ae:b2:a2:7e:10:b9:ef:01:8a:e4:cf:3f:
                    cc:c3:87:fb:55:96:84:69:44:2a:c0:85:be:25:e2:
                    7b:f4:35:c0:13:54:2b:71:a7:3d:55:af:92:ce:16:
                    22:fa:f0:06:42:b4:65:84:09:e5:a9:d4:1d:9c:9f:
                    db:05:bf:a2:72:e6:e2:9d:2d:ca:cd:4d:05:47:ca:
                    32:65:27:b0:a0:59:a8:f8:b1:f7:75:cf:f0:d9:cb:
                    b7:e3:4b:be:a9:9f:d4:da:97:a6:58:ec:1d:8d:a6:
                    fe:cd:cf:8e:8b:c5:12:d3:41:d8:db:1f:bf:ad:bd:
                    de:02:12:ea:44:4a:eb:60:4b:26:cc:c5:8b:a8:52:
                    63:7c:2f:3b:eb:65:cf:4d:9e:bc:d0:16:b7:6a:2d:
                    54:2b:8a:6c:9f:6c:03:f3:91:1e:b1:43:09:ca:9c:
                    21:95:43:b4:ce:1c:d1:69:24:fc:7b:02:6c:7c:0b:
                    7a:29:64:a9:9c:d0:f6:e1:65:17:62:b3:1d:a2:ad:
                    e2:71:28:98:94:b9:8a:98:74:50:a5:cb:f4:7b:44:
                    42:bb:b3:ad:42:f4:f6:e5:96:47:27:9f:6b:4c:e3:
                    c6:81:39:18:9f:48:c3:ca:54:52:69:08:f4:8a:69:
                    e2:90:c8:ad:31:36:dd:98:65:0c:c9:a7:f2:92:9c:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:49:7D:49:B5:D2:97:13:8D:DE:F8:CC:7F:26:1A:8B:67:29:10:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58ce3166-d501-35a9-9f42-00a82773a97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4136::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:17:c5:1a:af:9c:61:c4:8a:95:98:4b:81:c5:50:f1:f2:c0:
         1a:39:0e:76:fe:0e:70:8f:9d:0a:95:11:6c:48:13:a4:a5:aa:
         ae:c3:16:85:eb:b9:ee:59:22:77:82:01:dd:a5:6e:e9:6e:e2:
         02:1b:7e:00:d6:db:8d:d4:fa:65:3e:dc:6a:fa:3e:4e:e7:43:
         50:48:81:43:d3:27:c5:99:d7:f9:88:41:77:d6:d4:58:00:ad:
         c0:8f:d4:1a:aa:a2:73:29:cd:63:ec:75:ca:24:3e:e7:02:ab:
         57:6d:f7:f6:d8:3e:e4:85:04:81:97:a3:f2:25:5c:dd:46:73:
         75:6d:a6:4e:f9:63:05:2a:1f:fc:2b:ec:e1:19:32:d0:82:a2:
         03:e3:5e:3d:67:56:5c:f3:ac:36:b4:e9:47:ff:62:16:3e:49:
         dd:2c:97:c0:0b:c3:8c:ea:5c:16:73:01:e9:46:4e:21:5c:ed:
         13:e2:26:b9:44:6a:ea:25:0f:e2:38:95:37:fc:bb:2b:83:3c:
         c4:a8:1e:b4:31:5f:b2:9f:5c:76:c6:ca:9a:19:81:07:86:d7:
         63:5c:af:d6:9a:3b:62:0a:0a:e7:a3:8b:21:e5:d2:db:e8:3f:
         d0:53:86:a9:fb:4d:a6:54:32:06:90:5f:7a:18:14:c7:48:e0:
         9d:8c:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:44:15 2026 by rpki-client