Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/437945ac-8856-3e94-91bb-82f389ba3e21.roa
File:                     437945ac-8856-3e94-91bb-82f389ba3e21.roa (raw, json)
Hash identifier:          I5CV8reC9voAo6XjiTNXj6u1UEzADWZEbv9YKaUp8Uc=
Subject key identifier:   3E:60:7F:76:48:22:55:DF:E1:08:A1:A7:EA:EE:86:2B:A5:D8:18:9B
Certificate issuer:       /CN=37bb4ae7-3e12-43f1-85d4-823603a9c0f3
Certificate serial:       010D0C9F4328584F71D0644C7AB4FB5F0842F7D0
Authority key identifier: E8:23:3E:9B:35:2E:C5:1A:C5:7E:C0:C0:3C:64:7F:82:5C:91:96:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/437945ac-8856-3e94-91bb-82f389ba3e21.roa
Signing time:             Fri 09 Oct 2026 12:01:41 +0000
ROA not before:           Fri 09 Oct 2026 12:01:41 +0000
ROA not after:            Thu 07 Jan 2027 13:01:41 +0000
asID:                     33028
IP address blocks:        2604:e100:1::/48 maxlen: 48
                          2604:e100:3::/48 maxlen: 48
                          2604:e100:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:d0:64:4c:7a:b4:fb:5f:08:42:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37bb4ae7-3e12-43f1-85d4-823603a9c0f3
        Validity
            Not Before: Oct  9 12:01:41 2026 GMT
            Not After : Jan  7 13:01:41 2027 GMT
        Subject: CN=16f7ea0b-a91d-4c9d-9384-a122f1be193f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:08:94:96:2d:e4:d1:b2:49:2e:2c:1b:a8:
                    f3:9f:26:99:b6:7a:0d:c4:a9:fd:20:10:13:d9:d5:
                    4e:fc:95:67:5e:dc:28:13:61:20:e2:d1:19:f3:b1:
                    01:b4:39:43:d3:da:73:fc:0a:34:10:52:ed:86:8b:
                    6a:3b:2c:15:56:8a:9b:12:69:0d:1b:b6:0f:01:40:
                    3f:75:7a:95:e9:02:6d:e9:84:14:4d:34:c6:a2:f5:
                    2c:fa:8f:90:e6:e2:3c:09:8d:ec:1a:cd:16:de:82:
                    ae:c9:5c:29:f0:d7:3e:b7:ea:24:d9:53:4f:4e:3a:
                    7b:b6:18:9d:c8:3f:a6:5c:35:a4:cc:e6:8b:de:e6:
                    04:b6:0e:03:ea:08:6d:80:5b:7e:ba:c1:c8:83:5f:
                    10:21:02:30:20:6c:e7:a8:f5:c7:8f:46:f2:61:a6:
                    c3:ab:5b:54:4f:18:d0:33:6d:e3:f1:62:5a:68:d4:
                    29:6c:08:ae:3a:b1:a7:aa:d0:9d:4b:2c:1d:01:80:
                    17:cf:ff:d4:cd:c0:82:70:16:89:c9:23:90:63:e6:
                    68:1a:34:cc:c2:ef:04:de:19:a2:81:ab:20:05:52:
                    8a:db:ed:12:eb:25:15:6d:53:60:ad:3c:05:b0:34:
                    00:1b:fb:04:ba:80:67:90:48:7e:95:84:0e:29:41:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:60:7F:76:48:22:55:DF:E1:08:A1:A7:EA:EE:86:2B:A5:D8:18:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/437945ac-8856-3e94-91bb-82f389ba3e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.crl

            X509v3 Authority Key Identifier:
                keyid:E8:23:3E:9B:35:2E:C5:1A:C5:7E:C0:C0:3C:64:7F:82:5C:91:96:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e100:1::/48
                  2604:e100:3::-2604:e100:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b8:72:6c:b4:8b:c8:90:41:d7:99:ae:36:aa:2a:ad:48:49:
         d2:0f:c9:d6:53:c8:94:ac:a8:05:c1:01:1e:11:86:b6:d5:2b:
         4e:b3:4d:d5:f4:15:a0:27:38:29:9e:bb:48:81:3e:d4:ad:03:
         fc:29:a8:d4:65:7f:15:8c:68:b9:1f:19:d8:3d:8c:36:94:67:
         c9:78:0e:3f:db:22:02:62:d1:c4:92:1b:c6:00:30:3a:30:c9:
         f3:c8:a6:37:2d:e2:48:f9:46:87:18:46:9c:2c:74:33:1c:83:
         c7:bc:d6:44:e5:87:46:f1:f9:03:a8:17:40:25:50:6c:ca:1f:
         5d:33:64:2b:9b:ee:b4:1e:fc:1f:94:6d:cc:ff:19:b0:f8:70:
         2b:cc:47:28:b4:92:80:06:eb:85:4a:d2:64:29:2f:b5:47:63:
         0a:50:01:16:3f:47:8f:9d:c4:21:0f:9b:ee:38:77:ec:eb:40:
         83:20:e5:32:3d:93:57:09:da:48:7c:3e:c2:15:f6:0d:0d:ed:
         22:2a:cd:f1:13:3e:54:53:90:87:b3:0b:b0:fb:09:5e:d8:08:
         cc:12:f0:f6:7f:3b:7a:c3:20:46:d1:e4:70:39:ff:15:72:63:
         34:d9:99:3c:65:d6:d4:a3:10:49:f6:e1:fb:e4:51:b9:25:c8:
         61:d1:92:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:37:43 2026 by rpki-client