Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa
File:                     5423c03a-697e-3ed6-9dca-a727e4820c14.roa (raw, json)
Hash identifier:          9X/0ALac2uN37llKlXwgyY5uDS9uKAjItBJZ9BEidHg=
Subject key identifier:   DF:C7:58:F5:A8:B1:DC:EA:63:E5:AC:FD:12:DD:FF:76:37:B2:D2:60
Certificate issuer:       /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Certificate serial:       010D0C9F4328584ED431EF66F6A604B2C3EE44E0
Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     32338
IP address blocks:        2605:6280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ef:66:f6:a6:04:b2:c3:ee:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=d766d057-9889-463c-9019-695289dee929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:39:9c:f4:3c:8c:44:80:65:6f:58:c0:2e:
                    80:7e:53:b9:d5:3c:1d:fa:bd:08:a8:e7:64:16:67:
                    37:ca:fc:5a:ca:15:90:8a:9c:10:1b:be:b6:81:ad:
                    1f:1d:a4:f6:0c:75:99:fe:d2:41:58:c9:c6:a8:59:
                    d2:8d:7c:83:72:b0:90:1f:05:5c:70:03:6d:65:ae:
                    1f:f1:83:29:06:be:25:a9:f5:a2:75:38:4c:c0:8c:
                    d3:ae:d6:f1:a9:95:a2:02:46:c8:e3:70:bf:f3:af:
                    df:43:ee:a4:3c:37:08:75:ca:4b:bb:49:b9:91:88:
                    07:34:7d:8f:71:46:37:5e:01:c9:19:c0:59:20:80:
                    ac:f2:0d:96:ae:c1:ec:a1:25:98:6d:6d:9b:7d:a5:
                    cc:93:92:9a:b6:d8:1c:a3:16:8a:64:f0:f6:68:86:
                    a7:a6:d4:0d:9d:e4:c4:0d:5d:7d:49:6d:77:7b:39:
                    0e:58:2a:73:a7:a0:66:44:b1:4f:79:a5:24:6a:d4:
                    c1:e7:8e:93:1b:35:99:25:9f:43:92:aa:11:8f:08:
                    96:c8:fc:78:b7:81:c2:f1:93:51:e7:bb:09:41:b5:
                    d3:1e:46:8b:ec:1c:bc:2b:76:80:ca:d4:45:8d:77:
                    b9:e7:b1:72:54:3a:dd:4b:9c:a9:7a:e5:40:ed:0e:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C7:58:F5:A8:B1:DC:EA:63:E5:AC:FD:12:DD:FF:76:37:B2:D2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:af:69:95:e1:7e:08:a1:5c:20:97:2b:57:20:42:91:90:09:
         f2:9c:c5:1d:ca:3f:ea:16:aa:08:94:45:79:26:89:83:b0:2a:
         1d:28:24:b3:d4:9e:d1:47:37:e7:06:ef:56:cb:ce:9c:a6:90:
         b6:b0:f7:77:1f:82:b9:09:74:f1:3e:7f:30:33:71:96:0c:c6:
         a6:e6:51:b9:4d:2c:83:ad:13:61:e6:8d:77:8d:f7:10:ad:72:
         35:33:8a:44:ab:7f:9d:51:7a:fb:9d:cc:6a:9a:87:47:13:11:
         02:7c:be:4c:2f:98:aa:93:73:45:5e:90:85:65:28:cb:8d:5f:
         41:69:b8:2f:aa:22:89:0d:d7:9b:d4:5f:5d:a4:22:3e:f9:a8:
         51:d7:21:65:19:f2:d4:cb:5e:79:cc:95:8a:09:36:90:3e:39:
         bb:c1:d6:6b:23:fe:cc:68:8b:7c:df:90:26:62:25:80:66:0d:
         c5:02:65:53:03:20:8d:11:0d:7a:08:b9:3c:7e:36:f2:e6:b3:
         38:da:70:96:be:34:0d:fe:d9:97:16:70:2e:4c:34:f8:49:0e:
         cf:85:b2:31:30:50:50:c0:4a:7f:33:df:87:ec:86:e4:60:99:
         5d:01:c8:6d:d0:76:0d:6b:d3:69:5e:ba:cf:8f:f4:b3:2a:b1:
         d7:a9:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:13:22 2026 by rpki-client