Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa
File:                     cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa (raw, json)
Hash identifier:          N6qBBl/cDfLkPTE0pXH+1KshkwLQJDA8D/aBp/srDys=
Subject key identifier:   5B:55:18:CE:97:CA:85:84:FA:3A:3D:0F:00:15:FC:D5:CF:D2:C5:75
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F549D5D514369AD8A7A8993F0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     8987
IP address blocks:        2605:4300:2c01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:5d:51:43:69:ad:8a:7a:89:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=7a73af0c-c552-4d43-bae1-6c26782075a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:1f:18:cc:bf:05:7a:b6:e2:fc:f4:6c:f4:
                    60:24:fe:12:62:6e:98:5d:12:c8:69:e9:16:7d:6f:
                    6e:28:86:5e:61:be:5c:2f:7e:9d:96:97:23:26:17:
                    b9:0b:a1:57:c5:1b:85:2f:51:b2:39:e4:1c:81:52:
                    06:c8:d0:e1:98:07:68:cc:3d:f6:f2:00:79:fa:60:
                    12:5c:96:05:95:22:25:91:18:36:4c:9f:80:ed:3d:
                    91:2b:e5:a9:65:64:de:87:d5:13:d9:5c:98:ef:7e:
                    13:89:71:39:cc:86:af:f8:e6:03:1e:c3:09:14:08:
                    88:85:8a:9d:f2:75:5e:25:49:99:94:6b:7b:42:dd:
                    de:fc:22:cf:2d:7b:19:1d:3f:a6:c1:3b:56:a5:c1:
                    a3:7f:ac:e2:01:ec:6c:ba:b6:4b:25:69:0d:50:95:
                    77:66:47:88:ba:8c:08:e3:d0:1d:4a:ea:56:0f:c3:
                    56:d6:67:23:5e:54:6c:1d:4c:2c:95:95:25:de:92:
                    33:21:8b:03:db:dc:9c:dd:ff:8b:fd:db:91:2b:68:
                    53:f8:6e:f0:bd:df:8d:0a:46:1b:fd:93:04:73:da:
                    28:9f:34:43:15:12:99:fa:b5:ac:46:2a:5b:2d:5a:
                    da:6e:4e:79:ef:aa:08:31:49:31:a7:d8:14:41:10:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:55:18:CE:97:CA:85:84:FA:3A:3D:0F:00:15:FC:D5:CF:D2:C5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:8f:b5:a2:45:54:21:29:08:7b:e4:e4:1a:76:f4:c1:70:
         76:14:88:c0:f6:03:af:c4:51:10:04:81:ec:76:d0:a7:4c:30:
         1d:6f:4c:43:e2:dd:ec:58:33:e9:e4:97:73:4a:14:95:30:84:
         30:cb:0a:a9:6f:93:df:40:6b:c4:d0:f7:33:6b:7e:ba:58:7d:
         a8:6f:8a:4d:5d:3e:47:a7:e8:98:03:04:ad:ec:e6:e2:bd:3f:
         e5:a6:a0:30:41:e4:93:48:00:d8:69:38:d1:fd:f4:e9:73:12:
         7b:3c:c3:2a:02:cc:e7:23:e7:09:ec:82:07:a6:30:c6:d0:46:
         9f:b0:08:d2:9d:9f:3a:9a:98:4f:44:62:a5:ed:9b:bc:c2:0c:
         cf:a0:60:67:9c:60:ed:90:b5:cd:16:18:aa:4f:b5:46:e2:0c:
         64:06:48:cd:94:a6:a7:5f:3c:cf:8c:43:20:97:a5:31:5b:44:
         5d:41:d9:3b:98:18:ee:51:b3:06:fa:ea:bc:e8:76:25:53:50:
         2c:03:46:46:68:05:6d:23:32:90:8f:b5:8d:45:12:ab:e5:5f:
         84:ad:5e:c2:be:a9:9d:3f:bc:bb:d5:ed:12:dc:4a:23:27:80:
         c3:ec:8c:96:79:0e:35:f3:26:71:41:f6:20:6f:27:a3:bf:89:
         7a:c7:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:18:34 2026 by rpki-client