Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa
File:                     ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa (raw, json)
Hash identifier:          BBaJ2YVCWOE4Pn0tHOcO95bNAlaFgir7PD60niZa6p0=
Subject key identifier:   16:BA:05:5E:4A:F9:C6:CC:6B:EA:51:5B:F3:71:7D:E9:DF:65:93:8D
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584EC371BCA13E1B93A47DD03020
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11537
IP address blocks:        2001:468:1f11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bc:a1:3e:1b:93:a4:7d:d0:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=b6dbf9c3-6b4e-4ec1-9d6a-a8034e24304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:03:b7:40:d4:0d:3a:80:51:ec:c0:29:44:
                    59:e8:41:12:39:3c:a6:82:49:38:29:6c:28:98:bc:
                    16:5f:2d:ec:00:17:a7:7b:6c:7c:da:a0:ed:66:4a:
                    d4:ce:f2:c6:39:b5:6d:f7:47:44:38:a6:e7:84:78:
                    94:08:ea:d9:65:fc:9f:28:22:13:84:54:3c:4b:98:
                    50:7c:f7:64:d8:8e:54:ca:0b:70:64:ba:1f:4a:5f:
                    83:f3:fe:57:cb:9c:f1:c3:42:12:5e:a8:36:d0:3b:
                    38:7c:cd:01:71:38:64:da:d7:36:7e:60:f5:c7:8a:
                    0b:b2:03:57:39:ba:c9:dd:03:e3:93:99:71:da:28:
                    62:1e:1e:4d:12:39:8c:61:35:83:f1:89:46:f0:b5:
                    c7:37:52:28:0a:56:9d:8c:c2:a0:67:7a:62:a4:80:
                    b4:8d:90:40:66:11:52:8d:6d:bf:7b:c0:38:a9:db:
                    2b:87:c3:03:fa:9a:31:a5:bd:8b:81:72:85:34:16:
                    2d:4c:b4:c3:9f:6a:db:de:56:d8:bf:26:81:91:a5:
                    b7:fc:be:fa:a7:ac:26:c7:34:82:3c:36:71:33:82:
                    45:12:ad:f5:ca:1f:44:d1:67:b5:90:8f:a6:b0:f1:
                    7b:96:17:e2:f2:71:20:e8:4d:2a:17:05:bf:3e:bc:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BA:05:5E:4A:F9:C6:CC:6B:EA:51:5B:F3:71:7D:E9:DF:65:93:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:50:31:eb:e0:cb:3b:7e:0b:88:ef:48:a1:d8:30:95:46:3e:
         1b:25:78:e9:a8:0b:2d:5a:0b:06:05:31:b3:6d:89:a4:9a:cf:
         73:ee:8c:ab:6c:f4:94:ca:96:47:af:42:79:9b:e3:bd:96:db:
         d6:0f:bf:5a:40:15:3a:09:df:15:85:85:ef:bf:15:83:25:54:
         01:8f:ac:61:76:9e:68:e9:e0:df:43:8e:33:95:bd:2c:97:07:
         fc:51:26:fc:52:54:0c:6e:5d:cb:bd:6a:25:22:b0:5e:5d:1b:
         4d:87:a7:43:e7:08:78:ac:78:68:ce:d3:da:12:33:91:85:84:
         a0:1e:44:77:03:91:2f:c9:34:06:4c:de:a3:ff:3d:c2:dd:77:
         97:82:59:db:14:94:35:39:28:08:5b:77:56:25:eb:65:e4:c8:
         36:f8:ef:3c:ab:5a:b6:f1:23:d3:18:8b:e3:29:a6:4e:8c:ef:
         2a:e1:6f:cf:e4:9e:55:2d:ee:55:13:88:76:80:01:f1:98:da:
         8e:f9:70:76:04:7c:3e:55:a9:7f:83:e6:e4:ae:60:48:3b:fe:
         ba:8e:a7:27:c7:6c:55:1f:55:91:19:72:b5:74:c7:d8:6f:81:
         f3:b7:60:28:b0:95:15:41:04:34:44:fa:b3:38:54:eb:71:ad:
         00:f9:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:21:01 2026 by rpki-client