Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa
File:                     e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa (raw, json)
Hash identifier:          sTBlBefSfHxZx4iCQiabt9CkJyU6cV09KaHDGiAZWNg=
Subject key identifier:   32:24:71:9D:B0:C8:3B:F1:BE:1B:C6:2F:AB:8E:01:1B:34:97:CD:99
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EC7A1D2B54A3D3CA698EE1080
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     396961
IP address blocks:        2001:468:2809::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d2:b5:4a:3d:3c:a6:98:ee:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=21833237-f0a3-4f1f-a857-2481c50ad922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:e4:52:82:7e:ad:ff:37:be:43:78:1d:bf:
                    6d:0d:fb:aa:6d:52:53:d2:2f:45:84:b9:58:02:2a:
                    45:c8:b9:07:79:5e:c5:9d:c0:61:96:8a:6b:b5:f0:
                    ff:5d:00:76:22:fa:c1:61:d1:ea:f0:37:85:7d:b3:
                    4b:0a:75:a0:9e:86:5e:3e:fa:d4:05:81:4a:67:ac:
                    05:ef:2a:cd:5a:3f:35:f0:5e:43:6f:e7:68:5d:62:
                    a8:54:03:a3:63:4b:92:66:79:9e:56:d0:70:6b:9f:
                    48:8f:a6:27:74:c3:bb:2d:a9:0f:fb:c0:1f:3f:83:
                    cf:c8:e9:02:6f:f0:ea:10:72:91:98:6b:47:e8:d9:
                    94:ee:c6:0f:52:8f:f2:2b:d1:a9:df:f4:17:ec:62:
                    2d:2f:83:8d:36:7e:68:0f:b6:f2:49:2e:26:dd:ac:
                    d3:55:40:d4:51:cb:a8:41:51:00:eb:0f:2a:aa:a1:
                    a6:6e:85:38:2d:71:7e:33:26:6e:fc:34:45:2e:ba:
                    e4:60:86:f0:b2:14:11:65:40:2c:40:04:95:31:a1:
                    f1:8e:16:e7:a7:af:bc:8e:f7:51:25:95:21:a9:f9:
                    eb:9e:e1:6e:1c:17:c8:a0:d6:20:dc:01:ef:61:6d:
                    18:bb:da:dd:d4:2b:3a:77:5e:8a:9f:d4:56:81:52:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:71:9D:B0:C8:3B:F1:BE:1B:C6:2F:AB:8E:01:1B:34:97:CD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2809::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:6e:6f:e8:4f:4b:f6:29:61:9e:2b:02:4f:54:6e:d1:51:
         67:cb:54:ab:9d:dc:e3:a4:e6:6d:2a:2b:31:1e:87:87:6c:5e:
         77:b1:a0:90:5e:2a:86:b2:02:3f:da:a9:af:76:5b:18:0c:11:
         0a:91:82:07:3e:c1:ad:de:3f:29:f3:50:3b:72:eb:03:c2:57:
         89:f8:34:e1:0e:9b:ad:66:2a:df:40:f7:6a:a4:a2:47:06:8d:
         29:d4:87:ff:bb:49:fe:25:94:7c:3d:a1:2d:48:8b:cd:c6:4a:
         63:ac:ff:55:5f:db:d9:49:6e:94:28:3f:0e:6c:9c:ea:33:3a:
         02:71:a1:ca:a7:27:28:18:91:2c:e8:bc:35:d5:f8:eb:02:25:
         28:ec:ab:ce:c4:7e:9e:6c:67:ca:10:c2:2a:3c:51:73:7b:15:
         d7:3b:b3:89:e8:f7:bd:0e:05:f0:20:f8:8c:66:76:b1:29:8c:
         b3:7f:dd:1d:c8:a3:e3:47:fd:20:cd:e6:e6:33:84:64:a2:60:
         21:2a:e3:09:fe:cd:dd:e4:eb:1e:b7:61:6c:9b:dd:96:99:73:
         63:ed:66:57:5a:c3:8a:44:15:a2:f8:cf:b2:5b:8f:4e:cc:34:
         eb:bd:04:38:5d:c4:78:97:4a:8e:51:bc:af:ee:10:2a:b8:44:
         9e:bb:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:21:45 2026 by rpki-client