Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
File:                     92ecd3af-616b-30b8-8f04-b100fd223035.roa (raw, json)
Hash identifier:          fTXoVZPdv+iWYXwoMmj9y0t+uhwXWZJScL7eeDJjwmI=
Subject key identifier:   B4:95:16:28:FE:03:26:07:E9:C5:38:E6:57:48:5E:10:7F:6A:85:10
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584EBB11BABB612C76A5860E6D60
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     2728
IP address blocks:        2605:7b80::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ba:bb:61:2c:76:a5:86:0e:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=696e9485-d999-43a7-a9ae-a31722aa19a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:15:55:7a:fc:4a:24:84:93:26:80:dc:43:
                    ff:05:fe:dd:a8:60:2c:76:cf:8e:73:23:2d:63:8b:
                    9c:4b:10:93:35:13:a3:9d:88:87:01:83:44:87:7b:
                    18:1d:55:9b:37:fa:78:01:e7:66:c9:d2:3d:32:32:
                    11:50:ae:94:69:93:ef:7b:c2:50:8f:fc:cd:ce:ce:
                    10:7a:18:1c:c6:2f:c4:6b:65:1e:4f:e2:c0:8f:26:
                    c8:08:d8:e1:a5:6a:92:3b:7b:1a:6d:d3:d8:be:e3:
                    3d:18:e6:cb:c1:3d:c1:8a:72:36:94:e8:13:8e:2b:
                    e8:e3:b7:7a:48:30:f6:76:ec:2f:ec:76:5b:73:a0:
                    9b:e9:c0:e5:e3:f4:82:48:02:66:4e:fd:72:46:12:
                    71:0d:6d:98:fb:ce:6a:ae:77:46:af:b7:56:c0:a0:
                    b5:e8:3b:08:5f:68:53:b7:d5:7b:31:eb:f4:0d:11:
                    b7:d4:7d:75:43:3e:59:49:b6:28:51:91:0d:c8:4b:
                    82:d0:47:b4:24:8f:64:86:49:91:9d:c4:40:b5:e5:
                    4e:97:5c:21:89:bd:c2:1e:9b:43:ba:98:6f:c2:3c:
                    01:aa:dc:dd:89:c8:96:cc:27:56:8b:bf:0a:4f:cd:
                    53:c2:89:7c:c3:73:25:e4:ea:cc:13:9b:6e:b8:b4:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:95:16:28:FE:03:26:07:E9:C5:38:E6:57:48:5E:10:7F:6A:85:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:7f:0c:f4:83:2e:79:4c:74:01:26:52:70:af:d5:72:c6:
         61:0c:81:37:52:8c:49:a5:1a:79:26:52:1e:83:13:36:18:49:
         58:2a:18:b1:9f:d5:cf:69:1a:68:32:6f:e3:1f:b3:54:29:a1:
         a5:f7:ea:89:8e:4e:c5:13:bf:98:c9:04:74:1c:f1:23:3f:e9:
         fc:ad:88:20:be:96:68:bf:dd:13:39:c7:72:63:64:87:85:e6:
         82:44:09:8d:0a:df:d5:e6:c3:d1:cc:ef:72:47:7e:6c:00:25:
         d1:2a:5f:d8:35:ef:8e:5e:0c:0d:c3:24:ff:81:d4:67:2a:ab:
         c7:8c:07:2e:eb:a3:e8:92:36:da:8d:d0:7d:87:92:1d:de:27:
         52:dd:67:e8:13:fa:6f:aa:cf:4f:1d:bd:d1:ae:3d:19:6d:65:
         e4:b2:82:55:67:5d:5e:da:93:41:aa:25:92:1f:9d:33:a4:00:
         c6:56:66:79:76:24:5b:77:a2:17:d6:a6:7f:94:0a:f8:59:ea:
         1f:a6:1f:84:6c:a4:84:ef:55:7c:6d:dd:f5:ac:4c:f9:56:88:
         a4:84:65:71:a1:45:cb:90:58:01:ef:2a:b2:63:9f:eb:63:fc:
         cc:e7:c4:dd:82:f9:09:b1:de:62:6d:8d:77:44:da:35:86:de:
         8d:d2:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:16:43 2026 by rpki-client