Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/809873c3-691a-36ca-a03b-9a18f0026dfd.roa
File:                     809873c3-691a-36ca-a03b-9a18f0026dfd.roa (raw, json)
Hash identifier:          KUYK9SxMidADmxox8osewBK6rg1z69hS4eElLUynRPU=
Subject key identifier:   A9:D2:7C:D3:1B:D6:36:3A:77:0F:8B:C5:D5:09:00:B4:80:8F:51:73
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F050CC4DC67A900BFCFFEAF80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/809873c3-691a-36ca-a03b-9a18f0026dfd.roa
Signing time:             Mon 31 Aug 2026 13:00:12 +0000
ROA not before:           Mon 31 Aug 2026 13:00:12 +0000
ROA not after:            Sun 29 Nov 2026 14:00:12 +0000
asID:                     64286
IP address blocks:        2601:2028::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:0c:c4:dc:67:a9:00:bf:cf:fe:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug 31 13:00:12 2026 GMT
            Not After : Nov 29 14:00:12 2026 GMT
        Subject: CN=ffdc8aa7-7ce7-4297-bcd6-988ffd6a4a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:5d:fc:cb:63:7b:39:2e:fd:f2:53:2d:ff:
                    e9:2a:ad:6d:76:02:c3:fa:1d:1b:ce:92:d0:6d:1c:
                    ee:3a:48:d0:c4:48:c3:7d:40:dc:e7:bc:2e:41:5d:
                    89:5d:22:c9:49:06:2c:f6:b9:17:e6:b2:ba:c9:2f:
                    ff:b4:48:dc:58:6f:56:0e:d6:11:63:29:7b:1d:e1:
                    91:86:12:05:31:b9:cc:16:2e:dc:99:d3:6e:81:fc:
                    1d:ee:be:1f:c5:03:27:73:b7:0f:a2:31:b8:2a:54:
                    fe:f0:f4:a7:a1:1e:a4:23:ec:33:db:3a:ea:9c:08:
                    2f:30:71:fa:d2:69:fc:13:4d:46:86:80:75:74:de:
                    03:a4:c8:0f:1b:91:10:cc:a2:a2:50:6f:65:02:1d:
                    8f:3b:c1:8e:c4:75:a3:fa:6a:2a:d3:b0:c2:5e:6d:
                    f9:57:1f:95:23:4d:8d:91:a8:c8:d9:0a:d6:bf:04:
                    64:d9:ed:51:f0:57:f9:e4:a2:52:f2:bd:89:32:78:
                    5d:de:53:ae:48:e9:fc:83:12:a7:96:50:2d:ee:eb:
                    70:4c:b0:ea:d6:99:78:98:43:eb:3a:ef:cc:b5:96:
                    43:e8:a8:d1:9b:15:ff:bb:5c:cb:f2:1f:e0:45:61:
                    51:b3:ea:a8:e2:14:0b:e0:7e:d2:ad:4c:83:be:97:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D2:7C:D3:1B:D6:36:3A:77:0F:8B:C5:D5:09:00:B4:80:8F:51:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/809873c3-691a-36ca-a03b-9a18f0026dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2028::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:48:99:23:b0:30:35:86:2d:de:c7:f3:7e:77:7a:76:fe:fb:
         d0:1d:28:ee:db:85:bb:7f:b9:82:13:f8:02:d9:d8:af:f1:fd:
         94:45:09:02:3a:71:3c:5b:f1:02:45:ea:bf:ea:fe:49:23:7c:
         37:36:51:87:da:9d:3c:ef:15:8d:6d:64:6e:ab:81:f2:32:0c:
         02:0e:17:87:0d:28:a9:2f:4f:e7:84:c3:43:4e:5d:f7:7f:90:
         b2:da:91:50:59:44:77:dd:9d:8f:76:aa:cc:bf:57:19:e9:c6:
         70:fa:7e:49:4b:6f:db:e5:17:28:de:d8:19:cf:05:ba:68:a8:
         e1:8a:80:c3:8b:30:c0:65:8a:75:62:86:6f:13:4b:f2:d2:f5:
         a7:db:41:f2:d1:92:0a:68:d1:7c:34:18:b9:87:75:ac:d2:76:
         74:93:61:e6:11:0a:d4:b6:b5:11:d2:38:c7:47:27:92:21:67:
         bf:ce:50:4e:39:dc:24:de:23:9c:cf:28:e4:43:70:fc:67:78:
         44:e9:2a:54:21:f1:69:ea:c5:19:db:48:14:37:30:cd:90:d9:
         8e:fe:a1:4b:d0:44:5a:a4:e1:be:af:b8:fd:72:a1:07:70:e9:
         e1:c9:65:c2:59:52:df:3f:0b:bd:53:76:be:ab:e6:e5:a0:9b:
         96:30:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:09:27 2026 by rpki-client