Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa
File:                     a3882799-952b-3088-babc-d21c9fdf0685.roa (raw, json)
Hash identifier:          BuHm7IejWaQr8WA5x08fasn7YLWUlt3t2x6ZiO48UM0=
Subject key identifier:   37:AC:E9:D3:7E:B6:D6:5F:B4:9B:FA:4F:51:9F:BD:01:18:6B:AA:C4
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584F15CCF2776627A808C218D780
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     29854
IP address blocks:        2607:fc98::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f2:77:66:27:a8:08:c2:18:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=3e6f3147-727f-43a9-803b-b355363a017a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:7d:e3:e2:98:52:db:ba:e9:01:1a:c1:aa:
                    d0:7f:18:67:77:ad:53:fa:39:82:52:3b:bc:9a:1b:
                    78:55:a4:c2:d8:1e:e0:67:b4:8c:c1:0b:98:eb:6d:
                    6b:6d:7b:eb:64:c8:04:ac:c6:49:92:67:87:ba:93:
                    24:e0:92:02:be:45:60:34:a0:c6:98:09:5c:66:d4:
                    69:aa:e1:18:10:8c:3d:6f:7e:f5:ed:05:3b:0f:97:
                    40:13:71:41:37:47:6d:96:4a:2b:e2:c5:46:67:0d:
                    ec:91:ff:92:d3:cd:f3:7a:a3:6f:e7:ea:b6:d7:26:
                    d8:66:da:52:ff:c3:45:db:ae:9a:01:73:ed:17:ec:
                    06:bd:9f:c3:95:fe:b3:71:e1:55:4e:76:da:22:d3:
                    82:67:6f:0e:24:fd:22:97:b8:05:c8:76:17:56:8d:
                    f5:ce:86:07:44:15:8d:39:e6:ca:f1:85:af:0c:b8:
                    f5:f9:bb:58:8b:d8:a2:cf:50:ad:9a:76:38:4e:5e:
                    df:a1:64:58:b7:04:22:3d:74:10:f3:c7:f4:fb:24:
                    e4:70:38:3d:7c:ad:00:57:21:1f:6a:5a:31:75:e8:
                    52:f7:87:b1:37:2f:12:76:a2:f8:e9:3b:54:bd:be:
                    db:b7:70:8a:3f:e8:0c:e7:e4:f1:81:64:0b:be:82:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:E9:D3:7E:B6:D6:5F:B4:9B:FA:4F:51:9F:BD:01:18:6B:AA:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc98::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c1:8b:12:69:c3:94:a9:1e:5a:63:53:cb:b2:35:85:20:95:
         16:12:b5:8b:f5:cf:93:30:a5:6c:7b:79:35:0d:a8:05:8c:b2:
         40:0f:02:d7:cc:77:40:08:23:be:08:7c:fa:cf:b0:61:f5:af:
         c3:4a:ef:b0:c9:07:93:64:51:66:2a:e1:89:9d:3e:90:66:cb:
         6a:88:77:ec:16:8d:9c:fc:10:22:5d:ab:d2:67:91:90:aa:82:
         c9:4b:86:e5:a2:93:6a:41:a9:1a:fc:c1:dc:13:8a:9c:3c:6a:
         c3:ca:63:aa:31:9d:83:d4:50:d0:7a:61:85:81:3e:61:5d:18:
         f3:a2:61:fb:c8:ca:da:f8:b8:43:e8:60:9d:3e:ef:a0:d1:1e:
         d6:b4:91:b9:9f:e9:84:49:d7:a8:c6:24:aa:36:c7:25:d8:8c:
         4f:b2:2a:f8:6e:c4:98:64:83:92:a8:b9:04:be:01:cd:65:4b:
         cb:ea:d2:28:d9:05:ca:ff:3a:d5:9e:e3:86:8b:82:22:b5:1b:
         7b:8a:97:37:b6:f3:21:f5:b2:51:7b:d2:92:15:b5:13:bf:ca:
         56:0e:0f:45:a8:7b:85:db:06:12:7d:32:73:09:b9:23:22:bc:
         3e:4f:60:aa:cf:a1:c9:fd:c1:e5:89:20:49:35:87:7b:33:f8:
         05:92:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:22:01 2026 by rpki-client