Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
File:                     1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa (raw, json)
Hash identifier:          rBOKuDRHz9ZXkfgF7XwdqgLvA6CvzLeCpwkILiltg9o=
Subject key identifier:   BA:D1:48:7D:4F:D5:9C:A1:FC:04:0D:03:44:A2:6D:1B:2C:02:67:A7
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584EC0A719F55A95B0C8341BD400
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     20055
IP address blocks:        2600:a800::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:19:f5:5a:95:b0:c8:34:1b:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=9b156778-c4cd-47af-beb0-f014a05e3ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:ee:d2:9f:a8:5f:01:ea:f7:d9:68:46:2a:
                    40:a0:a4:2a:32:db:58:4d:a8:1a:04:06:10:87:34:
                    1f:e8:63:5a:73:68:ce:d7:6f:c6:dc:b7:44:f5:e2:
                    81:62:38:65:22:25:e6:1c:ae:82:7c:90:d1:b0:92:
                    56:0b:c5:03:8f:94:57:70:1c:6a:07:f8:e5:fe:e0:
                    61:89:94:15:47:ca:d9:9c:50:72:5c:9b:da:4c:f9:
                    de:23:58:82:6a:26:0b:89:ea:02:7b:64:d3:38:d4:
                    9e:a1:d7:f7:d4:54:8b:06:de:1e:0d:d2:8a:df:f9:
                    2e:9a:de:22:9d:1e:bb:4c:aa:8f:a9:1c:01:fd:30:
                    c6:39:c5:ad:4f:6d:50:10:0c:6d:16:fc:6e:5e:0a:
                    f7:de:34:d5:bf:bf:4f:51:04:4d:a4:d8:ab:9e:23:
                    6b:43:62:b5:49:e2:03:44:b1:ea:99:f7:24:7e:ac:
                    dc:8b:42:e4:0c:13:bc:25:66:9f:57:6e:9f:8c:5d:
                    91:12:f0:c6:b1:e3:87:9f:a7:77:95:82:47:0b:7f:
                    a6:11:a4:04:48:d2:d5:a7:72:f1:d3:9e:9f:65:4c:
                    2c:69:d9:90:59:73:f7:f7:e0:9f:c4:19:9d:a7:28:
                    cc:2d:d4:a0:75:23:10:0e:8d:8b:4c:fa:57:1a:a6:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D1:48:7D:4F:D5:9C:A1:FC:04:0D:03:44:A2:6D:1B:2C:02:67:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:43:fe:90:08:1d:59:6c:08:4a:df:d1:af:70:ee:f2:99:
         82:a1:00:25:94:0c:f4:c1:97:74:b2:e2:c7:98:7b:1e:ab:27:
         e6:72:52:02:b0:ca:75:57:69:85:2b:80:74:95:f0:f9:18:5a:
         66:4f:29:da:1a:7e:44:60:2e:df:7d:84:2c:59:bc:dc:3d:1f:
         75:df:86:7c:51:34:7d:4d:58:f7:96:b0:42:26:20:18:5f:e8:
         35:b3:5a:16:84:5f:e1:33:fa:4a:1d:8c:4a:94:1d:69:5c:87:
         1d:1a:f3:11:b3:d4:bd:09:7b:b4:bf:c2:35:ef:f7:83:65:f6:
         5e:62:06:2a:f6:8e:8b:cb:53:2e:64:2e:78:73:23:60:a7:76:
         ae:02:09:77:b6:13:93:71:5c:84:f6:fb:a2:34:22:8d:3e:b3:
         f4:01:39:0a:9c:5f:dd:67:d7:14:0f:4b:07:f9:8e:7d:7e:b5:
         b4:8e:54:d7:e5:08:11:4e:f3:81:8e:75:14:27:d9:8f:74:c3:
         71:73:71:3f:40:5b:c4:7d:0b:ed:32:56:86:5d:33:bc:86:37:
         0e:8e:3f:15:64:54:7f:3b:fb:74:06:36:bb:34:e2:38:86:81:
         97:5f:29:36:b2:8b:d5:80:ae:67:29:c8:eb:22:80:01:d6:93:
         55:14:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:32 2026 by rpki-client