Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa
File:                     c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa (raw, json)
Hash identifier:          BdXv75TT6fyFEqHJ6s/XShLqtSjtMS7J0MBgO/P+kNM=
Subject key identifier:   B5:D4:7F:31:63:CE:C6:1B:F2:C2:9F:95:B6:6B:89:FD:0F:10:9B:57
Certificate issuer:       /CN=e6548981-a90b-40b3-ae72-e6f32d1b56df
Certificate serial:       010D0C9F4328584EE7BCAA73500B524F7E3E6B00
Authority key identifier: F7:90:76:F0:B6:06:4C:4E:EF:EC:2B:99:79:C4:4F:10:DC:44:EA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     11260
IP address blocks:        2607:b980::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/e6548981-a90b-40b3-ae72-e6f32d1b56df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/e6548981-a90b-40b3-ae72-e6f32d1b56df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:aa:73:50:0b:52:4f:7e:3e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6548981-a90b-40b3-ae72-e6f32d1b56df
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=18700891-e578-4673-be72-26534718f995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:cb:a1:9d:18:b5:37:79:fd:f5:8e:7e:4f:
                    9f:46:f9:12:e3:c4:dd:9b:74:2e:7d:85:06:02:84:
                    64:5e:57:61:55:77:38:40:93:21:9b:a7:79:f2:15:
                    b5:ab:53:8c:40:1f:49:4d:13:e0:cf:66:6c:b5:4c:
                    ea:97:39:92:8f:e9:76:7f:fe:3e:cb:ac:18:02:9e:
                    b0:3e:5c:4d:5a:67:bb:51:d1:47:2e:da:fa:d1:94:
                    58:97:25:23:24:18:23:c5:ef:45:1d:96:67:3a:a3:
                    f1:46:8e:c3:aa:d6:d2:b7:d5:63:1a:4e:3c:5a:48:
                    13:1c:8a:f2:5e:46:cb:0a:51:46:33:26:2b:72:16:
                    bc:44:80:85:8d:a4:ec:5d:b9:a4:ca:15:29:e2:17:
                    13:31:18:16:38:a4:b3:90:50:e4:cf:6c:28:46:fb:
                    0a:60:af:b9:cb:b6:5f:31:53:96:f1:80:7d:34:6e:
                    87:a3:e5:4f:d1:18:26:41:48:17:0d:57:f5:3b:d1:
                    23:48:4a:87:ac:f6:70:cb:fd:b3:f5:aa:02:d0:b5:
                    d5:c8:a2:a0:de:90:69:47:ea:cd:47:79:cf:81:af:
                    37:ea:5f:a7:65:11:0d:b8:66:8a:91:1b:31:1c:6a:
                    1f:dc:c3:e1:3e:22:30:ac:70:0b:34:5f:e0:ec:44:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D4:7F:31:63:CE:C6:1B:F2:C2:9F:95:B6:6B:89:FD:0F:10:9B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/c4388759-0ffd-33ff-82c2-a8181f9f4da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df/e6548981-a90b-40b3-ae72-e6f32d1b56df.crl

            X509v3 Authority Key Identifier:
                keyid:F7:90:76:F0:B6:06:4C:4E:EF:EC:2B:99:79:C4:4F:10:DC:44:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e6548981-a90b-40b3-ae72-e6f32d1b56df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:21:44:25:ba:50:9f:04:ce:96:19:9f:2c:98:d8:e3:64:93:
         0a:21:15:fb:ee:52:ad:85:5b:37:07:00:8d:8f:bd:97:f3:d5:
         f8:f2:96:17:72:8c:51:ad:9b:2d:14:fc:71:30:25:b2:a8:0e:
         54:c9:04:41:40:e3:06:d7:56:1c:90:9e:35:f1:c2:6c:eb:ae:
         e1:47:5a:48:2c:b3:21:1a:20:d8:1d:87:17:d6:fa:c3:4e:07:
         44:a6:85:34:ab:de:ef:19:53:60:f0:d6:a0:a5:58:b2:2a:99:
         1c:45:77:a9:a8:13:5a:8f:df:9f:0f:81:d4:7e:4f:47:6b:3a:
         a7:b9:2e:3f:4f:4d:48:70:1b:94:d3:21:61:49:98:85:78:f0:
         3d:76:68:79:08:28:f7:76:e0:1c:0a:56:dd:16:db:f5:9f:0f:
         52:95:58:9c:20:b0:e0:17:b6:3d:5e:df:43:bd:83:20:5c:4e:
         57:3d:ad:c2:33:f1:9c:e3:41:09:d2:4c:97:5b:36:37:32:40:
         86:5a:30:99:bc:78:73:ad:d8:5f:fe:70:b4:bc:85:b9:45:5a:
         22:7e:83:77:8a:67:3c:d3:65:b2:eb:a7:34:aa:e7:b7:86:3f:
         28:84:af:af:7a:a3:e3:bb:7e:74:d3:c7:35:9a:49:1d:96:cc:
         cb:09:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:21:18 2026 by rpki-client