Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa
File:                     2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa (raw, json)
Hash identifier:          UqpgL7qssTnTM0rpMgWJAydZvZDp5iwx//544Gn+WdY=
Subject key identifier:   BA:4F:AF:84:F9:BE:E9:56:28:F3:90:5A:78:A6:84:F8:DA:1A:09:83
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F4328584EA79A42BB014D0B398C122B40
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1828
IP address blocks:        2605:f500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:42:bb:01:4d:0b:39:8c:12:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ad2c92e-6f71-4088-97d7-6481b156c584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:0b:1e:2e:1a:d3:65:bc:3d:49:84:4a:12:
                    0a:97:74:04:79:08:7a:c1:a6:b0:b2:9d:d1:24:d5:
                    0e:97:5b:28:f1:e4:32:83:5d:3b:1b:7d:f2:c7:e7:
                    84:22:92:9e:2d:8b:3e:2b:fa:2d:e9:24:53:78:d6:
                    03:6a:b2:fb:3b:90:9d:df:31:c2:44:e6:a1:30:9e:
                    58:0e:06:33:e8:16:69:b6:b2:f1:19:0c:f5:63:88:
                    53:3f:47:45:c7:85:01:28:a4:8c:a4:0f:7c:13:39:
                    1b:93:e0:eb:06:62:68:20:07:79:fa:3e:aa:6e:7e:
                    7a:31:47:f9:63:9b:37:96:c8:38:15:e8:91:88:d9:
                    d3:57:18:3b:24:75:1a:e2:fb:f5:62:21:d8:49:fd:
                    f9:c1:71:cd:de:99:8f:4f:38:5e:e9:a2:13:ec:8a:
                    bb:bf:3a:60:18:ff:3d:b3:f9:b4:ce:fe:04:f0:ad:
                    46:5c:1f:0a:45:65:9a:4b:6f:50:82:b1:f9:69:ba:
                    41:90:b6:14:93:7d:dc:19:d8:4f:7f:c8:30:4d:61:
                    85:99:5a:4c:9e:d0:d0:90:09:1e:17:97:30:9f:78:
                    8c:41:b2:75:63:69:6c:23:4f:7b:38:d5:9c:fe:eb:
                    43:56:7e:f4:a5:6b:b2:1c:fc:70:57:b4:8a:04:2c:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:AF:84:F9:BE:E9:56:28:F3:90:5A:78:A6:84:F8:DA:1A:09:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/2927b48a-f5fd-3d87-a95a-0b605e6b2e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:6b:f1:8b:2c:79:ab:78:7d:5b:16:fc:01:8f:b3:fa:45:
         a7:30:dd:36:24:bc:8a:a3:e3:26:02:4c:35:df:ac:60:c7:09:
         bb:0d:64:c2:4d:e0:75:12:53:76:16:c5:d2:b7:7b:94:45:37:
         13:41:fa:cb:db:63:ba:0c:52:da:c9:fb:e0:b5:24:31:bb:a8:
         99:5b:19:ba:c1:22:ab:13:29:11:ff:b8:3f:78:62:e2:81:70:
         80:e1:fe:b7:1a:f7:7b:a9:3e:25:e2:7f:e6:03:44:8f:1d:70:
         21:d3:22:0a:48:a5:66:a1:42:b4:b0:c5:9b:88:fc:a2:64:97:
         de:0a:c3:d8:f5:0c:7d:d7:d3:89:1f:38:63:47:cd:71:cb:56:
         e1:4e:e9:69:62:de:a5:1b:a8:45:74:81:2b:e4:7e:f5:e0:ba:
         09:57:9e:aa:26:a8:4d:e7:72:e4:4f:46:f8:e1:c7:46:41:29:
         6f:0f:75:98:1a:9c:f8:f8:6b:b5:cd:c8:78:9f:22:fd:5b:0a:
         f1:96:30:53:18:f7:2a:77:53:ce:cf:68:73:f9:fb:20:d7:5e:
         f3:9e:25:95:e7:5f:31:99:01:e5:69:d3:be:55:67:4e:d3:9e:
         5c:42:89:9d:ef:de:62:e9:8f:55:bd:f1:f4:7d:0b:d0:b8:b8:
         e2:9a:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:41:51 2026 by rpki-client