Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa
File:                     2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa (raw, json)
Hash identifier:          CSzxgkeVwruxu9ylgqe9R/bBkjq+3uhWbRNcm0PcBVA=
Subject key identifier:   CF:9D:13:C3:82:DB:1F:33:9B:10:CA:76:BA:AB:A9:1D:F2:74:46:78
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584F119CF665FD06845691C89900
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     8038
IP address blocks:        2607:fae0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f6:65:fd:06:84:56:91:c8:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ffe05507-c802-4ae0-b567-9daff67f0820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:90:91:5e:c5:f3:81:12:e7:17:77:47:a7:
                    b0:f9:84:e3:36:42:d5:a6:3b:ca:a4:88:02:fb:f6:
                    e4:f3:7a:06:00:3c:b5:2b:e4:75:26:fc:a7:a6:19:
                    87:a9:ec:ff:04:23:83:8c:33:7d:3b:9e:6c:f6:8d:
                    b9:09:66:b3:49:b6:16:97:51:fe:14:73:2d:50:86:
                    9c:44:72:aa:ed:7a:ec:91:e3:3f:e0:83:d8:76:40:
                    31:9f:77:be:a3:84:b0:ea:88:b9:6f:8b:4d:d1:57:
                    5c:56:77:f6:65:38:ac:fc:33:79:a7:40:fc:1d:f4:
                    ba:20:03:f4:c3:9c:a9:36:77:91:c2:c8:99:4d:24:
                    93:1d:5d:32:22:cd:90:7c:df:60:a2:29:f2:fe:da:
                    67:61:b7:6d:5c:f5:86:39:44:a6:fd:26:05:b7:be:
                    aa:3d:2f:69:61:94:21:59:9d:bf:8a:c0:a6:00:b9:
                    41:e8:74:c3:ca:d4:e4:71:53:01:9b:f7:82:85:5a:
                    b2:b8:39:05:5d:fb:08:8a:90:2c:54:db:ac:a5:0a:
                    5d:93:bc:81:59:0d:82:62:04:55:fd:47:d7:b7:7c:
                    00:d5:97:7e:ce:f9:71:87:3d:79:e8:7a:a6:6e:13:
                    61:ee:4f:34:a9:c4:06:2a:e3:39:9d:12:d7:47:86:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:13:C3:82:DB:1F:33:9B:10:CA:76:BA:AB:A9:1D:F2:74:46:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:79:64:57:65:d7:97:eb:c5:40:96:30:6b:3c:a2:20:2e:1c:
         a8:ff:2a:59:b5:91:6b:03:9d:19:1e:a6:18:43:f4:37:8d:a4:
         8d:8a:51:d7:a7:fd:6b:63:63:ef:f3:3d:8a:30:d2:5f:66:27:
         52:a3:bc:f6:32:fb:3b:15:de:b5:27:46:70:ae:66:dd:e5:cf:
         1e:3d:af:62:b7:e4:77:ea:3b:6b:31:ba:b3:62:83:f7:9f:f3:
         f9:bb:a2:a4:04:44:13:2d:bb:76:c5:e0:79:a8:c0:d1:71:30:
         2a:4e:1f:be:1a:42:1a:fe:6a:b5:78:fd:08:56:38:cc:5a:05:
         03:96:4d:d5:b8:c5:f1:4d:1c:59:d6:6e:e1:b6:24:7b:f9:78:
         e8:dd:4b:45:f6:ab:44:30:97:87:83:70:47:c2:e1:e4:b6:65:
         62:bd:33:38:7f:68:24:32:c2:1b:f7:cc:12:85:f4:b9:d6:09:
         50:5e:73:35:8b:10:58:40:95:f9:92:20:bf:dc:12:fa:62:df:
         3a:4e:2d:e0:0b:38:a1:2a:b9:6a:90:92:2d:ee:50:36:2d:d4:
         a3:01:3d:c3:88:ba:51:dc:75:81:cd:e2:df:45:48:e7:54:24:
         8e:c9:2f:3f:86:a1:06:00:c6:e1:2c:e4:9b:cb:df:33:ec:4d:
         02:f1:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:31 2026 by rpki-client