Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa
File:                     34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (raw, json)
Hash identifier:          ifxk/h/8vOcisKki+nZUVt2dJ28P+U6c5BSy5S1lM/o=
Subject key identifier:   70:2F:B9:DF:FC:03:68:F3:CA:D7:7F:A4:6C:48:F4:C2:A7:7B:D1:C4
Certificate issuer:       /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Certificate serial:       010D0C9F4328584EF2E76C0A12A359425CBD2E00
Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        2606:e540:c00::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6c:0a:12:a3:59:42:5c:bd:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=7291509c-ba66-4592-a7c9-5459aef6f04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:fc:a7:05:c8:aa:52:fd:09:c5:d8:17:2c:
                    9e:77:12:fd:95:80:dd:2f:c2:dc:71:c3:12:93:b4:
                    d2:55:d1:1c:69:f7:33:12:86:8b:1d:98:15:49:14:
                    a8:5b:d8:db:02:1e:d7:84:38:79:80:e2:a8:09:7a:
                    e4:8c:4b:6c:70:cb:bd:28:07:ab:ce:a1:10:67:f8:
                    21:f1:d3:b8:19:21:3b:66:94:34:8a:fb:4e:01:cf:
                    6e:9e:05:bf:55:70:60:35:0c:fd:8f:99:ac:4d:1b:
                    64:26:ec:cf:29:62:a6:d4:65:7a:43:71:2f:33:39:
                    c5:1f:d9:d3:e9:69:77:28:8b:79:9c:6f:98:5f:bd:
                    f9:7d:ef:cf:fb:a8:bb:53:c2:a9:74:74:58:3a:2e:
                    2f:45:02:c5:fc:b4:d1:df:f4:90:c5:f6:ce:f4:78:
                    19:7b:3e:1e:da:b4:bc:5f:ad:fb:13:3b:94:3e:b9:
                    85:92:c2:41:f9:d8:06:84:03:23:d8:32:40:5e:58:
                    7d:56:70:50:89:ec:b2:df:04:c2:ff:4f:bc:57:59:
                    3d:c7:8c:f7:ed:ea:2f:de:ec:0c:51:55:23:f2:1a:
                    af:55:09:82:40:ad:05:89:59:05:97:af:ae:6b:67:
                    aa:cf:5f:04:33:7e:67:90:8a:70:3e:c4:54:f5:1d:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2F:B9:DF:FC:03:68:F3:CA:D7:7F:A4:6C:48:F4:C2:A7:7B:D1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl

            X509v3 Authority Key Identifier:
                keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e540:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:a4:bc:70:62:02:fe:ce:b2:45:88:5f:bf:ae:ef:b7:3c:
         50:a1:c0:8a:b1:f8:c4:88:28:47:08:1a:aa:3e:71:2e:1e:ea:
         6b:9b:3a:c5:a6:63:23:4d:f5:17:41:b9:88:83:8f:0d:23:30:
         0d:c6:7f:6d:44:5a:bf:89:5b:b0:5d:cf:57:03:b3:5a:ff:41:
         6a:ec:34:58:12:10:bd:98:5f:e6:1a:7b:b6:bc:81:ff:d0:8a:
         7f:d1:1c:c1:8f:2a:a6:fd:bb:90:47:c4:80:b0:a1:2e:39:f8:
         1c:55:c6:70:9e:8b:2c:83:1b:86:af:f7:75:ab:8a:61:e1:b3:
         dc:15:d2:11:77:27:a2:bf:c2:39:5e:cc:8c:65:a4:ab:bf:86:
         ed:09:1e:0b:6a:fa:43:a4:d8:44:07:e9:6f:10:c5:e8:76:ae:
         fb:a5:82:18:f5:37:82:48:9f:4d:84:6f:d4:df:79:f0:82:5d:
         8a:42:d4:92:ac:b1:d8:01:fa:b2:88:11:34:be:e5:66:7d:25:
         a9:db:19:fe:89:f2:78:94:d2:97:c8:02:25:45:70:02:4d:5a:
         24:76:8c:ab:40:b2:a7:8a:14:48:e9:e6:2b:20:31:0e:20:0f:
         db:f6:40:a6:9c:1e:24:b3:b0:3a:d1:c1:53:40:7e:4e:bf:e6:
         b2:a0:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:49:32 2026 by rpki-client