Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/fff3ba01-2628-37f5-a305-6337f362cf66.roa
File:                     fff3ba01-2628-37f5-a305-6337f362cf66.roa (raw, json)
Hash identifier:          0Umf7VcUFCFyFdsMnb9GWhXPnEh6ETEaaNz9ZkaXY8U=
Subject key identifier:   4A:3C:42:25:F8:DD:7C:99:1E:EB:8F:A3:7A:3B:4F:AD:97:D8:69:56
Certificate issuer:       /CN=a4f253af-de59-456e-9354-4078d22e8677
Certificate serial:       010D0C9F4328584ED04E049792E879BAAE2A5380
Authority key identifier: 81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/fff3ba01-2628-37f5-a305-6337f362cf66.roa
Signing time:             Wed 12 Aug 2026 15:33:51 +0000
ROA not before:           Wed 12 Aug 2026 15:33:51 +0000
ROA not after:            Tue 10 Nov 2026 16:33:51 +0000
asID:                     396982
IP address blocks:        2607:4240:4003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:4e:04:97:92:e8:79:ba:ae:2a:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f253af-de59-456e-9354-4078d22e8677
        Validity
            Not Before: Aug 12 15:33:51 2026 GMT
            Not After : Nov 10 16:33:51 2026 GMT
        Subject: CN=dc354573-c3ee-4080-9d16-d764573a5c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:bd:d6:33:7d:64:1a:69:a0:96:ef:40:75:
                    71:da:52:73:3b:43:33:64:ee:ed:58:20:1f:8a:71:
                    3c:be:ea:59:a1:df:98:fa:aa:38:8d:4e:e4:3d:e6:
                    9a:e7:21:51:cd:04:d4:38:31:96:e3:8e:8f:6f:19:
                    04:48:87:2a:ce:bd:13:5e:6c:87:20:ef:27:77:86:
                    42:3e:06:b3:7e:af:d0:df:f8:20:11:b8:f5:c3:51:
                    83:9d:ef:cf:92:65:8e:c0:b6:46:6d:fd:02:a6:d4:
                    e5:1f:bb:50:fc:50:19:60:89:2a:f9:cf:5b:03:0f:
                    a0:65:10:be:42:fe:ab:e2:12:fb:d1:48:dc:59:d6:
                    1a:cb:d8:88:9d:99:0b:c7:fc:35:55:78:df:32:2d:
                    e6:c1:26:4b:43:e9:12:42:e9:21:78:0c:df:17:f5:
                    00:20:92:a9:9d:88:a9:0f:85:e8:3c:e9:cf:da:ad:
                    46:c3:df:a3:2a:19:93:b1:a4:b1:59:aa:fb:fc:08:
                    16:e8:a5:f0:5b:28:2d:16:21:a1:51:ca:2f:3b:81:
                    5e:88:6b:35:20:51:02:fc:cc:a0:23:2b:6a:75:2a:
                    84:1d:58:92:a4:ca:70:f5:ec:3e:1e:1c:1b:3c:52:
                    62:37:84:10:a8:a5:20:dd:40:51:d2:17:38:55:2c:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:42:25:F8:DD:7C:99:1E:EB:8F:A3:7A:3B:4F:AD:97:D8:69:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/fff3ba01-2628-37f5-a305-6337f362cf66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl

            X509v3 Authority Key Identifier:
                keyid:81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4240:4003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:72:63:98:bb:6c:9d:3c:aa:cb:fa:1e:9a:ff:1b:6e:bc:
         d5:a5:9b:e7:16:26:96:0a:2a:bb:c5:4b:35:82:b3:18:5f:cf:
         5b:19:71:83:45:be:9d:c9:30:d3:21:31:17:1c:88:36:91:52:
         98:29:94:1b:6f:d5:d6:fa:64:9a:f5:a4:06:ad:89:e5:15:60:
         3d:5b:b7:ba:f3:25:5d:62:b4:d6:2a:31:34:9e:2f:8a:5a:46:
         0b:4a:d8:d2:c6:86:9a:ad:0b:a3:32:39:8d:85:f1:1a:05:05:
         5e:19:35:16:f0:a6:2f:35:72:70:69:76:f3:34:51:c4:8f:2e:
         f2:a7:2f:24:8a:c3:c8:27:c4:01:0c:1c:74:d3:b8:6f:c2:09:
         6e:72:1f:c7:58:33:2c:f2:d1:12:c8:a2:f1:2d:a4:42:ec:35:
         10:f8:d0:ae:17:29:c2:03:eb:1e:43:db:aa:e2:c5:af:ab:98:
         44:71:b6:d7:21:1e:72:50:bd:8c:1e:9b:4e:06:90:f5:1a:7c:
         05:2c:24:81:8b:d0:37:69:81:ae:2b:3c:72:69:77:81:df:63:
         8f:b5:79:4b:8d:e8:59:2a:ac:1e:cc:1e:0a:bb:96:c5:c2:21:
         a1:45:2c:5f:60:ab:27:d9:3a:f3:71:de:14:0d:03:f0:90:6b:
         89:2b:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:20 2026 by rpki-client