Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a2f431f9-02fa-39f9-918d-cd4915a8898e.roa
File:                     a2f431f9-02fa-39f9-918d-cd4915a8898e.roa (raw, json)
Hash identifier:          Tg9wZwDJabyuXIWAWZ51o24u/URoohp70+oaHpLiSzk=
Subject key identifier:   7F:CE:C5:D2:B9:64:DB:81:D4:9A:27:03:5F:28:D3:B7:BA:62:B0:E8
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584FB3A67218A07F4035046FC900
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a2f431f9-02fa-39f9-918d-cd4915a8898e.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     25637
IP address blocks:        2607:4800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:72:18:a0:7f:40:35:04:6f:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=17864478-f641-4880-b697-b3ccf362212d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:1c:c3:a6:cc:51:48:5d:8a:8e:35:0c:ef:
                    b3:6b:5f:03:87:4d:5f:cb:28:67:8d:fb:9e:02:05:
                    57:60:1a:2f:5c:64:4b:ce:14:70:00:ee:df:61:c2:
                    00:ef:55:6d:4c:4d:d5:2d:05:7d:96:c1:26:71:3f:
                    a7:8e:51:5f:78:ff:4c:cc:8d:63:b0:ec:9f:f6:62:
                    38:fb:58:42:c4:c4:f2:d0:dc:30:af:2c:bd:31:42:
                    5a:df:e1:75:20:16:97:60:40:d5:38:bf:ec:85:9e:
                    d3:8a:02:f2:8f:e5:66:79:a0:81:b8:4d:68:83:3c:
                    1d:d7:80:ba:74:2c:80:f2:11:c7:93:f4:da:8f:b2:
                    9e:92:3a:5c:6f:63:97:85:33:bd:dc:75:16:b3:a6:
                    50:13:ac:de:c7:71:61:9d:38:67:9c:6c:4a:1e:8a:
                    5a:ad:b4:df:65:c5:1b:cb:02:2f:05:43:0d:b5:f3:
                    27:bc:7f:b5:cb:07:3d:70:4a:86:62:5e:d7:89:68:
                    3c:8a:91:49:7d:64:33:3c:cd:df:64:53:08:ec:4e:
                    e1:5d:92:a1:f2:72:b6:69:94:47:2e:5f:1c:34:0a:
                    bc:85:47:f7:19:ca:94:43:57:4f:c8:02:50:cc:14:
                    24:3b:9f:26:1a:d6:47:66:84:56:02:73:a1:8d:97:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:C5:D2:B9:64:DB:81:D4:9A:27:03:5F:28:D3:B7:BA:62:B0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a2f431f9-02fa-39f9-918d-cd4915a8898e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:7a:a3:2c:50:f1:87:b4:0f:a0:40:6e:77:29:3b:11:96:
         a5:36:c2:21:d4:a1:f5:4a:9f:96:ca:5b:37:98:2e:a5:3d:eb:
         61:74:ce:c6:2b:5a:87:6b:45:c0:80:9f:6c:e7:fe:e3:08:60:
         5c:2e:b6:d4:c0:c8:92:5a:78:e5:8e:60:ad:af:3f:7c:63:c0:
         91:8b:aa:f1:d2:35:d0:28:77:cb:ac:b8:06:b6:f4:f0:71:1d:
         ad:12:ba:30:2e:f9:36:09:5b:1d:5e:bd:0e:32:1c:0f:14:27:
         1f:a7:fe:f6:5d:2b:a5:45:ce:9e:d7:5f:b6:53:b4:c0:c8:e6:
         45:04:fe:cd:62:c3:27:70:31:ef:11:98:48:26:da:df:0c:32:
         e7:81:fa:c2:4e:96:18:53:3c:33:e3:a9:9d:9b:3d:9e:a6:48:
         58:a4:80:1a:97:5c:8f:0c:40:40:5e:18:bd:1c:33:17:b3:be:
         5d:95:8e:b3:50:c7:5b:d3:da:62:63:d4:64:2b:a3:98:bd:59:
         53:e2:98:52:ee:73:62:3c:b8:3c:1a:66:25:cc:ed:13:af:c7:
         ef:70:c0:a9:84:9d:c3:26:0d:6d:bb:3a:21:96:6b:31:aa:b4:
         01:e1:04:92:36:ec:1b:18:cc:5c:a1:99:28:c3:3f:8c:e2:02:
         18:c6:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:02:11 2026 by rpki-client