Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
File:                     84199ee8-6fc9-3f89-963a-d28f3a32d890.roa (raw, json)
Hash identifier:          Fw12au2rGS4vGJKzfuOh7hHhg9hQmJcJZYB6MkVYsrw=
Subject key identifier:   67:25:67:FD:60:81:66:BA:43:71:EE:78:61:A5:ED:9A:AA:EB:31:47
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584EF87CBABB4785243F11828420
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     8038
IP address blocks:        2607:fae0::/36 maxlen: 36
                          2607:fae0:2000::/36 maxlen: 36
                          2607:fae0:3000::/36 maxlen: 36
                          2607:fae0:4000::/36 maxlen: 36
                          2607:fae0:5000::/36 maxlen: 36
                          2607:fae0:8000::/36 maxlen: 36
                          2607:fae0:a000::/36 maxlen: 36
                          2607:fae0:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:ba:bb:47:85:24:3f:11:82:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=20dea709-4af4-48e4-8005-7f13677a9697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ed:4e:cb:f8:02:7f:c7:02:cc:d6:e3:f5:58:
                    e2:6e:21:ba:fd:52:61:57:ae:41:e3:59:11:b1:3e:
                    00:04:e0:1d:40:15:be:9d:05:52:f4:cb:84:9a:27:
                    85:40:b9:cb:e5:2b:34:0c:90:3b:9e:30:56:82:4a:
                    3d:3c:97:51:b1:ed:88:1c:32:de:f4:08:01:77:f8:
                    a5:96:3e:5e:6a:49:2c:d6:fe:ef:1b:67:a2:76:5d:
                    fd:a7:13:dc:d4:14:49:b6:70:b0:76:44:cd:07:18:
                    5c:4f:41:80:47:3e:e8:0d:d9:e7:54:44:4d:7b:f7:
                    2f:c4:c9:0b:a2:dd:23:16:ad:b6:87:f7:69:46:31:
                    d9:ca:08:48:39:2a:13:d5:24:49:15:f2:f6:8f:f3:
                    db:c2:a7:93:33:c6:81:86:78:d9:8f:29:83:5f:5c:
                    ff:aa:69:50:fd:9c:bf:93:f1:35:ff:c2:4a:25:d0:
                    cb:1c:b0:08:d6:02:72:52:31:e3:03:5e:9c:c1:2e:
                    a2:a9:bc:11:bb:8e:f1:45:a0:e7:8c:da:07:a1:17:
                    86:23:8b:f7:be:82:1e:cc:3c:62:e8:72:72:21:08:
                    5d:db:73:d6:fc:1d:03:fe:fb:a7:de:57:3b:ed:b7:
                    08:a0:2b:80:04:5b:47:82:63:8f:c7:14:66:58:6f:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:25:67:FD:60:81:66:BA:43:71:EE:78:61:A5:ED:9A:AA:EB:31:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/84199ee8-6fc9-3f89-963a-d28f3a32d890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0::/36
                  2607:fae0:2000::-2607:fae0:5fff:ffff:ffff:ffff:ffff:ffff
                  2607:fae0:8000::/36
                  2607:fae0:a000::/36
                  2607:fae0:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:e3:16:c6:c6:6c:bd:bc:c7:c7:b4:8b:8c:80:80:75:5d:
         e8:39:02:9c:c0:c6:79:6c:8f:7b:b9:fc:d0:f2:44:c8:43:c3:
         c0:a2:61:38:b4:97:14:c4:1e:76:44:2f:b9:cd:15:e6:0e:70:
         5c:db:fe:47:5e:67:31:54:42:8c:31:6d:83:d8:98:9b:21:f6:
         6d:f8:fb:2f:8a:0d:d2:f0:04:17:31:f8:f8:79:cc:d3:7a:7d:
         bf:78:b6:af:ba:2a:ce:b9:39:74:73:24:71:d7:ce:1d:b3:1d:
         e4:b3:76:e1:36:9b:ec:c7:36:c3:ba:3f:09:f0:1b:73:31:17:
         cf:68:c9:8e:f6:a8:df:ed:b8:e5:36:e0:ab:12:13:c6:c9:2b:
         7a:d7:52:4a:00:a3:d5:d7:5d:2a:7b:0e:b8:45:4b:d9:3f:8c:
         7a:81:b7:e6:14:23:f6:11:c3:c2:6d:7c:b9:e5:ee:c2:b2:fb:
         df:75:b8:d9:74:3b:9f:c2:4e:b7:e6:42:01:29:96:90:84:fc:
         38:dd:ef:0f:27:d2:bf:0f:b4:46:72:6f:92:86:da:7f:94:76:
         7d:ef:ec:8c:dc:1c:d6:32:38:26:d3:db:c9:79:56:88:d0:de:
         bc:26:f9:84:14:52:1d:4d:54:f4:63:bc:c7:a1:a6:41:20:0c:
         03:30:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:18 2026 by rpki-client