Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187/45680b37-2978-320f-872f-6c775f5cd3ea.roa
File:                     45680b37-2978-320f-872f-6c775f5cd3ea.roa (raw, json)
Hash identifier:          IZgQUoI4NOnXbgqlw8hsJbYdFJSPLUXzPT7PRTHU8g8=
Subject key identifier:   DB:AE:A2:D8:00:2B:00:3C:FE:25:97:78:18:F4:9D:B3:F8:B8:F6:A9
Certificate issuer:       /CN=cf888184-6794-47a2-b5f0-98234d076187
Certificate serial:       010D0C9F4328584FB3A6555293EC18D956613B80
Authority key identifier: FC:D4:11:6C:01:BE:63:5D:14:C4:21:A9:EA:BB:B1:4F:1D:C4:3F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187/45680b37-2978-320f-872f-6c775f5cd3ea.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     400381
IP address blocks:        2607:38c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187/cf888184-6794-47a2-b5f0-98234d076187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187/cf888184-6794-47a2-b5f0-98234d076187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:55:52:93:ec:18:d9:56:61:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf888184-6794-47a2-b5f0-98234d076187
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=8284853e-9b9b-4af3-ac03-b7c37713d0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:e0:10:d7:f2:12:e8:b1:dc:a8:51:17:8d:
                    a3:97:c5:6a:4e:8e:b6:13:13:62:17:33:94:5a:9f:
                    28:c2:ea:d5:54:fb:e4:05:10:bf:89:88:4a:4c:5a:
                    d6:52:82:66:99:cc:dc:42:8d:9f:7d:fb:cc:a3:79:
                    74:80:0a:d2:92:a0:e7:b7:f0:0a:b8:2f:11:47:71:
                    dd:be:cf:e0:c5:0f:c6:45:fa:b8:dc:39:db:e9:a9:
                    f6:df:c1:22:53:1c:3f:5b:db:af:46:b3:f4:18:94:
                    41:b4:e8:5b:2e:0a:8b:3c:67:6b:73:19:b7:19:59:
                    a3:17:80:0b:61:ad:71:9d:b8:27:f1:ce:93:47:36:
                    1c:65:67:27:5e:a7:71:d8:d6:0e:32:09:bc:2f:43:
                    6e:bb:b3:13:42:84:56:71:c2:c2:d0:4d:9e:2e:4a:
                    41:c8:54:7d:a6:9a:62:6a:8b:ea:ab:ba:77:a9:24:
                    cd:70:57:aa:35:6d:1c:ee:e7:29:2a:31:ae:db:fa:
                    b4:d4:6f:da:02:09:32:56:3b:5e:02:da:f5:4f:a1:
                    98:df:2d:f9:e6:b8:91:85:80:bf:53:7c:06:0f:f1:
                    b1:38:ca:d0:be:27:b4:95:97:52:3d:82:1f:78:d7:
                    bf:be:47:3f:28:06:0e:15:9a:5d:b1:88:cb:b7:6d:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:A2:D8:00:2B:00:3C:FE:25:97:78:18:F4:9D:B3:F8:B8:F6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187/45680b37-2978-320f-872f-6c775f5cd3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187/cf888184-6794-47a2-b5f0-98234d076187.crl

            X509v3 Authority Key Identifier:
                keyid:FC:D4:11:6C:01:BE:63:5D:14:C4:21:A9:EA:BB:B1:4F:1D:C4:3F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf888184-6794-47a2-b5f0-98234d076187.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:38c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:28:e5:0b:0d:c6:0a:9e:45:53:d3:24:de:4d:98:0a:7b:51:
         31:9f:d9:b0:00:e9:ab:6c:2d:a1:4e:67:57:db:f2:d2:0b:f1:
         23:eb:22:30:fb:b6:8b:0c:95:1c:a5:d5:a3:a7:01:c6:ee:4b:
         a1:71:32:17:3a:23:6d:76:4c:7d:e3:3e:58:e2:4a:f1:e6:ee:
         5e:6b:88:f2:f8:b9:d5:98:af:06:a5:68:8c:c9:87:20:ef:54:
         be:c7:f0:a2:3c:69:0d:6f:9c:03:a5:f0:aa:99:bc:cd:35:9d:
         9e:5e:7e:99:43:a2:e9:3b:02:7b:f6:3d:6b:33:47:73:9e:56:
         77:c5:4a:85:4f:0e:14:9a:be:98:8f:f5:39:6d:0d:0c:2e:d7:
         02:9e:7d:ec:72:7c:f5:b3:02:5e:92:49:a1:1d:13:92:f6:dd:
         d0:cc:fe:fa:27:97:fd:0b:b3:d0:b1:1a:48:23:b2:c4:02:a4:
         71:20:8e:b2:44:b5:40:58:28:84:1d:e4:d2:a3:22:4b:16:b1:
         28:fb:22:bd:dc:ab:ef:59:76:bd:71:0a:77:cb:f0:cc:1c:87:
         1c:65:17:11:66:b0:2c:7d:eb:1a:9e:46:5d:ca:8f:c9:d8:fb:
         c1:a7:c7:6c:c0:f7:6c:e5:13:b3:e1:f9:2e:4a:95:16:6d:b3:
         2b:45:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:14:18 2026 by rpki-client