Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa
File:                     adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa (raw, json)
Hash identifier:          /zRWmmZFhqq194PuZQu2q4QI6HXmsAlZ2Tdp8zgVzxA=
Subject key identifier:   D8:54:84:F8:EB:76:98:A3:77:CC:A1:D1:88:A3:F9:3C:3F:9F:4D:52
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584EA7965C8FBAFEB67F53E63560
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20148
IP address blocks:        2001:5c8:f7ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:5c:8f:ba:fe:b6:7f:53:e6:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db742475-c06a-40ba-89cb-0208fda53767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:2c:27:3b:d0:51:66:c0:a6:38:68:39:2d:
                    69:c4:67:0f:31:4b:21:a0:8f:ff:f0:b8:4f:86:41:
                    ee:3d:29:ed:17:bb:f0:9b:f0:2b:1c:2c:2b:fc:dc:
                    a4:aa:dc:18:1d:91:f1:e6:ec:08:52:f1:dc:59:56:
                    37:3c:55:e1:0e:b9:ab:a8:15:df:50:60:ea:34:9b:
                    f1:b8:7f:f6:2e:8b:54:39:d7:f9:e1:74:fd:33:30:
                    78:5c:d8:6e:ad:99:f3:a9:0b:7e:b6:49:d1:64:79:
                    67:b6:99:8a:d9:98:9c:42:2a:87:4b:42:0e:e9:5e:
                    bf:f9:5b:b9:4c:59:1b:a1:4a:d7:54:39:50:cd:42:
                    e3:ae:25:f9:df:36:b0:e2:c0:f5:c6:75:1b:0d:79:
                    8c:f3:70:92:48:64:b9:a9:14:7d:3a:49:2e:05:a1:
                    30:7c:a8:ec:43:c0:96:c3:ec:08:22:ac:1d:22:f3:
                    3c:e6:8c:31:ca:43:38:93:df:19:51:6e:25:58:24:
                    96:ae:c4:9f:7c:f9:eb:89:6a:f4:dd:a0:c5:3d:59:
                    61:b7:ba:56:dc:d6:20:4b:c9:61:2c:a8:cf:f8:8c:
                    f6:19:6b:48:2f:de:48:c6:76:fa:ad:89:78:d4:73:
                    69:42:61:4f:7d:0e:9e:6a:9c:18:a9:c7:6a:5b:35:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:84:F8:EB:76:98:A3:77:CC:A1:D1:88:A3:F9:3C:3F:9F:4D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5c8:f7ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:04:35:9f:40:b5:84:7f:50:b4:56:e7:c5:82:b9:cf:fa:
         14:ca:9c:d9:c0:a2:73:cb:77:e9:d1:71:ce:2a:3c:46:bc:51:
         39:5e:ad:21:2c:69:6c:c2:15:c0:a9:1d:1e:2a:bc:06:be:94:
         cf:f7:a9:c0:54:9d:ba:73:c4:36:5a:3e:61:9d:05:aa:93:e5:
         52:f6:5d:88:32:25:75:ce:9c:4f:0a:81:8f:38:09:d9:98:95:
         e7:6b:4d:15:49:ef:99:60:3f:08:18:f6:45:a5:81:4d:97:c4:
         07:03:5b:20:ab:25:9d:c2:67:9d:86:11:20:f5:b6:a6:ba:f0:
         f5:ee:2d:e1:81:32:25:f2:a4:c9:82:3c:64:53:29:cd:31:c0:
         42:fa:35:29:af:06:25:a6:47:d1:97:8c:b4:0f:dd:fa:40:95:
         9b:e2:b5:d6:71:6b:e0:e0:b1:a8:63:ea:be:d3:05:9b:0e:66:
         b4:f4:38:96:12:e6:78:ab:57:22:d6:55:74:ae:c1:38:cf:ac:
         2c:b4:aa:36:ba:07:2d:57:2d:a1:60:bb:1d:11:26:1c:81:e7:
         3b:64:93:5c:91:a2:b0:8f:26:f2:6d:6f:aa:a4:f6:e4:88:91:
         1e:01:8c:b8:b1:c8:a9:f7:7d:5f:47:e4:25:f5:de:28:22:7e:
         6d:0f:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 06:39:26 2026 by rpki-client