Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/d72c5d95-c10f-3a51-8429-815b719ff937.roa
File:                     d72c5d95-c10f-3a51-8429-815b719ff937.roa (raw, json)
Hash identifier:          0vgUVz8YzbnHR5TqQFlES0nLOPobj4S5Y3mPX6u0QlM=
Subject key identifier:   2C:63:01:72:C9:EE:37:66:E6:0A:8D:7D:09:A3:3E:D6:1B:55:F6:0F
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F4328584EE0C20426244BC600A32A35B8
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/d72c5d95-c10f-3a51-8429-815b719ff937.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     19218
IP address blocks:        2604:fd00:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:04:26:24:4b:c6:00:a3:2a:35:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=cd19c6c3-8d85-4dea-90ba-85b6a0fff6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:64:6e:06:68:94:47:f7:b9:42:91:32:f7:
                    72:e3:2c:70:62:19:87:80:5a:55:64:27:d8:bd:40:
                    d4:bd:4b:06:af:c3:29:76:76:bc:6e:2a:46:73:33:
                    ae:9e:47:ea:54:42:a9:f0:58:f7:31:19:0b:4f:f8:
                    1c:cc:03:03:3e:5d:d2:2f:15:c5:17:d2:44:e3:ef:
                    76:e2:74:2a:eb:ba:d0:09:fc:dd:7f:da:01:6c:e5:
                    3c:43:57:48:a6:94:56:8a:a8:a9:ec:c3:b4:f0:5d:
                    69:2d:b8:26:49:aa:a1:5e:d8:62:ad:32:1d:a1:95:
                    6e:ef:f8:cb:9b:a6:1b:60:98:bd:b6:0a:7d:ca:63:
                    7e:10:c4:0c:cf:53:69:c1:26:aa:fc:3b:ff:7f:38:
                    d6:8c:46:76:39:a1:b2:09:df:bb:ab:e5:74:cb:d7:
                    be:5a:bc:8c:c2:2c:01:bb:25:84:1a:22:da:e2:88:
                    4d:9f:0a:4a:ea:2c:ba:fd:40:d4:9a:c8:e5:b0:42:
                    8f:ca:17:0e:8a:17:49:10:26:e6:bc:79:2e:49:5c:
                    08:84:5e:99:b2:df:e0:f9:f8:83:9f:2d:0f:df:b3:
                    62:72:9c:44:18:2f:35:89:e1:a7:ba:d7:77:89:50:
                    7d:22:7a:de:41:74:8b:32:71:e4:b6:76:1f:bf:a7:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:01:72:C9:EE:37:66:E6:0A:8D:7D:09:A3:3E:D6:1B:55:F6:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/d72c5d95-c10f-3a51-8429-815b719ff937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fd00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:c3:8a:fc:80:c5:05:01:b0:9b:ea:ef:fd:35:00:1c:1c:
         60:c0:ec:71:e2:31:ff:ac:bc:56:b5:cb:9b:ae:c3:e9:fb:f5:
         f4:1f:a9:8f:2b:08:9a:57:6f:f7:d4:b6:fd:42:b7:dc:6c:30:
         8b:55:29:e5:54:5b:f8:41:17:1b:e4:e7:2a:94:ee:92:52:23:
         18:fe:f2:63:77:fb:0f:2b:fe:a1:8e:9d:32:a9:e5:da:f4:f2:
         49:53:b8:2f:b3:33:d2:df:30:9c:51:e3:07:8c:e8:53:f2:c9:
         b8:02:26:ff:7f:fa:fa:7a:41:5b:96:df:3c:81:25:b7:40:db:
         ad:b7:77:bb:e8:56:4e:db:fe:e2:8c:90:04:cb:e0:d2:5d:fc:
         ff:8a:a1:23:63:65:e2:d6:3f:f3:4c:a9:bd:16:6a:01:fe:14:
         86:84:c9:1f:68:28:60:2b:91:27:0a:26:6c:25:5f:4d:1e:ce:
         fc:12:65:63:05:11:55:9c:58:7b:e9:e1:39:75:36:86:33:40:
         85:e1:87:34:b2:58:56:a2:d9:dd:d7:5a:cd:1e:c9:38:44:bf:
         31:5b:ea:6f:8c:82:67:52:8c:fa:ad:b5:ef:85:e0:76:f8:64:
         5e:e3:7b:18:10:f8:e9:3a:7d:d4:c9:e6:36:7b:97:a1:b7:53:
         01:be:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:45:30 2026 by rpki-client