Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4f688a31-0baf-3803-b14b-369d18b37f5f.roa
File:                     4f688a31-0baf-3803-b14b-369d18b37f5f.roa (raw, json)
Hash identifier:          K09oeKEgtr6gHhY6llV/dFFJYRoUL/FGZUwlinkdQtg=
Subject key identifier:   7A:D0:D0:F8:ED:34:7A:F4:81:3A:55:8B:A2:85:E0:02:C5:28:E1:8B
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F69E941B5FA0C1F281BC2CB40
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4f688a31-0baf-3803-b14b-369d18b37f5f.roa
Signing time:             Tue 06 Oct 2026 16:05:19 +0000
ROA not before:           Tue 06 Oct 2026 16:05:19 +0000
ROA not after:            Mon 04 Jan 2027 17:05:19 +0000
asID:                     6327
IP address blocks:        2607:ffb0:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:e9:41:b5:fa:0c:1f:28:1b:c2:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Oct  6 16:05:19 2026 GMT
            Not After : Jan  4 17:05:19 2027 GMT
        Subject: CN=510d15e7-9eaf-4cdb-8053-0f667324fab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:8f:b1:58:c3:ad:e6:96:69:a6:0b:3b:33:
                    e9:74:6e:a4:e9:2d:d4:17:af:99:7a:f1:02:b7:fa:
                    4d:10:79:cc:6a:27:9f:7a:ce:f0:84:b0:47:8a:bf:
                    4d:10:5e:3f:5e:bb:50:9d:5a:d6:71:e3:84:3a:79:
                    c0:af:24:39:4c:38:5f:22:26:90:bf:21:2d:9c:12:
                    16:5c:31:d7:37:c6:94:85:89:23:f0:ce:6a:76:cc:
                    5b:f5:46:fe:5d:ca:d1:21:60:51:b4:13:40:48:21:
                    d0:2f:81:70:f4:3e:b4:b2:98:5d:71:32:67:99:77:
                    11:74:53:b5:a0:1e:f5:d6:c6:0a:d9:2c:e2:9c:ce:
                    67:ec:0f:9d:b4:0d:04:39:92:cd:5f:6d:21:76:0f:
                    87:ee:20:a6:a5:68:34:d5:f4:26:0d:05:39:57:a9:
                    87:d1:72:ba:0e:c8:f7:38:c4:99:f2:57:57:56:55:
                    27:55:fd:33:45:9c:95:4b:70:2a:0d:e1:8a:25:ca:
                    56:1c:19:b2:f0:51:8b:cf:9a:fb:38:cb:9d:d9:67:
                    0c:0c:7f:a8:a6:be:cb:ed:d5:2c:8d:40:d5:dd:37:
                    5d:21:48:b4:44:48:06:6a:ab:6e:46:38:1c:42:0f:
                    c5:f7:fd:73:4d:36:6c:4f:a2:b1:95:b2:b8:be:fa:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:D0:F8:ED:34:7A:F4:81:3A:55:8B:A2:85:E0:02:C5:28:E1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4f688a31-0baf-3803-b14b-369d18b37f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffb0:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:95:bf:ac:1d:c5:9e:bb:ad:ed:8c:40:25:a3:da:bb:8f:7d:
         9e:87:f9:9c:48:52:41:e0:13:47:b3:8f:dd:4f:3b:28:06:ff:
         f5:46:e5:28:0a:4b:f3:16:60:4b:b2:8f:3c:0e:e0:19:52:a8:
         74:f7:19:27:f5:86:93:72:97:e5:bb:37:47:d8:94:96:95:8d:
         1a:12:75:5c:23:c6:e5:b2:88:ff:76:b0:10:de:5a:b3:cc:9c:
         c2:63:90:4e:eb:2f:c5:71:69:58:23:83:9b:76:b1:7b:37:a2:
         2b:90:b3:02:14:dc:af:f1:80:4a:89:66:a7:3f:90:f8:52:2a:
         3e:7f:9f:9c:e3:71:7e:e8:65:2f:a1:7a:36:9a:27:53:fe:0e:
         f7:7f:c8:9f:50:c5:c0:b3:d9:7c:0e:17:3c:ff:bc:f2:22:72:
         fd:02:59:55:92:78:e3:1c:1b:a0:51:21:2d:a0:a0:7d:60:5b:
         79:2e:5a:4b:73:67:4a:b9:ee:6c:d2:96:7f:fc:21:4c:5f:44:
         1c:7a:b4:3c:a4:6e:6d:ef:07:80:9c:ca:8b:d3:29:40:d1:5a:
         2d:25:0a:9e:99:65:f6:62:f1:01:63:6a:6f:26:ef:c1:87:6f:
         34:54:bc:b7:ee:4a:8d:e8:5c:ba:dd:d8:14:ec:8d:10:c1:e8:
         58:00:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:40:39 2026 by rpki-client