Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bad55b9f-ffc1-3224-a75f-1d88410f47ae.roa
File:                     bad55b9f-ffc1-3224-a75f-1d88410f47ae.roa (raw, json)
Hash identifier:          GH35RBFG5ZpDT6o2pm/7k5pmxyX3hb//5RgZYo9yei0=
Subject key identifier:   91:77:9E:24:E7:33:0A:36:CB:B9:8E:53:77:5B:FC:0A:D4:37:F2:5A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F1E848EE6578C5BB2DCF30120
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bad55b9f-ffc1-3224-a75f-1d88410f47ae.roa
Signing time:             Wed 09 Sep 2026 15:56:47 +0000
ROA not before:           Wed 09 Sep 2026 15:56:47 +0000
ROA not after:            Tue 08 Dec 2026 16:56:47 +0000
asID:                     17252
IP address blocks:        2604:4840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:84:8e:e6:57:8c:5b:b2:dc:f3:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  9 15:56:47 2026 GMT
            Not After : Dec  8 16:56:47 2026 GMT
        Subject: CN=8aca820c-3a6e-4983-a023-2d54f68a4050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:9a:a4:7e:f1:82:79:e2:b5:cc:aa:a9:ae:
                    b1:d7:71:87:04:5e:ea:1f:e1:4f:0e:ce:da:a7:b2:
                    a7:1f:9d:61:50:6d:4c:d6:eb:1a:a1:ba:a3:54:c6:
                    d1:3c:19:f3:91:7c:5e:31:1e:58:fd:69:6d:ec:ec:
                    b6:0b:3f:f3:30:c4:7e:ab:7b:7f:a7:39:8e:da:e7:
                    aa:b0:87:7d:18:30:a0:96:3f:f0:f6:08:49:90:f1:
                    71:9f:70:e5:96:e2:e4:1d:5a:b8:ee:b8:75:fd:fe:
                    81:7b:1f:83:cc:11:48:05:d4:4f:4e:41:46:b6:8a:
                    d2:12:42:4b:b1:00:04:b1:ee:a2:96:3a:a4:a3:8c:
                    1f:e8:02:0e:bd:54:8d:06:3e:e2:99:cf:af:be:bf:
                    ef:32:92:3d:a6:5d:68:de:6b:dd:97:b0:26:b1:84:
                    4e:75:13:63:65:d5:63:62:86:7f:e6:ce:90:c1:d2:
                    a4:21:46:77:12:a6:7d:b0:a3:a5:e9:e1:50:a5:71:
                    ab:2f:de:57:95:f7:9a:17:9b:50:f6:1a:e3:73:0c:
                    df:4d:e2:5c:39:51:46:7f:5e:69:80:10:40:1d:12:
                    b8:eb:6b:1f:bf:68:0f:87:75:c8:18:13:6e:3c:f4:
                    fb:48:b7:cf:52:8f:36:38:cd:fe:9a:87:28:52:76:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:77:9E:24:E7:33:0A:36:CB:B9:8E:53:77:5B:FC:0A:D4:37:F2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bad55b9f-ffc1-3224-a75f-1d88410f47ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:aa:55:21:f3:c6:6b:28:e0:3c:9c:a1:97:2b:36:3e:5e:
         a6:55:40:5d:65:fc:1d:be:2d:39:a5:79:bf:7d:16:d8:e5:3f:
         30:ca:41:29:9b:36:a8:85:ca:88:af:21:bb:bd:5c:57:0b:a7:
         b4:f5:57:54:e4:a9:a2:3e:76:53:f1:af:fc:af:67:81:0b:bb:
         89:83:9b:39:84:70:18:98:65:d1:69:8d:6b:cd:5d:9e:e5:0f:
         5d:3a:03:fd:25:ab:64:fe:90:55:b0:c4:e2:f9:e7:27:24:3c:
         d0:99:df:00:9d:65:9f:33:3a:17:aa:9e:da:e3:17:43:dd:d9:
         02:ba:71:3d:c1:a7:a0:49:9a:04:d1:5f:79:49:bc:89:e8:1e:
         64:1a:a7:71:90:85:35:64:8f:27:8f:b9:67:be:cf:c4:72:16:
         37:90:25:95:7c:9a:3d:d4:04:35:a4:c2:2c:7a:fe:90:9b:ac:
         ca:d1:d9:23:66:a6:2c:49:6d:89:62:5a:7d:0e:a2:d7:a9:89:
         b5:d9:62:e0:56:09:77:8b:f2:81:d0:77:b4:0b:49:bb:6a:93:
         02:8d:d3:4d:d4:5c:5a:a5:85:83:b6:c7:de:88:68:f2:7a:25:
         5b:1e:f6:04:ed:71:b5:b4:99:0d:08:12:6d:07:49:e7:0b:10:
         d8:53:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:49:57 2026 by rpki-client