Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/9b029ac4-5a80-34bc-b5b6-7ae5d6324efb.roa
File:                     9b029ac4-5a80-34bc-b5b6-7ae5d6324efb.roa (raw, json)
Hash identifier:          a3nPFFWweHzl7ZlLhoqhWS6Sp0k0wYU/xK7p4XHFbLc=
Subject key identifier:   89:99:EB:73:4B:71:D9:CC:52:80:9F:FB:98:A0:84:5A:34:F3:A3:86
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F4328584F0ED2446C47175C43D03F4BE0
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/9b029ac4-5a80-34bc-b5b6-7ae5d6324efb.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     19218
IP address blocks:        2604:fd00:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:44:6c:47:17:5c:43:d0:3f:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=f216cace-a587-49aa-919d-2282f637f3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:28:ec:18:dd:44:68:bc:5e:79:c4:8a:ce:
                    d5:f3:4a:bb:2b:e6:af:d6:b5:21:2d:f5:e4:13:fa:
                    f8:2b:c4:52:cc:1e:27:50:0b:7f:93:5b:99:52:67:
                    80:f4:b1:63:d4:bd:b1:03:b1:83:7c:58:ce:07:b7:
                    a5:d0:57:33:47:43:ae:1f:f1:f4:99:53:e4:ad:62:
                    4d:29:f7:fc:95:fd:d9:eb:b1:ed:51:cb:b7:bc:f9:
                    07:cb:29:1f:2e:58:33:9b:0a:68:d5:5e:38:d0:37:
                    1d:da:5a:3e:97:e0:11:e3:e3:fc:e2:92:cb:1b:3a:
                    4b:24:c5:68:97:32:e4:dd:33:25:2b:a4:cd:82:7c:
                    3d:ef:f3:39:72:cf:66:35:5e:9a:fc:3e:fc:70:a8:
                    68:31:89:37:15:f1:58:82:95:3b:b9:5f:0b:8c:50:
                    91:e4:43:66:fc:45:a1:59:1b:4b:af:d0:a2:b8:2d:
                    2b:91:aa:87:80:56:be:db:bf:29:66:8b:21:5f:78:
                    77:8d:48:c2:46:06:c7:2b:c8:dd:f6:83:25:d9:e3:
                    da:85:bc:7c:1b:86:18:52:44:05:8f:6c:69:ca:5f:
                    64:c7:5a:c1:81:2c:9c:c6:75:65:ed:5b:3d:a1:a4:
                    33:31:9b:c1:07:41:0d:a8:bc:67:c0:58:1e:8e:04:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:99:EB:73:4B:71:D9:CC:52:80:9F:FB:98:A0:84:5A:34:F3:A3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/9b029ac4-5a80-34bc-b5b6-7ae5d6324efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fd00:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:39:b8:2f:98:bf:90:35:67:8a:4c:fc:c8:62:ae:a3:16:2c:
         f8:ab:5f:8c:d3:ea:b8:11:bc:b9:5e:1c:02:42:92:be:dc:7f:
         03:39:7a:31:fc:5d:41:4e:0d:56:4b:44:f6:ed:fe:6b:b6:b1:
         86:41:54:41:cb:45:81:c9:8a:ec:bc:f9:ef:6e:30:24:36:e3:
         c2:44:90:54:07:66:73:84:22:7e:5a:af:30:f1:58:26:4d:77:
         a2:d5:bc:63:31:99:e6:fc:c9:6c:1b:60:fb:cf:c2:cd:19:5d:
         4a:b4:9b:08:11:f1:08:40:dd:a3:51:0c:de:00:5b:a2:b5:04:
         53:61:1b:50:16:6a:39:fa:ad:1b:19:c9:a8:c1:b4:45:32:93:
         c8:b4:62:3c:bf:32:7f:f9:ab:77:4b:2f:3a:22:1f:38:f6:5e:
         c8:1a:73:51:61:b0:eb:32:ca:dc:61:a5:42:d8:fd:91:ef:93:
         e4:30:06:ec:19:ad:1b:d2:96:e2:30:74:e8:2a:ba:dd:80:3c:
         a7:64:5d:24:e9:81:2d:8b:d6:aa:d2:ff:ab:ac:de:0a:91:3c:
         ed:41:1e:1d:80:a9:7d:9a:0d:f3:c8:80:29:d4:e3:b5:13:28:
         e2:5c:25:91:15:f5:b4:14:71:d0:29:aa:93:9f:de:12:5a:15:
         0f:dd:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:48:47 2026 by rpki-client