Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa
File:                     5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa (raw, json)
Hash identifier:          9XM2eufMAno8J6y2OuKiIa5IvmKKNqN9SUpsKcEmNSU=
Subject key identifier:   B8:D8:D2:43:E0:42:2B:09:DE:21:9E:12:4F:F8:17:A0:CA:84:D5:A3
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584ED431DFBBF59A3C8549B59600
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     396955
IP address blocks:        2001:468:2600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:df:bb:f5:9a:3c:85:49:b5:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=c82692f7-2b2e-47d1-bcbf-0fa27552ed7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:af:1b:e8:76:ab:06:45:cf:00:56:a5:12:
                    c0:c0:07:ec:5f:48:2e:df:61:ec:56:ae:c2:29:3d:
                    bf:e8:6d:27:1c:32:a3:26:20:34:3e:3c:1c:3f:e0:
                    9d:82:03:a1:35:d3:b0:50:5d:33:5d:12:fb:c2:7f:
                    57:01:87:47:7d:46:a8:fb:ca:20:d3:09:e3:f4:b3:
                    16:21:f1:bb:85:29:6a:90:37:47:f8:ef:00:e2:f5:
                    44:7d:ae:d0:12:1e:f0:e1:45:80:50:59:0d:9f:3e:
                    14:17:f4:d9:dc:9a:e7:bf:4e:1e:3b:0a:29:f0:30:
                    8a:1a:d6:d2:15:7e:b6:e2:22:e6:1b:f3:f0:d0:88:
                    93:77:87:43:c8:fb:0a:c7:2f:f2:fc:ef:b8:a9:f7:
                    2e:77:37:36:fa:5e:35:ec:2b:3b:44:f4:4a:8e:0a:
                    14:ad:bc:6c:67:25:54:ea:6d:f3:ae:63:e5:b2:5c:
                    90:bd:f1:a4:f7:99:e5:20:16:49:c8:d5:2d:b5:d6:
                    bd:2a:99:67:45:41:ec:7d:f4:1b:d4:35:16:9c:78:
                    74:8c:86:e1:bd:e1:03:99:f8:33:40:6d:81:38:00:
                    34:61:1e:a3:a9:c7:a9:30:c7:1b:07:29:3e:a7:61:
                    91:69:f9:98:6a:d2:76:21:6f:9f:2c:93:bc:da:f1:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:D2:43:E0:42:2B:09:DE:21:9E:12:4F:F8:17:A0:CA:84:D5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/5945a542-1e4f-3ead-b44e-fcbf17e0a112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:1c:a7:75:a6:e7:df:c5:7f:d4:f4:f7:dd:5a:d6:f8:37:9e:
         1a:c1:06:3a:a3:92:28:20:96:0c:94:55:b7:28:6a:91:7a:ee:
         84:58:a3:43:14:9d:33:20:f2:1b:33:18:86:2b:8b:44:d0:eb:
         71:0a:5b:ea:cb:1d:95:d2:70:4f:b8:a7:8a:5e:3b:08:52:d8:
         7a:df:f6:03:ce:18:61:1d:0d:9a:bd:9e:de:8e:ac:15:31:76:
         46:12:28:2c:04:4e:4f:77:7d:a9:f4:3f:da:28:b0:85:48:43:
         d7:7f:4a:49:3c:a1:d3:68:cd:32:96:71:77:e7:b8:f7:35:ad:
         8e:ce:92:73:4a:0e:cb:ef:84:e6:8f:ec:2e:36:48:54:a8:75:
         ad:cd:48:4b:7d:c1:d2:23:cc:a3:75:17:cb:7e:57:a5:32:1e:
         03:a7:d3:eb:d4:51:d0:53:9d:90:b9:b9:a7:5f:bd:b5:db:22:
         60:9d:91:e1:45:1a:eb:ba:13:ae:0d:bb:2f:8b:87:76:7d:d7:
         e6:6a:ac:ae:c3:f6:fa:e0:83:b7:15:9e:84:56:d3:98:50:79:
         59:bb:17:4c:14:8e:b6:9b:76:2e:fa:eb:f3:4d:d2:20:77:f7:
         11:b3:a3:f4:2d:03:12:75:c1:01:8c:aa:9f:df:89:6a:17:74:
         67:da:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:36:05 2026 by rpki-client