Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd0f87e5-4442-3131-8acf-d4abf7323314.roa
File:                     cd0f87e5-4442-3131-8acf-d4abf7323314.roa (raw, json)
Hash identifier:          xZszg6+8uSWAyMxcZ6xdYb14jJL/6q8+jQKwjZDT2Wo=
Subject key identifier:   92:DF:CF:3B:B0:C3:7A:D8:29:A2:D0:AB:5D:74:0B:43:1A:B6:9F:D4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A73489D1B853AA7400A000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd0f87e5-4442-3131-8acf-d4abf7323314.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        2607:f098:50ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:34:89:d1:b8:53:aa:74:00:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=968ae6c9-db4d-427b-a7d4-f327755acf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:71:ea:b5:fa:41:0c:14:6a:66:21:f9:ac:5b:
                    e8:07:54:b2:e2:9f:6f:9f:82:91:d2:c9:2c:c2:56:
                    29:45:17:d9:2d:f4:d0:57:ea:85:3b:0c:91:59:eb:
                    70:ea:84:eb:13:f0:5d:e8:46:4a:7f:d7:63:d8:85:
                    54:a5:6f:ff:bc:08:7a:26:e6:a9:b9:c4:ef:f1:e3:
                    94:15:b1:bf:a8:ae:4c:3e:a2:32:11:06:2d:61:a8:
                    a1:b0:1e:87:d5:3c:bf:f5:84:50:f4:e7:43:6a:35:
                    0b:d2:e2:cf:51:ea:22:93:b5:b7:2d:0c:7a:0e:09:
                    d8:5b:1a:77:e9:6f:51:f1:6e:26:74:13:02:aa:7a:
                    d3:c7:f9:dd:91:3b:59:91:35:49:40:d9:ee:81:32:
                    83:14:8b:ab:64:56:43:c5:65:d1:63:ee:e8:71:40:
                    67:08:65:fc:88:29:48:e9:9c:7d:88:4b:ab:b6:7f:
                    d3:0e:45:00:e8:ba:22:f7:5a:21:e4:ed:50:11:d8:
                    26:e9:44:48:40:88:75:ae:1c:0c:cb:a9:e6:a7:9d:
                    fa:72:01:b7:09:0b:f7:52:85:05:26:2a:25:60:79:
                    a0:2c:c1:fe:bf:8d:8e:64:3c:03:c5:f1:80:44:57:
                    80:c7:c5:61:8e:c8:25:bf:20:26:11:dd:1d:22:cb:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DF:CF:3B:B0:C3:7A:D8:29:A2:D0:AB:5D:74:0B:43:1A:B6:9F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cd0f87e5-4442-3131-8acf-d4abf7323314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:50ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7f:18:85:72:14:66:ac:1f:0e:2f:15:2b:47:54:ab:76:5f:
         8e:2d:8c:96:9e:09:03:54:95:2f:47:66:fc:0b:59:a3:ca:05:
         1b:a7:9a:cf:0e:37:f9:50:b6:98:e4:4a:b9:e3:82:07:0a:b1:
         97:15:4d:41:bb:3c:41:ef:5a:13:8d:5a:85:88:2f:fd:6b:83:
         31:56:a2:90:3c:07:76:a4:55:4b:a7:06:ce:bb:d5:77:d7:2b:
         f3:48:8d:d4:66:55:34:6b:06:31:f3:d7:af:75:c4:d8:99:36:
         b8:f3:ff:ab:ea:a0:a2:40:89:0c:2e:87:55:48:03:c9:f9:f8:
         75:1f:c4:3b:7a:d7:95:80:e4:85:20:63:23:32:55:8e:55:35:
         87:74:d0:63:99:56:b2:0c:bd:24:9b:ae:73:e3:27:5f:37:75:
         6e:fc:dc:41:80:d7:74:3b:04:84:ac:6a:d3:fb:13:d0:56:9e:
         de:85:72:90:72:94:22:57:cd:b5:4b:2f:f8:d9:7e:0c:71:2a:
         08:88:f5:04:28:e0:f0:75:03:ac:99:9d:db:41:88:e2:3f:cd:
         b9:56:9b:44:72:41:34:3e:92:ab:ff:7b:96:ae:de:7d:ce:cb:
         a8:08:63:d2:18:e0:64:92:dc:4f:94:04:bf:84:2c:d1:87:e2:
         2a:7a:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:44:49 2026 by rpki-client