Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/b4c484ff-803c-3145-9607-19b2f14a55fc.roa
File:                     b4c484ff-803c-3145-9607-19b2f14a55fc.roa (raw, json)
Hash identifier:          RtRb3cMsfnJTB4Fe2XYXZeihBm63YBq27hzLgCUeCNs=
Subject key identifier:   83:DF:97:F3:62:10:30:D2:BA:3C:ED:D5:A8:7C:77:DD:FC:CF:26:1F
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F6CB8410CA52D3326E9E05F80
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/b4c484ff-803c-3145-9607-19b2f14a55fc.roa
Signing time:             Wed 07 Oct 2026 16:14:00 +0000
ROA not before:           Wed 07 Oct 2026 16:14:00 +0000
ROA not after:            Tue 05 Jan 2027 17:14:00 +0000
asID:                     6327
IP address blocks:        2607:ffb0:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:b8:41:0c:a5:2d:33:26:e9:e0:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Oct  7 16:14:00 2026 GMT
            Not After : Jan  5 17:14:00 2027 GMT
        Subject: CN=915c24d0-67b7-4b3a-84ca-af7dd0f34b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:fa:c0:24:b2:e9:97:17:d3:e8:be:85:8d:
                    37:d1:4a:0b:4e:4e:2d:7d:12:1d:34:a2:6b:d2:b2:
                    3f:99:66:f6:64:36:01:30:df:85:b4:54:5d:84:2e:
                    57:f1:ac:64:a9:d2:1d:ad:c4:f4:26:da:ac:20:5c:
                    4c:1f:d3:93:b5:af:30:83:97:05:13:6d:4a:e5:29:
                    6a:9d:07:2f:18:2d:73:b0:fd:78:a8:c1:4e:4d:0d:
                    7f:51:d5:da:73:8b:55:4f:a3:ba:0b:36:d9:c6:54:
                    58:70:01:9c:1b:f6:e1:2c:4e:ef:46:d5:a9:d2:6f:
                    4e:67:a5:d7:f6:f7:7a:54:a8:88:fc:c2:d2:10:40:
                    f3:c9:b0:e5:f7:2f:de:18:ed:08:cf:c1:4b:38:45:
                    17:23:70:f2:8c:98:bc:37:54:39:57:91:6b:5d:99:
                    b1:6e:d6:7e:58:11:17:c0:87:31:7b:4e:31:c9:65:
                    1d:cf:e7:d9:24:0e:e2:1e:50:16:aa:0b:0e:aa:14:
                    da:3e:ef:e4:e6:63:87:d0:78:e7:65:35:dc:e4:ab:
                    a0:1f:1d:0a:6e:cf:58:d7:5e:9e:36:54:58:3d:31:
                    53:86:b0:62:bf:69:b5:e8:ef:d2:fa:13:2d:81:b1:
                    7b:36:cf:08:cc:63:8f:9d:1b:ae:0b:b7:3c:21:20:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DF:97:F3:62:10:30:D2:BA:3C:ED:D5:A8:7C:77:DD:FC:CF:26:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/b4c484ff-803c-3145-9607-19b2f14a55fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffb0:8006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:09:8b:d5:8b:29:9e:3c:bd:a9:a0:ca:2b:d2:b7:a3:a0:
         6e:f5:00:7b:bf:d1:a4:26:2c:05:ba:5b:89:f6:85:a1:e3:47:
         f6:5d:a2:ba:7b:62:6d:76:d6:c4:30:8f:11:0b:54:5e:7c:42:
         70:fe:5f:a1:32:2d:89:3d:d5:f0:9c:78:ec:56:a7:fc:e4:28:
         46:cb:63:72:78:aa:da:c6:94:46:a5:97:80:be:09:4a:e2:26:
         bc:e3:74:3a:14:dc:4a:bf:98:d9:c8:5d:41:63:82:9e:59:47:
         ad:0c:05:81:79:a2:36:dc:ab:ec:e0:dd:9b:a2:ff:08:3d:65:
         48:e6:27:92:55:a7:78:29:08:0c:92:99:e6:21:81:61:60:68:
         3b:73:e9:cd:3f:71:92:e1:0f:4c:93:22:6d:26:11:36:35:ad:
         29:bb:d9:55:c8:88:b1:57:cb:e5:f2:86:a5:24:3d:3e:f2:71:
         11:05:81:8f:f8:0a:32:a5:5f:fb:83:11:af:94:76:8e:d5:23:
         c7:88:58:f4:3c:23:53:23:3a:e7:f3:11:0d:64:b8:29:f9:17:
         64:c5:aa:6e:9d:19:26:2e:7c:2b:bf:f9:54:01:69:d6:e4:66:
         aa:8c:dd:b9:5f:68:f4:fc:03:d6:da:df:37:db:c9:5e:c6:0e:
         9c:db:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:09 2026 by rpki-client