Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
File:                     c794535d-4f66-3ef7-abd2-35d8f1551d49.roa (raw, json)
Hash identifier:          TkX+AUur2HjfL5zHGskJD/wsoT0XoeH5Iuow1FqMzSw=
Subject key identifier:   F2:70:8D:4D:80:5C:5B:CD:9E:62:A4:57:93:CA:4E:8D:C5:43:F7:DD
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584ED431EA47A25B872F923C3580
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     11650
IP address blocks:        2604:2e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ea:47:a2:5b:87:2f:92:3c:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=cfd32301-e87e-43ad-a5c7-2ed99d93f186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:7d:a3:1e:c4:b6:f2:2a:7c:4f:2b:ef:42:
                    cd:52:62:02:61:53:97:f6:b3:24:71:04:3d:4d:c4:
                    a0:14:c3:3b:97:40:b0:f5:fb:86:6b:df:b2:35:81:
                    a6:4e:96:58:16:b7:49:61:10:0c:5e:33:5f:0e:eb:
                    5f:06:ef:9a:a3:ef:66:7c:9d:61:69:28:6d:61:d7:
                    50:3e:f0:51:66:ca:fd:04:c0:01:19:2c:5c:50:2c:
                    f2:31:2b:ce:e0:ce:f6:90:ce:11:0c:00:b1:3b:dd:
                    23:4a:38:3c:67:0e:d8:4f:75:86:46:ed:a4:42:00:
                    75:e4:d0:5f:41:07:92:86:40:a6:c6:38:e7:d8:6b:
                    38:77:cf:12:f8:14:4c:b8:86:cf:40:88:e8:e0:3c:
                    67:e2:4d:22:2a:bd:c9:a8:4b:ce:77:1d:a3:fb:06:
                    a2:d6:70:17:a2:a7:f4:28:78:20:7a:e4:ad:fe:8a:
                    30:d1:80:d3:1d:c6:c8:84:04:a4:4a:84:27:41:e3:
                    de:93:b6:6b:96:ec:53:c8:be:16:32:b1:46:0b:54:
                    50:4a:71:28:ba:99:f0:ef:a7:94:5a:22:94:7c:18:
                    33:12:26:ad:f5:57:d6:e0:d0:1e:d5:e3:2b:0a:f2:
                    fa:f1:42:e1:71:75:12:ed:87:37:32:09:9a:c9:62:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:8D:4D:80:5C:5B:CD:9E:62:A4:57:93:CA:4E:8D:C5:43:F7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:0f:8b:c4:5c:5f:4b:63:53:23:1d:8e:d5:02:6f:3c:3f:
         d5:7c:fd:56:58:97:0d:b1:17:cb:60:7e:97:3c:37:4f:c6:eb:
         c9:e0:fe:39:c6:15:2d:8c:30:68:a4:99:a5:5b:24:e4:ee:30:
         e3:30:86:24:45:a7:a1:90:7f:90:f4:bd:d5:83:4f:98:6a:9d:
         07:27:23:1a:88:33:90:42:ef:62:5d:24:58:0f:24:f5:05:b0:
         cc:da:b4:17:40:44:df:a6:4f:81:d0:6d:26:bb:a8:57:35:6a:
         9a:71:b2:b1:95:90:05:ca:92:5c:42:4a:bc:98:e9:0b:f0:86:
         33:ab:c5:2a:4a:6b:4c:2d:4c:37:10:47:c6:0b:31:db:2a:bd:
         51:a4:59:82:b5:74:6b:54:45:bd:58:75:4e:39:43:7f:fd:a9:
         39:59:6b:da:16:52:f0:63:c6:da:90:00:64:37:4b:bb:a3:2e:
         c3:10:1c:b4:09:28:88:1a:34:41:08:84:44:5d:74:62:89:e9:
         55:67:76:81:cc:8d:eb:2d:36:cc:7e:51:c0:b6:ee:a7:23:d5:
         f8:6a:7b:14:22:b8:25:67:6e:b0:23:de:93:29:2f:1c:ff:43:
         2c:45:db:df:43:69:67:bc:69:e8:10:a0:30:cc:0d:f9:a4:4e:
         83:9e:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:09 2026 by rpki-client