Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
File:                     1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa (raw, json)
Hash identifier:          8DOakyUCx3ZhjXLDGn9SBpTdcwvGMfLCQ8urSAKg5EY=
Subject key identifier:   A5:DC:8A:46:6A:0B:B9:6F:B4:2A:7C:F7:70:1C:B4:A2:44:97:0C:54
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584F6292C9B1509048FA51513380
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     20055
IP address blocks:        2600:a800::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c9:b1:50:90:48:fa:51:51:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=aac4010f-bbcf-457f-bf79-81b16c411dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:24:b2:cc:c8:31:ba:c1:e1:9b:b9:3f:0b:
                    3f:57:96:4c:e2:8c:c2:76:90:eb:7b:72:0f:ca:30:
                    8a:72:18:f6:e7:76:20:76:92:64:14:64:81:e2:20:
                    4e:09:a2:47:6b:5d:9d:e0:93:ea:7f:97:b2:0d:e8:
                    62:ec:4b:bd:ab:12:4c:3d:ee:c9:a2:13:03:31:25:
                    01:77:f2:27:0d:2d:90:89:e7:e5:ae:db:bb:41:e2:
                    0b:c0:ab:76:c8:63:01:60:2e:88:28:d0:e0:ae:9e:
                    f7:0e:7c:42:ef:99:97:c2:51:55:4c:b7:5f:5f:bd:
                    8e:68:46:fe:e4:56:0d:17:88:cb:b2:cc:8a:84:bb:
                    67:26:43:1b:e7:f7:b5:f4:33:d5:bf:dc:5a:43:26:
                    53:fd:c7:81:20:a2:88:ce:12:65:45:1f:69:6a:99:
                    8a:0f:b6:7d:a8:ec:7d:71:b4:8d:d5:a7:00:9b:b6:
                    23:58:0a:ac:30:ed:41:91:f4:26:76:9d:50:a8:2c:
                    6b:d2:5a:1a:9e:b1:c5:1c:e1:22:80:a1:0b:db:14:
                    86:d9:35:ed:3f:45:19:f7:78:41:77:56:3c:06:5f:
                    81:c4:26:9a:6d:5d:c7:82:70:ac:03:d1:8f:19:f8:
                    0d:4e:c7:14:22:97:49:63:ef:38:52:08:f3:e1:c1:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DC:8A:46:6A:0B:B9:6F:B4:2A:7C:F7:70:1C:B4:A2:44:97:0C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:9e:f1:38:31:dd:73:1d:12:8e:bd:1e:81:0f:33:43:29:
         77:d0:97:3a:88:6c:72:a9:27:6a:d8:0c:4c:70:7e:41:ea:8f:
         82:4f:85:c8:86:5b:02:de:9a:87:60:17:e9:77:91:73:e5:57:
         34:49:62:f8:7c:39:65:a5:17:eb:89:50:8e:81:c8:70:30:2e:
         ac:bc:29:f6:a3:33:c6:3a:90:e2:07:53:fe:ce:51:2c:4b:e5:
         11:99:4c:e5:db:5b:ff:20:bc:e9:5f:48:66:e5:a3:ee:95:12:
         96:21:11:79:06:46:7f:06:4e:1c:fe:6f:35:9f:2c:43:c9:46:
         90:bc:22:35:45:ac:52:b4:bb:e7:47:b4:94:cd:42:61:f6:24:
         73:b5:44:12:ef:0a:1f:53:08:6a:d8:1b:dd:9d:9d:66:4c:d9:
         b0:3b:07:a5:1d:04:20:18:4c:5e:a1:9f:c8:f9:01:32:85:74:
         dc:1d:38:6e:b2:75:a3:0f:b0:1c:a1:1f:a2:26:a6:19:26:15:
         39:43:55:82:6a:94:34:8e:8a:1a:3f:9b:22:17:01:3d:5e:1b:
         82:f0:54:dc:71:b4:44:fd:94:0d:29:a8:8e:ec:b4:4f:1b:38:
         ad:d1:22:02:fe:d9:07:f9:78:20:55:64:90:4e:7f:f7:e8:93:
         30:57:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:19 2026 by rpki-client