Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b7edb77-7411-335a-a045-5aaca552f0bd.roa
File:                     8b7edb77-7411-335a-a045-5aaca552f0bd.roa (raw, json)
Hash identifier:          pJ0mErXZlRrXeHW64fIS2bljNbgXeHmNQxtaG7r2p4U=
Subject key identifier:   7F:D9:41:B0:73:FB:68:53:73:A2:D1:F3:38:9B:E2:C2:6A:2C:58:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE0C1F454218A587D47674900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b7edb77-7411-335a-a045-5aaca552f0bd.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:228::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f4:54:21:8a:58:7d:47:67:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=9dcffdf7-b1ce-42b2-b816-269878ab0ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:55:94:be:49:01:07:48:1e:c0:82:24:44:
                    ba:de:9d:22:56:e4:b4:be:ed:75:1a:d6:97:24:32:
                    42:02:e6:4a:fd:bd:69:1b:e0:ed:a7:5d:19:6f:37:
                    b6:0b:35:5c:70:e0:0f:18:23:bd:49:0f:2d:89:40:
                    85:d7:05:e5:01:62:8a:39:81:f9:16:93:3f:d7:5d:
                    a7:44:30:39:38:31:f4:7c:d3:b1:52:ba:e4:20:51:
                    be:c5:7f:ef:87:57:fc:e2:4e:81:0e:0d:91:57:eb:
                    0c:e9:62:f4:96:9d:38:1c:de:19:15:b9:77:01:9d:
                    80:ae:3f:da:47:59:39:53:2e:d9:ea:aa:7b:d9:b3:
                    a6:e2:ac:b4:25:b4:9a:a6:c6:c3:27:d8:9c:ef:b9:
                    23:76:16:96:c1:ae:5e:d5:29:81:09:d0:68:35:72:
                    d7:c2:fa:39:03:c4:20:6f:4a:84:bb:e1:d4:81:92:
                    3e:30:5c:cf:20:38:21:d4:31:27:c1:e2:64:a0:df:
                    3a:2d:b2:4e:25:44:ca:36:05:d2:96:c9:b8:55:b7:
                    3b:3a:df:87:d8:67:7e:73:2f:76:04:98:ff:63:f8:
                    55:79:2a:63:c8:65:82:e9:b0:b5:a3:74:e6:1e:a6:
                    1a:26:ae:b0:46:b3:90:16:03:e4:cf:e9:e4:c3:da:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:41:B0:73:FB:68:53:73:A2:D1:F3:38:9B:E2:C2:6A:2C:58:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b7edb77-7411-335a-a045-5aaca552f0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:228::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:46:6f:f8:9a:e6:48:98:13:bb:0d:f3:0c:8a:d8:7e:c6:41:
         54:38:75:94:85:f5:03:6b:55:18:5e:88:eb:8d:88:63:e3:5a:
         77:ba:63:f1:42:b0:cc:c4:84:68:76:bf:eb:15:26:c0:6c:31:
         bf:f4:1a:c0:77:2d:2d:d4:31:91:0a:bf:98:39:45:06:c4:95:
         c6:36:21:dd:51:7c:8f:2b:a4:96:fb:27:eb:2e:ea:48:c8:ed:
         a4:20:6c:6a:95:29:61:76:ae:da:ee:dc:44:b9:39:34:d5:77:
         90:0c:2a:85:29:fa:4e:33:51:02:7b:7e:b7:28:0c:8d:ca:7b:
         7a:bc:f6:7c:7b:b6:15:4b:a5:59:ac:36:59:16:c9:25:85:ee:
         81:95:a3:0e:96:20:d2:b0:2b:54:71:b7:c1:1a:01:7f:4e:05:
         97:69:6b:c2:f2:3d:ef:fa:60:16:32:5a:50:7d:40:e3:30:f9:
         63:9a:41:d2:49:31:cc:81:57:56:96:a6:2d:f3:d1:17:c0:0f:
         be:d6:af:f0:f7:d6:a3:b8:70:4a:2c:43:82:c2:0a:16:47:61:
         43:be:ed:25:65:98:22:5b:7a:3d:78:f9:2c:14:b9:2f:f4:79:
         a2:86:fc:7a:05:91:65:03:c4:e9:8f:ff:f1:d3:3d:9d:c4:26:
         31:35:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:28:48 2026 by rpki-client