Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/632aa5d8-eab3-3508-8a87-4e75f23552b4.roa
File:                     632aa5d8-eab3-3508-8a87-4e75f23552b4.roa (raw, json)
Hash identifier:          /uf1srF9LKh9krD2lhWGFf8cLGIsd/Fx00+8HWWX9NY=
Subject key identifier:   68:6E:CE:57:4D:BE:74:D5:4F:01:23:70:A0:77:E7:BB:39:1C:14:56
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F7BB2FF1874F11F89C29E2400
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/632aa5d8-eab3-3508-8a87-4e75f23552b4.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     3938
IP address blocks:        2001:418:1450::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:ff:18:74:f1:1f:89:c2:9e:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=226e024f-b157-4975-8453-dd2170d56c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:68:dd:10:29:cf:0a:41:ef:f9:eb:d6:63:
                    2c:5c:91:76:c5:39:c5:46:b1:9e:03:1e:fb:b5:9d:
                    a6:a3:1d:86:f1:c2:11:d4:17:16:ea:25:ca:32:0e:
                    0c:e3:7a:78:54:2c:0f:7f:45:7a:46:b5:bf:8c:c8:
                    02:f8:01:d0:59:50:3b:80:4f:b8:68:9f:d3:43:3a:
                    a4:f4:bc:9e:d5:74:66:a7:0e:79:c5:8b:21:0d:61:
                    9a:9e:4b:1b:65:5a:a8:45:84:13:d7:7c:f8:5f:3a:
                    d9:3b:96:3d:d3:8c:17:99:4f:7c:0d:01:de:b9:04:
                    b7:bd:2c:35:cc:33:14:99:74:2c:5c:16:1f:30:e5:
                    55:23:a7:75:be:72:2c:21:cb:41:36:54:55:e5:a3:
                    e6:16:97:02:b8:5c:ea:58:66:0d:4c:8f:ab:cc:ab:
                    b4:5a:99:b1:bc:23:d0:a0:94:5e:81:6b:55:e4:e5:
                    46:5e:57:1e:e1:c0:4d:cd:e3:c8:47:91:a6:20:83:
                    5a:5e:dc:fa:e4:8f:f3:94:2a:f5:ac:ba:2d:9d:09:
                    d7:be:2f:72:73:45:32:55:e0:ab:34:49:1b:90:84:
                    b9:74:b3:c6:26:ce:73:6d:50:d5:c1:eb:e1:67:08:
                    71:e6:44:5a:47:61:19:d8:db:a7:ac:36:a6:9b:98:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:CE:57:4D:BE:74:D5:4F:01:23:70:A0:77:E7:BB:39:1C:14:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/632aa5d8-eab3-3508-8a87-4e75f23552b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1450::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:59:d9:c3:d7:a1:07:a7:27:0c:6c:91:c5:cc:25:28:14:
         69:2d:5d:f8:b6:d3:7f:6c:84:04:e8:19:74:61:07:04:c4:9c:
         bf:05:aa:16:ac:4f:41:25:fa:e2:86:cc:14:fa:6f:17:fa:0d:
         75:16:3f:6a:bb:1d:55:40:e0:e7:3a:c1:41:63:fa:a5:f6:c5:
         33:1b:f1:e5:4f:ae:0b:5e:ea:fb:b1:de:fb:c8:a5:2b:23:d0:
         57:90:14:39:95:85:0b:c9:84:02:86:77:49:af:5d:f5:ea:62:
         0c:a6:6e:86:dd:99:c0:39:f1:9e:9b:76:12:51:ea:c7:0a:ab:
         8f:02:22:1f:1b:ed:05:a3:17:0e:be:cb:50:e2:4e:8a:6a:35:
         22:70:b5:44:0a:62:0e:8d:b3:bf:b0:65:6a:77:b6:a5:ee:a5:
         a6:b7:6b:31:45:11:19:9e:18:4e:47:42:98:b6:6d:b2:b1:09:
         ef:73:fe:05:d1:19:a0:64:dc:ac:9c:c5:0e:6c:6d:f1:cd:1c:
         e8:33:fd:03:cc:13:42:63:1e:ba:a3:0a:47:f1:53:0d:db:02:
         91:b9:8b:bf:a9:2c:f3:7d:1f:0a:c0:67:08:f3:46:10:f5:f9:
         34:1e:4a:b6:5a:b6:e9:5f:cf:0c:2b:f4:b0:73:eb:42:bd:37:
         f6:da:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:25:33 2026 by rpki-client