Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa
File:                     36f08754-6d7e-3d01-9dbb-aa438925ebae.roa (raw, json)
Hash identifier:          CsAO1EWcjqN0mcMX2KMMt1WY4Dn6Sadf55w0b/ND5o0=
Subject key identifier:   51:FE:63:B6:4C:68:45:53:7F:BC:BC:84:93:14:29:75:34:E2:36:C4
Certificate issuer:       /CN=414cb704-0d20-4248-bc5a-2b33ce66329d
Certificate serial:       010D0C9F4328584EA798C2C4BBF94553C3079E00
Authority key identifier: 05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32181
IP address blocks:        2607:adc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:c2:c4:bb:f9:45:53:c3:07:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414cb704-0d20-4248-bc5a-2b33ce66329d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5cbf965c-b708-44a5-bfd7-6a9738dab95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9d:72:1b:04:c0:0a:d9:7a:c1:ad:ee:a0:2f:
                    fb:3b:f0:64:41:52:66:c0:6a:c4:62:a5:60:98:5f:
                    22:de:59:0d:55:4b:97:89:39:17:c8:c0:20:7b:11:
                    5d:06:cf:f9:6f:35:f8:4b:ce:c3:68:62:06:59:28:
                    90:1c:b0:0f:67:e6:c3:51:86:d3:7f:39:7a:41:81:
                    aa:09:fe:0d:70:36:bd:00:ab:ec:30:9f:3f:dc:12:
                    7d:c3:f3:c3:96:6d:82:78:31:12:6f:f4:1f:53:1c:
                    bc:9d:28:00:c9:32:53:bf:a0:be:53:7b:87:2f:ab:
                    75:2b:64:30:1d:45:44:6f:c4:a4:a8:df:7b:21:c8:
                    f3:d3:8e:20:3e:01:03:0f:df:13:f9:8d:ef:8a:e0:
                    e8:9c:96:b0:f8:9c:e3:28:f4:1f:08:c7:60:19:d0:
                    5b:d8:43:02:3a:52:36:aa:9c:55:90:6c:89:59:1a:
                    95:05:52:4b:71:52:e6:04:5d:60:0b:33:0f:78:59:
                    94:5c:85:0c:c1:75:42:b1:f5:31:c3:d9:4b:73:0b:
                    1e:02:e6:30:f1:fc:14:2a:ab:e5:eb:01:96:e7:25:
                    eb:70:96:5d:d7:9e:2b:eb:75:e8:ec:1a:54:f8:ab:
                    e8:13:29:84:0e:b2:f4:74:37:c5:ff:f1:50:97:8f:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:63:B6:4C:68:45:53:7F:BC:BC:84:93:14:29:75:34:E2:36:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/36f08754-6d7e-3d01-9dbb-aa438925ebae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d/414cb704-0d20-4248-bc5a-2b33ce66329d.crl

            X509v3 Authority Key Identifier:
                keyid:05:D3:B2:0E:01:77:B3:F0:76:0F:60:53:A5:55:70:7E:68:70:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414cb704-0d20-4248-bc5a-2b33ce66329d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:adc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:b3:56:e2:93:b5:31:11:f1:36:d5:a1:5f:0c:4c:5b:5b:
         af:d7:c6:54:06:e3:82:c0:03:97:1c:a3:10:51:4a:9b:d0:31:
         ff:41:e6:ba:32:48:be:17:e3:06:ac:eb:65:54:4b:1e:b6:d2:
         79:03:68:35:77:4a:7e:c7:1c:d0:f8:d6:b2:45:d0:04:93:05:
         28:89:bd:b1:8a:fa:b7:d5:92:81:ad:2d:4f:93:6a:58:fb:58:
         ff:fa:5c:4d:99:5a:ec:ce:bd:fc:a0:49:60:1d:68:90:f6:6a:
         bc:1b:ad:b9:86:16:00:dd:01:9a:6d:84:e4:85:24:b9:e6:66:
         52:a9:76:82:9f:25:d8:fa:17:78:e8:89:06:a8:3b:e0:7b:19:
         0a:9f:5e:da:13:10:24:49:e3:1e:f4:45:6e:75:35:fe:c5:78:
         de:f3:d1:6a:b4:1f:61:fd:80:2c:8a:48:da:a5:38:6f:72:a0:
         f7:70:cd:1b:53:2a:40:03:6c:91:e5:c9:23:fc:dd:e9:c3:2c:
         85:a5:bd:95:c0:ff:78:d9:3f:c3:44:c3:c9:3d:c6:35:db:cf:
         38:db:2b:52:7d:29:e8:f6:41:34:55:25:62:84:0b:e7:c8:2c:
         4c:b0:8e:88:7e:8b:19:47:a0:3d:00:b6:26:41:6b:97:78:8c:
         9e:8e:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:00 2026 by rpki-client