Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa
File:                     58f07506-97c8-3904-8b06-4a0f88e44d70.roa (raw, json)
Hash identifier:          n3M6JeuhmcdjZUe8ME/1c2D+bxjCo3NykoyFIc2+odA=
Subject key identifier:   19:D3:B8:CD:14:40:82:B0:04:AF:0C:2C:D1:02:8F:2D:D6:6D:9A:FC
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584EF18207423E26BB4AE5B04150
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     31942
IP address blocks:        2607:61c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:07:42:3e:26:bb:4a:e5:b0:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=8c8d15c6-43fe-4956-994a-cba395875f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:47:ad:a4:59:7d:78:25:e6:e5:11:bd:0b:
                    e1:62:b1:27:de:0f:dc:3e:64:9d:8a:e3:61:41:c0:
                    6b:62:b0:87:6f:e5:a2:f4:ac:7b:24:52:c6:2e:f3:
                    ff:5e:60:01:ad:54:d6:cf:68:0a:f0:8e:4b:bf:0c:
                    38:3a:c6:9e:58:56:7a:6e:b0:67:5e:ba:c3:90:ea:
                    ab:67:b8:63:31:94:97:c1:26:f8:72:a9:3b:1e:3c:
                    6b:c8:b9:32:5a:f5:50:f2:f4:0e:a3:cb:8d:d7:6b:
                    6c:0b:d8:d2:73:3d:14:21:6d:14:22:7f:ca:28:7f:
                    5d:7f:2e:cb:16:9c:85:c1:17:f7:58:56:95:cc:d3:
                    b7:7e:1f:23:93:81:00:3c:75:f7:b5:5d:e0:5f:d5:
                    c3:65:6d:ce:34:1f:71:3c:c8:72:db:6b:af:3c:6d:
                    90:d1:2b:4e:5c:ee:fa:04:10:43:04:f6:ec:ef:39:
                    fd:59:aa:09:16:3c:56:a3:f3:70:9a:e3:aa:e7:69:
                    6a:14:77:55:f2:1c:59:3d:6d:7d:22:0e:ad:ca:4f:
                    be:bd:74:60:b8:b0:12:30:84:67:38:07:b1:ec:41:
                    e3:ec:ce:4c:32:13:c0:91:aa:bc:b3:09:ee:d9:a1:
                    3c:0a:0f:24:b8:e0:ac:c9:a9:8f:01:4a:74:eb:d0:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:B8:CD:14:40:82:B0:04:AF:0C:2C:D1:02:8F:2D:D6:6D:9A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:61c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:fc:20:ca:e5:ab:45:35:66:a2:86:13:80:d7:83:34:50:
         5e:a0:14:9d:44:e8:d0:0b:ed:54:25:fb:d0:72:c8:f9:c0:3d:
         af:64:92:d3:f9:11:f6:0b:4f:c3:94:02:37:fd:c4:9b:eb:e7:
         4f:17:4f:85:f8:40:97:39:36:0a:52:d6:a2:03:af:00:f7:38:
         b9:b4:6b:ac:66:7b:cf:03:cb:a4:7a:89:3f:21:bc:4a:8b:ab:
         cd:84:80:1d:7a:5a:72:92:bc:2d:fb:8a:5d:fd:3c:0a:ea:df:
         c5:5a:b1:13:fe:d0:df:38:f4:22:02:7d:7b:8b:5c:83:f5:01:
         e9:a7:d8:6b:7f:5b:b3:1f:9d:cc:61:ff:31:ba:77:6d:01:19:
         83:0e:0d:4c:14:3d:dd:67:5a:60:06:89:f9:92:8a:f0:f7:d2:
         26:cd:33:47:0b:85:76:81:7b:b0:2b:70:7c:80:3d:ce:62:56:
         f0:b8:64:12:7a:9d:19:ed:c2:7c:3d:3d:bf:89:99:1d:4e:86:
         ef:bf:00:0d:6a:a8:93:ef:f7:72:50:74:e1:11:12:46:e1:e7:
         a7:4a:45:d5:29:76:50:f1:2e:39:ad:f6:64:dd:a4:26:ec:cd:
         1d:73:8f:f5:8a:f6:96:1b:08:56:b4:b6:94:f3:fe:de:53:4f:
         51:8c:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:31:54 2026 by rpki-client