Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/857613e0-3a23-3cb1-b7f8-f6b8cef6a8e8.roa
File:                     857613e0-3a23-3cb1-b7f8-f6b8cef6a8e8.roa (raw, json)
Hash identifier:          +m4KfPwmaKquqfDeVTj/7niKEdHSsdLHqI8w1SEliyA=
Subject key identifier:   B7:FD:09:11:8D:CC:CD:72:D6:0B:5B:7C:58:52:E0:01:99:C0:C3:92
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584ED597251CF02E5CE077972340
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/857613e0-3a23-3cb1-b7f8-f6b8cef6a8e8.roa
Signing time:             Fri 14 Aug 2026 13:00:12 +0000
ROA not before:           Fri 14 Aug 2026 13:00:12 +0000
ROA not after:            Thu 12 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2607:dbc0:4020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:97:25:1c:f0:2e:5c:e0:77:97:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Aug 14 13:00:12 2026 GMT
            Not After : Nov 12 14:00:12 2026 GMT
        Subject: CN=a06c027a-1d4b-4f59-b2be-1749357893c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:47:0b:44:97:41:9b:1e:e3:d7:40:8e:d9:c2:
                    6c:7c:c0:87:df:f6:26:4c:95:00:9b:8a:27:c2:34:
                    b5:ff:69:17:bc:49:f4:74:99:c8:21:d8:1e:66:91:
                    9e:fb:81:4e:ca:06:b0:7b:68:fb:30:dd:09:82:01:
                    56:70:23:86:9c:5b:7c:d9:ee:f5:64:a3:1f:cb:da:
                    7d:b3:20:39:5b:2c:dd:7c:dd:71:70:8c:4f:16:47:
                    d7:d6:20:7d:38:e3:55:ed:76:13:4c:69:1e:45:c9:
                    88:91:2e:45:95:36:bb:0f:70:b6:fe:ae:cf:7f:2b:
                    49:de:ef:77:62:95:7b:6b:18:ec:40:59:34:c1:02:
                    6c:fc:a9:1f:4d:a7:86:fe:30:1c:a9:19:60:ee:8d:
                    a1:db:f9:5f:15:7d:4d:c7:e6:b8:40:01:e6:eb:d4:
                    75:f1:e0:7d:51:73:56:d7:e8:4e:5c:d5:14:ba:cf:
                    b2:0f:4a:0d:64:f8:3c:15:3a:33:65:7d:34:91:8f:
                    89:7f:4a:d3:6e:d1:eb:51:1a:cb:97:84:4c:d0:a5:
                    a5:3d:a4:be:3a:ec:34:af:1a:ba:6f:5e:3f:58:c9:
                    dd:56:97:cb:f4:b1:0d:e3:1e:7d:d7:33:19:50:f8:
                    0c:26:fe:69:7f:38:6a:cf:e2:ce:40:ed:e3:e6:7f:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FD:09:11:8D:CC:CD:72:D6:0B:5B:7C:58:52:E0:01:99:C0:C3:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/857613e0-3a23-3cb1-b7f8-f6b8cef6a8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:4020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:38:19:fd:1e:32:b1:db:c6:3c:46:5b:9a:93:c3:fd:23:f1:
         2b:20:98:29:28:c2:6f:79:73:a2:6d:d1:63:0b:67:b8:16:ae:
         dc:8d:98:b2:97:06:27:c5:e3:2e:29:b4:1b:9f:76:4f:c3:93:
         0f:6e:ca:2b:57:9c:05:4a:40:88:c2:7a:f2:de:4c:96:73:b9:
         68:e5:8c:c5:33:4a:59:f7:ee:23:cb:fe:c2:f2:8b:a3:29:5e:
         85:84:5a:17:63:2a:ad:62:fa:ce:64:c3:6e:aa:ea:14:f2:33:
         63:f2:ed:3f:31:bb:4f:46:c2:8f:99:13:65:92:c0:44:aa:91:
         56:5f:67:ca:39:40:a5:42:db:cf:bb:53:f7:a6:c8:9d:70:50:
         4b:ba:bd:3e:77:db:5b:f0:32:85:d3:35:50:e3:35:e5:7f:c1:
         08:1d:12:5f:aa:91:6c:43:2a:5b:41:d1:07:cd:4e:a5:6e:6f:
         d5:31:7f:3d:11:a3:32:8d:8a:18:fe:c9:bd:1c:52:fe:f8:4d:
         96:52:1d:a7:7b:a9:dc:e9:e6:31:de:b5:20:55:9e:6c:10:01:
         7b:95:81:bc:f5:61:de:13:39:23:76:8f:6e:0c:fc:5d:e4:ae:
         ef:96:84:f2:d0:37:d9:03:13:54:e5:51:f7:89:e4:e9:44:0c:
         b1:cd:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:20:07 2026 by rpki-client