Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/fa52ea82-029d-3b04-9717-9acd3cbc530d.roa
File:                     fa52ea82-029d-3b04-9717-9acd3cbc530d.roa (raw, json)
Hash identifier:          vFAVNnNa6COdYrFEq3Osk04OIot9WP3zvo70Mjm8UGU=
Subject key identifier:   36:23:CB:0F:B0:98:2E:BB:05:97:2E:CE:D6:A7:62:25:0F:FC:2F:EE
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EE03B260106C515D480EA8380
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/fa52ea82-029d-3b04-9717-9acd3cbc530d.roa
Signing time:             Tue 18 Aug 2026 08:28:46 +0000
ROA not before:           Tue 18 Aug 2026 08:28:46 +0000
ROA not after:            Mon 16 Nov 2026 09:28:46 +0000
asID:                     11537
IP address blocks:        2001:468:2f0a::/48 maxlen: 48
                          2001:468:2f0b::/48 maxlen: 48
                          2001:468:2f0d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:3b:26:01:06:c5:15:d4:80:ea:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 18 08:28:46 2026 GMT
            Not After : Nov 16 09:28:46 2026 GMT
        Subject: CN=7367b1e0-b6dc-4b02-a5c2-2edfe6ed2f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:ba:a3:5e:dd:f6:18:8a:30:cb:dd:55:a0:
                    36:62:c9:c8:f2:46:d8:ab:42:4e:9c:1e:6b:a3:92:
                    9a:0a:e9:d7:4f:32:4a:15:84:c5:69:e0:fb:4f:f8:
                    f8:c8:e4:97:c5:c4:ea:66:84:a0:63:cc:b4:97:fa:
                    2f:31:72:b5:be:24:ba:04:72:2b:86:ca:0e:61:14:
                    ad:ca:cd:f9:95:af:20:96:8a:8b:8a:89:3e:42:78:
                    58:5f:27:7a:f6:90:5d:b7:9b:78:1a:20:ae:42:b4:
                    27:2b:18:41:de:ff:84:4f:a3:e9:8a:db:df:1c:2b:
                    2e:c7:9d:3a:56:66:12:b3:a4:69:3d:ed:77:32:aa:
                    1d:ea:ce:eb:ec:fa:63:07:6d:8b:23:02:4e:96:4e:
                    67:9f:33:30:a7:96:c1:05:6e:ae:f8:7e:e9:0b:a8:
                    a5:46:03:e0:ac:5c:17:ec:51:b6:b5:0c:ce:9f:98:
                    e8:69:fc:ca:fd:9d:b8:81:71:8c:63:86:ca:ce:83:
                    21:a0:d8:39:50:f7:b9:a5:19:c8:42:10:a5:36:4e:
                    f8:5a:ad:42:f6:dd:80:8c:f9:60:b7:80:57:d8:b0:
                    c5:a2:33:af:93:ca:00:dc:fc:89:67:dd:e1:23:af:
                    5e:6e:ab:4d:cb:97:da:44:50:47:1e:27:c0:f8:14:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:23:CB:0F:B0:98:2E:BB:05:97:2E:CE:D6:A7:62:25:0F:FC:2F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/fa52ea82-029d-3b04-9717-9acd3cbc530d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2f0a::/47
                  2001:468:2f0d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:24:67:f3:d3:99:42:c6:ec:69:63:fc:00:df:d2:ae:41:
         90:ad:e6:70:10:42:05:a8:22:1f:4f:5c:7b:00:b1:f3:12:d2:
         01:ab:d7:b2:5f:03:a3:00:6d:16:a8:46:17:63:38:d3:1a:d3:
         84:fb:85:e3:e7:64:68:37:bd:4d:44:01:10:e5:6f:2d:33:a5:
         e8:38:7e:ef:51:57:07:7c:0b:66:c3:66:d8:36:c8:e2:1f:02:
         9e:4d:d0:ff:71:94:da:0f:ca:75:78:37:e1:04:23:75:17:55:
         13:1b:d2:6a:28:ff:5a:fa:76:6c:27:fe:b0:33:2e:b2:d3:31:
         22:50:27:33:33:c4:49:be:b3:e7:26:8d:ab:cd:76:11:c2:42:
         cb:ec:ac:65:d2:4e:4a:18:d4:a2:a9:81:12:7d:a2:87:5c:dc:
         69:7c:7b:23:8b:15:4b:c2:aa:09:3d:bf:96:4a:35:16:1c:34:
         43:85:db:83:11:c5:ee:7c:9e:b9:e6:d3:db:bb:0d:08:36:fb:
         2f:aa:e8:95:99:22:8c:cd:6e:12:59:69:06:9a:3c:4b:7a:d8:
         6d:94:5d:68:18:e8:70:76:ad:a1:56:9b:1e:21:cf:80:69:ad:
         1b:30:aa:3a:ab:26:cd:1d:a5:6e:1d:d9:3e:ec:53:bc:8b:d9:
         80:96:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:10:53 2026 by rpki-client