Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa
File:                     d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa (raw, json)
Hash identifier:          6hKIMiUd7haMyjcUpSaMV01yjj2wKUXICN4rxSs3nXw=
Subject key identifier:   4B:D3:CC:4B:37:14:9C:25:B8:CD:C0:E6:0E:15:E9:F6:43:13:A6:34
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584ED001F57CE82F4180BA03AC80
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     11260
IP address blocks:        2607:fbd8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f5:7c:e8:2f:41:80:ba:03:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=9cd4fd83-c9d1-4bf7-aa73-a1ff9c4dafdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:ff:dc:43:bf:b9:68:dd:0e:ce:33:f8:d0:
                    5a:c1:c8:46:49:bc:c6:45:b8:38:d2:7e:97:bf:53:
                    27:a6:86:d1:b4:8d:bb:3f:7d:84:76:24:23:f2:05:
                    85:6a:91:db:cd:1b:5b:c7:50:03:8f:69:bd:50:98:
                    f2:2a:74:00:3a:95:a1:13:d5:2b:df:7e:88:b6:73:
                    7b:5c:de:56:bd:ef:bd:3d:07:d0:68:69:34:f4:2f:
                    da:88:c0:d0:43:67:79:da:80:74:c5:16:d9:fd:fb:
                    38:dc:d9:70:b5:8b:da:7a:59:dd:c2:84:61:25:f1:
                    fb:8f:d6:0c:7e:e7:da:b0:76:36:74:21:df:9d:3f:
                    1e:d3:ca:0e:a7:34:30:3d:0e:f4:6d:1b:d5:08:84:
                    5e:be:66:50:0e:fa:96:d4:5f:6f:db:10:9f:d9:6a:
                    37:3f:40:75:d5:10:20:a6:29:bc:ce:cc:e6:ad:2f:
                    2c:a3:e8:2f:45:47:a8:a1:13:db:47:16:3d:f5:8c:
                    89:4d:2e:99:d3:40:06:c7:e2:9a:45:ea:60:46:d3:
                    34:e7:e0:ed:a8:26:93:16:ed:38:48:a6:01:40:9a:
                    95:fb:9d:6c:09:41:6c:fa:b8:e8:60:a2:cb:64:cb:
                    37:a1:3a:e4:42:e0:37:89:78:b9:5d:9f:4d:4a:43:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D3:CC:4B:37:14:9C:25:B8:CD:C0:E6:0E:15:E9:F6:43:13:A6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fbd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:d1:fd:bf:6f:f0:67:b9:53:e9:4f:93:87:31:ec:c8:7d:a2:
         9b:60:b0:1e:9f:88:5b:c4:1d:0e:87:8d:98:fe:6b:b4:0e:ed:
         9f:f1:13:da:7a:aa:e4:93:cf:37:cb:90:b7:ab:68:94:2b:ba:
         b7:c6:c0:3a:7d:28:8d:f7:30:ed:4d:17:65:14:90:db:22:a7:
         e8:2a:24:0b:5f:00:b1:c8:89:a6:b0:23:c2:8a:7c:b2:e5:9f:
         87:4a:04:6f:0e:e8:f9:9a:45:45:7b:6b:e8:cd:a8:60:22:27:
         9d:bb:3f:15:e0:fd:f1:b6:24:34:3b:df:d3:ab:40:5a:a1:68:
         20:b4:22:2d:c6:bf:5a:70:94:73:df:79:23:aa:d7:ce:2c:c5:
         f0:11:5f:a4:db:cd:6f:80:57:91:74:a0:4a:18:6d:4b:c3:e4:
         a4:02:bc:1c:d1:2a:3e:20:ce:e2:b2:9e:a7:d3:47:6f:0d:f4:
         48:75:d5:95:ee:08:fc:ed:5b:4c:b1:8d:dd:97:47:b5:2e:9c:
         78:b0:49:6d:66:54:7d:64:91:6e:b2:7f:c9:d4:08:52:66:ce:
         64:cb:bd:e5:80:0d:5b:36:e5:6a:6f:c5:28:a4:cb:05:96:47:
         71:fa:dc:f6:49:b7:17:18:d2:00:9e:09:e3:50:48:f8:85:0e:
         ec:0e:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:16:11 2026 by rpki-client