Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa
File:                     c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa (raw, json)
Hash identifier:          ah8KzugFtW2Kz4eZPMNFkE2dbzq5CVNgWTv99DWLuPQ=
Subject key identifier:   02:89:60:52:C1:56:13:C1:15:D0:B3:1B:61:36:75:01:07:F2:D1:A3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EFE122311EA48CA82F58F0080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2001:418:1430:100::/56 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:23:11:ea:48:ca:82:f5:8f:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=dec5240b-53b7-42e9-9125-0b67feafc442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:97:13:60:74:ab:8c:f4:9b:e4:4a:64:34:
                    41:8e:11:29:5f:ba:04:7c:04:a6:c9:31:c4:49:c4:
                    06:71:d9:99:28:60:db:0d:5e:b6:44:8d:79:f6:66:
                    9b:5d:1e:df:ff:d2:9a:2f:74:aa:42:8d:2c:a8:67:
                    29:94:79:ec:27:27:15:74:ae:d4:b2:0c:33:cc:89:
                    e9:c9:27:06:cd:90:be:79:20:1b:48:01:03:06:d1:
                    a7:61:5e:67:28:7e:e5:6f:6e:99:24:d0:43:d4:8c:
                    62:50:76:c3:f4:a7:3a:4d:f8:61:56:47:c7:f2:c2:
                    3d:6b:36:d6:08:1e:94:54:e3:f7:62:81:5a:c4:8c:
                    4f:83:4d:a6:86:5d:fa:b6:3e:4b:4a:3e:41:06:c2:
                    bb:d4:05:99:57:e8:d4:37:35:f1:d4:10:2c:51:88:
                    52:20:2a:4e:30:a3:32:b6:58:74:0d:b9:13:53:88:
                    31:1f:46:5f:06:a5:7c:38:7d:d8:2d:b2:a3:c2:50:
                    10:d4:6b:a0:6e:70:21:98:c4:40:2d:86:2d:34:f3:
                    03:31:98:78:40:5c:76:ea:b1:e5:2b:f7:e5:c4:fa:
                    d8:c8:5a:8e:18:4c:39:c6:b3:07:03:53:2b:b1:87:
                    69:ec:e4:7c:05:48:47:95:79:79:2a:e9:c4:6e:57:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:89:60:52:C1:56:13:C1:15:D0:B3:1B:61:36:75:01:07:F2:D1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7c7b0cb-bdc7-3921-ae1a-5f178b969d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1430:100::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f7:12:1d:c3:37:3c:5b:ce:38:b5:92:20:ef:2b:16:23:40:
         31:de:d8:0f:d9:c4:61:f2:1b:d6:91:5d:d6:32:96:d8:e7:20:
         f4:68:f3:22:65:6b:3e:3a:5d:c7:49:8c:ee:0b:23:8b:f7:55:
         92:a3:95:6a:87:27:03:1f:65:11:e9:e7:7c:8b:5c:15:72:a7:
         ae:f3:7b:24:73:4f:25:76:9c:52:3e:65:53:f5:71:97:c8:72:
         a9:34:da:58:30:99:7f:65:ab:7f:75:7b:b9:90:97:90:cb:b9:
         9e:2e:a8:42:51:00:72:f7:8f:53:26:58:ba:e7:1a:3e:a9:65:
         63:be:28:43:d0:24:08:fa:0f:99:0f:b5:c0:fe:48:95:cb:9e:
         d5:00:c5:f1:2a:6f:9c:97:82:22:d7:c3:02:02:22:91:40:d3:
         38:b9:2b:29:16:5a:70:0c:e3:3e:bb:aa:5e:84:3f:4d:06:28:
         74:52:96:04:9a:6c:b0:e3:a0:ee:b3:e8:30:be:ff:99:d2:a9:
         01:8e:dc:f9:85:10:64:15:bf:8d:17:90:d0:47:c1:88:82:4f:
         49:02:44:11:c6:21:94:45:ff:31:76:0b:d9:3f:c2:ad:da:4b:
         31:c4:1e:bb:a7:18:45:f6:32:47:d4:db:8d:5f:52:89:de:c1:
         4b:ae:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:58:56 2026 by rpki-client