Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa
File:                     a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa (raw, json)
Hash identifier:          khNqgk+mpViKF5goil9FnwzVi8i9XEm51T2aQD23zR4=
Subject key identifier:   8B:29:3C:C8:2B:66:32:0B:0B:C4:BD:42:D1:B9:FB:AA:40:B0:01:EB
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584EE0C1E74C8F1B2D9BE6F92070
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16527
IP address blocks:        2604:2900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e7:4c:8f:1b:2d:9b:e6:f9:20:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ab07b412-6ff7-4f78-b848-fdef393c977e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:93:9a:18:63:d5:e8:13:6c:34:54:9b:32:
                    24:b1:a7:23:53:5c:86:92:85:74:bd:63:6d:f6:ec:
                    5c:f0:d1:44:66:0c:61:d1:f5:c2:0f:bd:8a:e1:96:
                    16:82:44:e6:5e:04:34:ea:51:7a:62:02:25:55:7e:
                    92:fb:28:3d:5f:4b:87:b7:97:73:05:b0:7b:4c:61:
                    cd:23:68:a7:40:d8:9e:fc:eb:cb:1b:98:1d:2d:a9:
                    62:bb:35:7a:3f:fd:df:fc:6f:c2:d8:1d:3f:5d:16:
                    12:5d:9a:f9:34:ed:04:72:0b:65:ea:a0:c6:05:1f:
                    09:83:94:a0:84:0b:2c:a8:c8:79:a0:c4:d1:e2:0d:
                    2b:ca:fa:23:a8:49:1f:83:7c:ae:b9:ed:31:7b:2c:
                    51:85:53:f9:3d:e0:36:d1:3f:e4:6f:d5:2e:31:1c:
                    a1:2c:a0:38:7a:0f:ef:0b:fe:2e:3e:32:ea:93:6f:
                    db:f3:dc:de:30:7a:15:33:0d:c7:6a:6f:77:03:9d:
                    15:17:3e:28:00:62:4b:84:d6:f7:b8:cc:be:fe:1b:
                    e4:96:fd:9e:fe:6d:df:46:26:6c:04:30:0d:5b:9b:
                    76:21:98:8e:78:00:25:6e:bb:42:47:6b:fa:9f:15:
                    f8:ea:1c:64:03:4b:0a:bb:d2:05:59:66:13:48:9f:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:3C:C8:2B:66:32:0B:0B:C4:BD:42:D1:B9:FB:AA:40:B0:01:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/a22dfcea-20c8-34b5-8096-4e317fabb3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:c5:38:b3:44:bf:e6:0c:f3:cb:9f:da:9b:e6:11:f3:ad:
         3d:b5:e5:11:26:8e:39:38:e2:fc:fa:dd:df:f3:c3:22:1d:72:
         5d:75:94:4b:6a:59:50:be:47:bb:71:99:9b:ab:56:29:34:f6:
         43:ec:2a:27:cc:68:de:87:4d:7f:c7:b1:29:15:ab:e9:86:32:
         ec:81:26:5d:ed:11:b1:d6:37:bb:aa:22:73:c2:45:c8:a8:de:
         91:57:76:04:d9:0e:0b:1a:80:da:11:65:6a:54:e9:95:61:ee:
         18:8b:6f:b2:31:e5:2d:60:c1:fd:35:eb:54:46:34:3f:54:4f:
         0b:f1:4d:87:74:9f:da:c4:6a:b3:3e:6a:3b:74:c6:8c:bb:38:
         dd:30:c8:fe:2a:80:54:77:ff:8f:9b:3f:60:3a:72:21:9d:bc:
         d8:f6:28:ab:e1:50:98:62:65:91:f3:d9:6c:3f:9e:43:37:f7:
         33:78:c9:69:8f:97:d6:11:f3:eb:a7:58:3b:89:b8:13:ff:06:
         74:87:95:ef:32:47:ef:0f:66:f0:37:43:c9:10:28:12:dd:db:
         d2:31:7d:0a:18:96:4b:f7:9f:dd:df:22:22:70:3f:99:b4:a1:
         f0:21:1e:bf:63:44:07:2b:ef:82:7a:4c:10:c0:d3:0e:70:d1:
         eb:30:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:47 2026 by rpki-client