Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/88d56266-9046-397a-a1c5-e059316a713e.roa
File:                     88d56266-9046-397a-a1c5-e059316a713e.roa (raw, json)
Hash identifier:          2ptxdgkjbwant4v/P2Eft0yQRFKuQrGWFZkPF9Ti0S8=
Subject key identifier:   3D:A6:98:33:17:90:B6:49:F5:B5:B2:18:A5:B0:7A:20:7A:6E:FC:80
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F15CD08DB91D2A5D63470B700
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/88d56266-9046-397a-a1c5-e059316a713e.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6327
IP address blocks:        2001:4e8::/32 maxlen: 48
                          2604:3d00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:08:db:91:d2:a5:d6:34:70:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=8a14c529-3ca1-4b78-885d-6b7d7c9c840d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:92:3f:1c:8e:a3:5a:fb:a3:79:c4:9d:84:e5:
                    47:d8:39:bc:03:9d:c5:56:0e:73:f0:c5:fd:a1:d6:
                    3b:7d:ef:ca:2f:14:62:4e:58:fd:eb:a9:e0:47:66:
                    c5:52:96:d1:8a:2f:62:82:9f:aa:fc:1d:ea:8e:7a:
                    c9:37:82:6c:13:b8:25:f4:77:fd:b9:0e:8a:8c:7a:
                    be:57:15:95:84:7c:1d:5a:c6:39:24:61:3d:d4:a7:
                    85:e3:1f:a9:a7:94:07:ad:b1:97:89:ff:a8:49:0c:
                    fd:c7:93:f9:9f:ae:59:1f:c7:92:91:b1:ba:80:dd:
                    5d:c4:a8:1d:39:16:d7:db:ab:ac:99:32:a1:4d:d4:
                    83:dc:c5:79:b3:d4:75:29:89:5c:d4:47:18:02:80:
                    ed:cf:2d:a2:f6:1f:bb:ab:b5:24:75:6d:c9:c3:41:
                    66:01:22:51:7f:ce:09:92:f9:14:0e:75:9c:e4:a2:
                    ca:17:b9:d5:72:10:b4:71:b2:c0:1b:8e:f5:2f:36:
                    93:8c:cc:ed:92:38:ee:c8:33:cb:08:c0:e9:58:2e:
                    78:7c:ad:40:c0:f2:96:c5:c3:88:6f:4b:83:0d:11:
                    98:45:74:78:b7:ed:d5:78:7c:24:7e:8a:c9:84:a2:
                    f4:1e:e6:d5:44:e9:41:d0:b4:e9:42:f5:48:1d:bc:
                    9a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:98:33:17:90:B6:49:F5:B5:B2:18:A5:B0:7A:20:7A:6E:FC:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/88d56266-9046-397a-a1c5-e059316a713e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e8::/32
                  2604:3d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:ad:9a:46:e2:d5:cf:b0:d1:76:9a:1f:37:a3:2f:59:1a:
         33:2c:1a:8d:00:a1:e4:00:0b:bc:90:a0:d4:26:62:cf:5f:91:
         51:75:e1:2f:9b:fc:3a:ae:f5:21:c7:04:b8:ce:62:eb:db:0f:
         5e:d4:9c:68:48:54:f0:cf:53:7f:2e:35:a8:9f:29:cc:2e:bd:
         e0:4f:ff:6e:4f:79:71:f7:f7:bb:94:32:96:c2:49:02:57:d8:
         94:02:15:0f:14:8d:11:59:85:47:e2:c6:19:e5:66:16:75:3e:
         b7:45:bb:c8:25:74:67:e4:69:48:77:cf:8e:4c:f1:74:f3:99:
         c6:6e:88:ca:d5:53:06:fc:ce:50:3e:a6:cf:34:19:27:ce:6d:
         91:9d:49:f3:91:de:be:4e:c4:67:42:e5:d0:2a:7d:fc:a4:19:
         02:6c:1f:4c:b3:61:ef:2e:df:a0:a3:2d:cf:28:7d:d3:8d:80:
         c7:ee:9b:f9:6c:b5:41:b3:70:fc:95:d8:1f:ab:81:65:48:01:
         50:b7:4a:db:0a:bb:55:1c:59:fd:8f:f4:5e:fc:da:d0:6b:32:
         94:0f:ff:99:fa:66:c4:63:eb:28:8d:cd:88:94:06:35:b2:87:
         9e:0d:61:c3:50:ea:68:18:ab:71:03:35:f5:a9:14:ef:df:6c:
         12:e4:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:09:48 2026 by rpki-client