Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa
File:                     2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa (raw, json)
Hash identifier:          1+DqlBJX7jsZW2WEHGmt9eP2BfN59p6yI7GSvsbjzxg=
Subject key identifier:   12:2C:F8:AE:B7:E2:F7:17:B9:78:6F:4C:65:41:1E:8D:FD:5E:EF:FA
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584EC7A1D27F0F9817F49A56EC40
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     35847
IP address blocks:        2606:a300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d2:7f:0f:98:17:f4:9a:56:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=93352e19-9751-4805-b29d-445321bbc4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:49:d4:83:ec:91:03:13:cb:f8:9f:1c:45:
                    77:15:61:3f:b9:0d:ec:0a:0e:ab:f5:0f:e6:41:ee:
                    a9:93:35:d9:75:41:17:db:53:eb:b3:2a:eb:13:44:
                    d3:84:36:90:a3:19:f8:67:2f:50:83:da:fc:75:89:
                    80:f8:fd:2d:91:ea:77:d5:ff:7b:a6:a5:e1:48:82:
                    06:12:ad:2e:9f:24:fe:04:01:31:9a:62:3b:ba:10:
                    1f:84:ea:5a:e4:c2:4e:9d:32:bd:79:4d:fb:95:18:
                    e7:6c:6f:08:fd:27:97:d4:38:40:47:27:91:46:04:
                    87:93:ed:78:c5:a7:38:db:b1:b3:ca:04:ae:2c:2d:
                    e8:8a:ce:e2:88:10:50:77:9d:78:c3:b6:08:ba:de:
                    ef:79:41:40:fc:a9:59:77:b6:c1:86:04:31:db:f1:
                    31:ad:cf:bf:aa:17:e7:d0:b0:82:3c:25:ac:ba:bd:
                    a6:45:13:0c:c4:28:e2:76:3b:c7:58:e5:01:d0:17:
                    29:bb:64:be:75:af:1d:69:11:a8:58:5d:e4:b9:c8:
                    c0:0c:47:65:ee:4a:a7:c5:3c:31:13:53:04:d4:19:
                    04:1f:2b:65:e4:d5:a6:72:89:86:9f:2e:86:3c:c3:
                    9a:ea:e7:39:30:1b:dd:e8:ae:a2:7c:b0:f0:ca:9a:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:F8:AE:B7:E2:F7:17:B9:78:6F:4C:65:41:1E:8D:FD:5E:EF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:b4:c9:73:1e:37:2c:43:31:e5:6d:4f:24:4f:a8:e7:fa:
         50:5b:f4:05:a9:64:61:74:ec:e2:39:d5:9b:1b:54:12:72:7f:
         3f:a5:40:c7:e1:34:47:03:1d:56:2d:7c:25:83:69:84:04:b4:
         9c:a7:72:e7:51:18:e9:30:b3:e8:bf:e9:5c:e1:ce:9e:ce:60:
         02:bf:df:98:76:f8:e2:c8:d2:e5:0a:7e:18:73:a5:08:58:c5:
         45:35:53:ae:76:8d:f9:63:d2:e0:d5:77:69:20:aa:db:72:01:
         28:91:34:68:5f:43:be:cb:73:05:13:30:55:72:55:f4:fa:4d:
         2b:eb:3e:38:d4:2e:85:b7:e2:14:74:a4:d0:2b:d0:17:c5:c3:
         39:99:01:01:8e:e4:ad:1c:9c:7d:4b:7b:a8:eb:02:42:32:18:
         c1:aa:a6:10:51:bd:6e:f3:2f:ad:bf:2b:d6:f4:07:db:86:8c:
         ce:62:4d:3c:3c:12:82:bc:bd:d7:4c:03:27:92:6c:ff:81:be:
         15:07:0c:b5:91:71:79:c2:f8:8a:95:45:7c:3d:d9:b0:80:bb:
         00:21:45:6f:a3:8d:93:e4:4d:cb:75:00:15:96:2a:93:6f:70:
         4c:29:02:3f:32:d0:a7:14:7c:fb:af:85:1e:37:67:18:9f:50:
         f5:73:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:48:12 2026 by rpki-client