Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7107edab-fb43-3733-85aa-4b3bdc12df38.roa
File:                     7107edab-fb43-3733-85aa-4b3bdc12df38.roa (raw, json)
Hash identifier:          Cc38KxZeDJPMufQFOPJybc1HnljJRCLazBUW/7NUBMQ=
Subject key identifier:   4E:44:33:A3:A1:9B:1E:4A:0E:61:3E:41:1A:DA:B6:38:14:D7:76:FB
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584F0ED22B31B70657CDA30E4800
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7107edab-fb43-3733-85aa-4b3bdc12df38.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     397268
IP address blocks:        2604:9c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:2b:31:b7:06:57:cd:a3:0e:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=c5c2f20a-9ef5-4f0d-8a5e-7fbbe731c299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:eb:1a:a5:05:2d:21:63:ae:c8:3e:c0:d4:
                    cc:3a:45:60:e9:4d:1d:87:c8:2b:61:5a:ef:94:ef:
                    ed:e6:f0:7a:aa:f7:0c:31:60:a4:e8:9e:ab:e3:f5:
                    96:b3:b9:fe:5e:86:60:b8:43:65:f1:d0:7d:0f:9d:
                    ee:93:59:9a:a1:d8:9b:8c:5e:45:bb:02:cd:15:37:
                    4c:44:9d:05:31:ab:ee:11:e0:0c:b2:23:d8:5b:0f:
                    40:fd:e6:c3:44:1b:5d:ee:76:31:79:f5:5b:fc:25:
                    a5:0f:7b:6f:6d:a2:2f:93:97:bd:76:bb:35:52:e6:
                    6e:71:c0:a9:b3:78:e4:b2:30:e5:77:1d:ae:2c:a8:
                    44:01:b0:4c:cb:fd:83:9c:1a:4e:0e:b0:9f:32:15:
                    d4:5c:74:f5:7d:69:06:34:2f:c7:77:36:ac:e4:59:
                    0d:a1:fe:65:fe:1f:e9:1d:90:9a:e7:47:d2:e8:a2:
                    a0:4c:61:28:98:2c:79:f7:32:93:20:70:c3:87:17:
                    5b:c5:13:2b:11:9f:ed:f8:f5:74:cb:4c:07:8b:72:
                    79:b3:0d:f1:18:69:b4:2e:b0:ca:92:06:9c:e7:12:
                    8c:94:d5:71:45:b9:56:94:ad:dd:c5:8f:ec:69:bd:
                    3c:b4:b4:ce:02:32:8f:ac:a2:d9:ef:d8:28:07:70:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:33:A3:A1:9B:1E:4A:0E:61:3E:41:1A:DA:B6:38:14:D7:76:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7107edab-fb43-3733-85aa-4b3bdc12df38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ff:bb:e3:61:bd:7e:71:be:59:6f:e8:2d:03:71:05:d3:f8:
         07:e2:07:03:f3:7f:6f:e3:dc:9f:c4:0d:75:90:2a:6d:2b:42:
         7d:1a:3b:f2:4b:9b:65:ae:83:31:8d:d8:2a:8f:9b:a0:f9:73:
         23:8b:cb:8d:84:1f:5a:18:2b:73:bc:e7:92:07:0e:d0:34:67:
         ed:0e:39:e1:e5:ea:dc:7b:6f:46:58:22:bc:33:8f:42:6f:08:
         a3:4f:dd:42:13:83:a5:73:55:33:90:d6:d0:82:89:30:06:be:
         35:30:72:1c:c8:4b:a0:4e:74:83:ff:86:a3:f6:f9:b9:83:c7:
         d3:a2:6e:b5:13:97:ac:cf:64:e0:48:d2:f9:2c:5f:0d:3b:cf:
         02:b4:3a:8a:c0:fe:63:c8:db:26:16:77:33:ca:5c:c3:7e:c5:
         33:8e:5a:26:72:52:aa:9c:40:a7:81:fd:4a:4a:ce:bf:d5:2a:
         00:36:e1:cf:9a:61:f7:1c:28:6d:55:19:b2:11:b7:f2:ba:d3:
         51:c5:a3:e5:e6:fc:e7:c0:9f:88:a1:39:82:f5:f0:9c:13:f7:
         18:bf:aa:8f:a1:5a:00:6c:2c:3c:3a:1d:bc:78:b6:16:2d:74:
         b9:05:02:ce:e6:79:b7:c4:00:bd:b1:e2:13:07:ea:ac:e2:4a:
         34:4a:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:28:45 2026 by rpki-client