Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/881793e9-177b-35e8-a8cc-e03342536776.roa
File:                     881793e9-177b-35e8-a8cc-e03342536776.roa (raw, json)
Hash identifier:          9auoxt2RHCGZhwWEZnmUkohFdqMj/suofpZSiBH+w0I=
Subject key identifier:   E4:FC:9A:A3:EA:FC:0C:30:C2:CE:0C:DE:8A:47:4D:71:50:63:4E:61
Certificate issuer:       /CN=c6d7cdcd-700c-4860-84dd-573f95f48e4f
Certificate serial:       010D0C9F4328584EC20C6FD66639DEA10D9A3200
Authority key identifier: 26:EE:39:F3:9F:3B:C1:05:EB:A3:E2:61:E0:60:10:09:29:70:96:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/881793e9-177b-35e8-a8cc-e03342536776.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     49286
IP address blocks:        2607:3a40::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/c6d7cdcd-700c-4860-84dd-573f95f48e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/c6d7cdcd-700c-4860-84dd-573f95f48e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6f:d6:66:39:de:a1:0d:9a:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d7cdcd-700c-4860-84dd-573f95f48e4f
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=a67bf95b-e742-4e0a-afd6-9cba4a570081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:95:e1:44:bb:76:cc:4b:94:17:1f:b1:71:0e:
                    f3:c5:c9:53:8b:fc:7f:f1:d4:13:b8:0c:e5:aa:8d:
                    4b:7d:97:f0:1e:c9:12:6d:cc:c4:37:ee:89:aa:41:
                    5a:e4:fc:6a:c8:d7:e4:3e:00:87:63:f2:f7:d8:8e:
                    5c:b9:c0:95:d2:d2:b8:eb:e8:10:6f:19:af:30:5e:
                    f3:4d:e1:79:c9:9a:dc:4e:e9:ca:8f:e6:1d:f6:e6:
                    0a:6f:8d:5c:ef:dc:fe:11:90:2b:36:7a:43:3e:d4:
                    d8:c7:05:7e:f2:08:73:96:54:0f:64:db:d5:98:ca:
                    81:f3:7f:39:f7:cb:3e:f7:82:db:0c:0d:63:93:01:
                    71:dc:fc:e5:3a:7b:a0:e1:e2:73:7f:a8:b7:c2:26:
                    f8:b8:46:53:07:41:15:fa:4e:57:a8:ca:67:49:6a:
                    55:0a:e9:d0:b8:6b:2b:cb:a4:f0:7d:4a:db:45:45:
                    45:1d:50:46:92:4b:b6:fc:f6:7f:76:33:9d:7c:02:
                    9a:31:4d:0e:1a:c4:d5:e9:ed:cb:d4:5c:9d:0e:a2:
                    f9:67:67:7a:33:56:e2:11:68:cd:0e:ae:5d:f8:90:
                    b0:9f:bd:8f:42:0f:74:de:93:32:38:97:0e:b5:72:
                    67:d8:3e:ff:97:31:92:ad:26:ec:85:55:2d:67:10:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:9A:A3:EA:FC:0C:30:C2:CE:0C:DE:8A:47:4D:71:50:63:4E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/881793e9-177b-35e8-a8cc-e03342536776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f/c6d7cdcd-700c-4860-84dd-573f95f48e4f.crl

            X509v3 Authority Key Identifier:
                keyid:26:EE:39:F3:9F:3B:C1:05:EB:A3:E2:61:E0:60:10:09:29:70:96:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c6d7cdcd-700c-4860-84dd-573f95f48e4f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3a40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:e2:76:cd:af:9e:48:df:4b:9f:2e:4d:9b:61:da:ed:09:
         b0:a4:2b:7a:b2:01:cb:2e:1f:de:82:31:04:12:99:47:06:60:
         55:48:68:bd:c2:a9:7e:97:b8:56:0f:84:b7:73:22:5f:f7:f9:
         53:dc:2e:4f:bd:4c:46:78:c1:c1:fb:df:0c:26:af:e1:4d:9d:
         c0:41:69:7f:db:45:6b:56:d3:17:49:1c:89:7e:d2:cb:79:cb:
         db:1a:50:7c:26:06:d9:82:8b:ad:f6:66:48:66:63:59:65:03:
         27:6f:e2:40:a7:93:54:3f:86:e0:3c:62:ef:85:b9:0e:bc:af:
         54:1d:f6:b5:65:4a:96:91:b2:94:81:bb:ef:fc:de:15:3c:a5:
         3b:18:52:12:f2:af:36:79:4b:b1:9b:59:1e:76:27:d4:7b:47:
         65:c2:05:24:d1:a8:62:f9:66:85:57:34:9e:27:40:37:4f:d5:
         2f:d4:d8:f9:e5:f5:71:c8:c3:db:30:68:01:81:ab:d7:1f:56:
         1a:09:d5:b1:b7:0a:2d:e9:69:83:5e:0c:6a:f8:4b:3e:9f:10:
         a1:9e:5d:8a:c1:64:d3:1f:74:08:cb:48:45:3e:5e:88:07:d5:
         79:1d:20:d5:24:65:f2:cf:09:8f:2b:e7:4c:78:2b:7d:41:3d:
         46:e3:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:06 2026 by rpki-client