Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
File:                     f7f4c100-078c-3097-ac67-9c6eaa96367e.roa (raw, json)
Hash identifier:          H2X+UBiXXX7u3ptv/d3TzuBC56QV9rT+cyiPq/8yfoY=
Subject key identifier:   57:6B:74:8B:C1:9F:B7:03:2F:DD:B2:A5:47:47:DE:A0:68:86:B6:33
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584EB6E1A19782C665907C775C00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     399045
IP address blocks:        2606:d640::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a1:97:82:c6:65:90:7c:77:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=c9d7d5cb-7988-4d34-a467-2032dc5b03c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:77:8b:89:4f:df:18:46:34:c9:56:c8:8c:
                    a5:0d:e2:65:97:7f:0d:00:b3:38:dd:50:0a:f2:e9:
                    5e:38:dc:5b:3f:d5:38:9c:d1:f8:e3:54:62:c8:75:
                    c4:e9:b2:3c:1f:2b:ca:54:9e:64:ce:a9:55:ca:04:
                    f5:a1:ef:f4:e8:16:49:5a:5d:f4:07:70:26:4d:88:
                    61:f9:dd:de:b8:9b:ae:1b:26:4d:3f:9c:c9:8f:06:
                    9e:df:d3:14:9a:a9:f5:7a:6d:d0:c4:34:44:da:98:
                    78:15:a8:5e:2b:48:4d:66:11:00:13:96:1e:24:7e:
                    1e:f2:46:6d:d9:03:33:1a:3f:be:04:00:14:2f:38:
                    d5:0a:85:f3:5b:7a:c4:c8:c5:02:50:3f:f8:db:7c:
                    db:8e:f4:2a:e7:31:4b:7a:10:0a:93:c1:4a:de:1d:
                    fa:7a:fa:b5:7e:8e:84:d0:55:e7:90:7f:de:85:ad:
                    68:9d:b4:98:1b:28:98:3c:18:89:96:13:06:47:e9:
                    d1:f6:6b:97:9f:d1:f4:ae:4f:81:6b:09:96:28:62:
                    ed:73:6a:1f:b2:22:29:71:f4:87:a8:f0:0e:d2:26:
                    10:df:2f:48:6f:39:66:73:67:10:89:76:03:4b:16:
                    2d:5d:a6:f2:55:54:0d:17:22:2b:eb:e8:c6:f5:84:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6B:74:8B:C1:9F:B7:03:2F:DD:B2:A5:47:47:DE:A0:68:86:B6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/f7f4c100-078c-3097-ac67-9c6eaa96367e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:d8:c2:8e:da:8b:5d:06:6d:fb:ba:d4:9c:9e:36:a9:9d:
         24:e1:fa:15:37:df:92:94:89:4b:41:d5:eb:9f:d2:63:c4:cc:
         85:61:ec:5b:2d:e0:0a:64:20:9d:b4:1f:da:da:b9:97:db:96:
         5d:22:10:ec:51:61:78:42:32:ff:05:4e:87:48:cf:f0:05:93:
         ce:75:5d:42:9f:cb:e0:6a:e4:24:6c:bd:8b:e4:c1:e1:19:14:
         1c:b3:a7:2f:ff:2b:7b:96:d7:b2:0a:b4:2a:c6:8d:01:c7:c9:
         0c:e4:bf:d1:3f:23:2b:b9:1e:d7:31:0c:24:e1:a5:27:e0:ea:
         8e:5e:59:0b:2d:b8:68:55:f7:82:f8:ac:56:3b:c9:e1:4b:b5:
         5b:d9:6f:fb:c8:c3:66:07:68:e5:61:f5:97:15:82:9a:9e:92:
         3e:46:69:2e:0d:b2:60:b2:03:c3:80:3f:f3:94:62:9f:e4:be:
         29:12:e7:be:77:8c:f0:72:31:24:e2:14:fc:65:81:8c:9b:49:
         37:a9:dc:a6:8e:29:59:ab:b0:98:36:ce:23:4c:a4:13:fa:50:
         c8:ad:b8:2b:c5:cb:e7:ff:f8:b8:4f:46:a1:10:de:91:0a:4a:
         12:ed:93:49:c2:ad:e3:93:d8:c4:1e:81:b3:d1:a9:b2:3f:69:
         f0:83:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 14:35:47 2026 by rpki-client