Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bf52b0ef-86cd-36bc-9a55-974700ea4752.roa
File:                     bf52b0ef-86cd-36bc-9a55-974700ea4752.roa (raw, json)
Hash identifier:          SDwCiLp7hdw9LlHhryn8rVV+w3wgffZLuJ/GLrKRqhE=
Subject key identifier:   90:2A:EE:0A:0D:FE:85:6E:79:FE:43:AC:7F:05:52:9E:55:4C:CC:02
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584F69EB6DF4060AD57A094CD140
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bf52b0ef-86cd-36bc-9a55-974700ea4752.roa
Signing time:             Tue 06 Oct 2026 16:09:41 +0000
ROA not before:           Tue 06 Oct 2026 16:09:41 +0000
ROA not after:            Mon 04 Jan 2027 17:09:41 +0000
asID:                     6327
IP address blocks:        2607:ffb0:5080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:eb:6d:f4:06:0a:d5:7a:09:4c:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Oct  6 16:09:41 2026 GMT
            Not After : Jan  4 17:09:41 2027 GMT
        Subject: CN=13212eb1-c184-4de3-b8aa-2e7244953ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:7e:0e:df:56:42:04:ef:3c:e5:56:9e:02:
                    3e:60:5f:a2:9b:be:1b:d2:7b:c7:c5:3e:14:3d:c7:
                    7c:40:97:54:91:5e:6a:42:e9:fb:46:25:7a:55:9b:
                    61:d5:e1:60:67:b4:ab:8e:7d:6c:64:bb:71:11:7d:
                    15:75:6a:bd:4f:24:cc:34:61:d0:d6:b3:7f:ca:df:
                    4e:81:b9:69:a7:d7:1f:30:86:ea:ac:f1:7b:3f:c7:
                    16:d2:65:b7:5e:82:61:ad:dc:47:7e:47:21:79:f4:
                    49:61:34:a5:cb:21:21:02:66:33:04:83:44:58:1f:
                    a8:35:a9:9d:7f:cc:9a:a8:d6:cf:ea:04:18:cf:12:
                    8c:f0:cd:e8:13:ff:c2:84:80:fb:90:5a:91:56:a4:
                    15:f1:84:fa:29:72:b0:de:9f:c4:ae:67:c2:18:f4:
                    f8:66:90:40:70:09:a6:a8:4e:62:6c:32:c8:e2:df:
                    f6:1d:cd:09:c6:f3:c4:54:09:e7:1c:4f:dd:78:47:
                    d1:7b:50:f2:bf:2a:93:7d:0b:ac:80:a3:43:6e:ba:
                    8d:a5:d9:86:6b:51:a4:5a:39:5a:39:1e:9d:e4:c4:
                    07:f1:21:bb:2c:98:f6:5e:d9:43:07:fa:f0:8d:56:
                    29:66:58:6d:10:d2:0f:8e:60:0b:2a:b8:4c:11:f2:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:EE:0A:0D:FE:85:6E:79:FE:43:AC:7F:05:52:9E:55:4C:CC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bf52b0ef-86cd-36bc-9a55-974700ea4752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffb0:5080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:d0:2c:cb:59:ef:78:e9:c2:a5:a1:25:64:af:a1:cc:ba:
         81:e3:88:d9:e1:3a:20:0f:ee:c8:54:cc:da:07:54:17:08:4b:
         ac:75:fe:52:6b:39:aa:52:c2:a2:a9:67:0c:f9:bb:f8:14:33:
         7c:29:08:ee:96:8a:3e:45:d8:d7:f1:aa:7e:87:c0:bf:4e:f7:
         b9:47:cd:54:df:d0:0e:cf:54:9d:98:e4:f5:e7:11:58:04:46:
         79:7e:07:60:6e:39:34:62:ef:fe:c8:50:ba:c2:0e:4a:ae:f7:
         ee:a4:67:1f:4f:33:9d:c1:f6:df:7a:4b:f6:ee:fd:06:4e:f1:
         bf:7e:8a:ee:5f:ea:00:6e:98:99:bd:d7:ef:56:6a:e7:cb:9f:
         0d:54:18:b8:bd:22:8a:87:83:ed:ce:fb:fb:34:11:00:83:02:
         81:c4:9a:d6:27:24:61:59:00:be:47:17:6d:ce:0d:c8:7a:12:
         98:27:62:5a:4a:33:0d:e4:cb:4b:e9:22:a1:ec:31:ba:b7:f7:
         c6:0f:0e:bd:bc:be:e5:76:5f:76:67:6b:47:27:06:3d:f7:3f:
         b8:3c:30:9b:e4:c0:d2:52:58:aa:ee:52:6b:65:8c:20:0a:fa:
         0e:27:22:25:59:67:c7:eb:52:82:9c:33:02:fa:7c:5e:47:f6:
         cd:fd:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:14:23 2026 by rpki-client