Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/046194d7-7434-3947-8320-13d99bbe463f.roa
File:                     046194d7-7434-3947-8320-13d99bbe463f.roa (raw, json)
Hash identifier:          4E+PrqAZuLEDhMOeQ7iN3ni70V+ddSHFWQbTEv5M4oQ=
Subject key identifier:   33:E0:71:EC:AD:45:6E:B4:A3:35:EC:A5:07:A5:A0:C0:32:11:D7:EB
Certificate issuer:       /CN=da2a5577-6855-4d86-a3f1-a04b562e9c06
Certificate serial:       010D0C9F4328584EBB11AEC852FEB6CB4DE55700
Authority key identifier: 48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/046194d7-7434-3947-8320-13d99bbe463f.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     32248
IP address blocks:        2607:3f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ae:c8:52:fe:b6:cb:4d:e5:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da2a5577-6855-4d86-a3f1-a04b562e9c06
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=30ce8d64-489a-40a2-91cf-d9e870127ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:bf:3d:bd:53:9e:03:7a:33:82:9c:d7:54:
                    49:8b:d4:e4:bb:18:d1:42:07:76:f3:cb:dd:5c:a9:
                    a3:d4:1e:ea:dc:c0:b8:94:25:41:61:7c:e9:97:a3:
                    bd:d1:bb:95:9a:c7:ee:11:13:79:59:56:30:1a:8d:
                    31:8c:c7:fa:7a:af:fd:f0:10:8e:48:63:d6:39:94:
                    0d:fb:3b:2a:ac:e1:da:90:6e:88:b8:42:59:7e:e2:
                    4b:80:67:5e:0c:4c:f4:87:64:3b:fb:0f:3c:97:98:
                    65:df:fd:55:ef:76:d8:ca:bb:f2:8c:6c:01:94:c2:
                    d6:d1:5b:7f:c8:33:c0:3c:2f:33:92:07:6a:cb:5b:
                    7e:46:f3:f6:e4:d8:cd:5a:f1:83:c3:0a:8a:9d:68:
                    c6:5b:6d:7d:81:20:39:51:7e:10:6d:6a:e3:e7:42:
                    43:38:c3:0d:97:e3:11:29:80:c8:e4:dd:aa:45:51:
                    04:be:ae:42:ce:ee:47:a8:95:72:38:10:80:4a:a0:
                    fa:93:dc:21:10:94:ec:27:06:39:a2:29:37:4e:e5:
                    91:4d:fe:e3:de:de:53:b5:1f:06:12:8d:61:b3:8f:
                    1b:df:20:d3:9d:49:07:63:35:0b:0b:d3:61:2d:9b:
                    38:20:ac:cc:21:94:f0:03:29:66:fc:5b:fd:ac:3e:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:71:EC:AD:45:6E:B4:A3:35:EC:A5:07:A5:A0:C0:32:11:D7:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/046194d7-7434-3947-8320-13d99bbe463f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl

            X509v3 Authority Key Identifier:
                keyid:48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:34:1b:c7:20:ad:5f:bd:80:a9:12:b5:0e:88:c8:8e:68:70:
         80:12:57:76:ff:24:12:35:e9:fc:d2:2a:d2:ee:c4:4c:43:8c:
         0a:cd:b8:6f:11:cd:d7:ba:12:2b:bc:c1:43:e3:4a:dd:9b:a2:
         f7:a6:b0:aa:d6:fe:53:8e:5c:21:23:9c:9d:53:a0:5b:f4:b0:
         a0:ac:f4:59:8c:48:08:53:0d:ee:f7:0d:0b:d1:b4:07:73:a8:
         a5:14:93:c0:b8:7c:02:26:9d:f5:20:ba:7f:fc:1a:c7:25:8f:
         94:74:cf:23:2c:a2:91:a3:08:71:7c:ce:67:b8:6f:91:ae:6d:
         5c:0e:fa:ce:19:7b:06:56:fd:52:26:83:f7:fb:7c:ba:20:1b:
         82:40:ad:79:c8:49:9e:38:38:fa:da:7f:6b:a7:9e:f2:a8:c9:
         a9:78:0e:37:2f:ff:37:6d:30:65:09:6c:5d:d7:97:6e:f4:d2:
         eb:06:18:a1:f8:0c:d7:e2:59:26:94:f2:7c:43:9c:34:b0:c9:
         2b:f9:16:d1:b9:30:6b:cc:5f:08:f0:9c:44:5b:79:ed:25:75:
         3a:74:76:10:80:ba:fd:b7:51:bc:cc:54:5f:bf:35:59:c0:f0:
         0b:c0:25:9e:be:dd:60:2e:09:94:ff:4b:7d:e2:58:cd:8e:b1:
         be:c9:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:21 2026 by rpki-client